Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File:                     ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier:          sWCdxeAPYxj5YolPBymJUmVNfiry2pb/971li414D1I=
Subject key identifier:   D6:9C:58:3B:A4:97:C8:2C:E9:29:9A:BF:A4:28:0B:A5:C4:F4:80:32
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer:       /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial:       0193549BB69A3E45AFFFC0AB624ABD44193D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number:          0443
Signing time:             Fri 22 Nov 2024 16:01:51 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:51 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:51 +0000
Files and hashes:         1: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: uGsGw3z0QcpcDl+RBtq4W84qoQ6Upy4gGkc6bCHj+Ng=)
                          2: wVE_EY0h6ik1TVqAstHrAeIKxfw.roa (hash: epFjjQ6RH3uJP/0Wcsqokjt+W7GXBlmIuOIBWKgh+as=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:b6:9a:3e:45:af:ff:c0:ab:62:4a:bd:44:19:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
        Validity
            Not Before: Nov 22 16:01:51 2024 GMT
            Not After : Nov 23 16:01:51 2024 GMT
        Subject: CN=d69c583ba497c82ce9299abfa4280ba5c4f48032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:f0:83:33:20:fd:47:e8:12:2c:b8:e7:24:
                    fe:40:0c:e8:cd:8c:41:a6:ef:99:a7:76:7d:24:f7:
                    0f:eb:cd:18:83:74:bd:80:11:bb:d9:6f:09:81:6e:
                    61:01:98:74:ad:06:d8:9c:12:8c:b0:aa:19:cb:55:
                    c3:79:43:0d:06:80:bd:60:fe:37:59:ad:29:36:4b:
                    0e:4e:b5:a2:03:88:c1:7d:cb:dd:5b:8f:da:dc:c5:
                    56:fb:19:95:50:de:61:03:76:14:12:82:8e:ca:a0:
                    c1:3c:6f:c2:f9:ab:7d:b5:f3:f0:c3:94:4c:46:08:
                    7d:4d:64:5f:30:05:15:9c:ed:ea:1c:a2:e5:1e:14:
                    85:70:da:2c:88:52:73:dd:91:27:7e:7c:1f:b9:41:
                    66:b6:42:d3:ce:70:b3:0b:7d:97:f4:03:5f:e7:fb:
                    71:3f:15:32:6c:d8:19:f8:5f:ca:63:66:db:2c:91:
                    08:68:2a:6d:06:b0:b8:94:ef:f8:53:26:4f:f5:e3:
                    76:09:02:ac:2a:ed:3f:2a:d9:7d:a7:52:8e:dd:01:
                    71:21:57:42:c0:38:b3:78:3e:43:5b:fd:34:7f:3e:
                    95:69:69:14:dc:12:e7:8c:76:c7:ee:35:13:4d:8b:
                    cc:0b:b6:4a:71:ad:a4:8d:d3:d9:e5:8d:45:01:ad:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:58:3B:A4:97:C8:2C:E9:29:9A:BF:A4:28:0B:A5:C4:F4:80:32
            X509v3 Authority Key Identifier:
                keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:75:26:ca:0b:c0:8e:c2:99:e7:72:e3:c8:be:65:4a:f9:d9:
         90:34:a9:fe:d8:03:4a:8a:4b:8f:f0:c9:fa:93:9c:1c:f9:74:
         0a:33:d1:21:4c:21:e6:89:a7:d9:dd:df:8b:96:7d:c4:87:bc:
         8b:bf:cf:d4:78:2e:f4:f5:9b:50:06:86:88:75:ca:31:8f:ef:
         08:99:68:11:6a:1e:7e:9e:6a:1f:25:1f:b7:55:b5:24:a2:fc:
         c4:12:5f:8d:45:e1:c0:f5:3b:c9:11:4a:94:87:d3:a6:14:e6:
         e6:44:38:95:d9:28:28:dc:bd:cc:85:dd:9a:28:72:e9:11:a7:
         ff:39:c4:6b:58:4f:b7:52:f5:6a:20:af:cc:65:8a:f0:2d:da:
         7b:b4:68:00:a9:ed:79:cc:35:06:6b:4f:6a:e6:86:5a:c6:57:
         e0:63:6b:02:4f:8c:c2:72:23:a1:98:27:e6:b7:7b:57:2c:2c:
         b7:74:48:50:03:17:3a:11:be:1e:32:9b:61:ca:82:13:0b:3c:
         c5:62:48:e9:ec:14:86:cd:e1:34:09:bc:c8:d2:69:50:e4:e4:
         81:fd:af:8f:ae:a9:66:73:11:53:9f:d0:06:09:b0:10:47:ea:
         42:23:cf:f1:e7:70:2e:28:41:b1:c1:90:9d:aa:3e:fd:3e:4c:
         f4:ca:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:41 2024 by rpki-client on console-ams.rpki-client.org