Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File:                     DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier:          lfRYC72s49f0U5ygKh9biOg8NuQmMBeySf23INQ4sNk=
Subject key identifier:   64:C3:EA:88:2F:5E:E0:47:36:3C:7D:79:02:BC:2D:E4:CB:F8:99:B2
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer:       /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial:       019356F68E8723785011B5E4F651A373935B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:19 +0000
Files and hashes:         1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: /ff51esljMV5xzrqfonTuq1G9mtOeeOUFjxOA9hUgIg=)
                          2: hThNsMvoOF0q-5_uweLYXpAQ4e8.roa (hash: YqqWlDh3aV5pTteTdWuTwbfIecmL2n2NBOfue0T8UTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8e:87:23:78:50:11:b5:e4:f6:51:a3:73:93:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
        Validity
            Not Before: Nov 23 03:00:19 2024 GMT
            Not After : Nov 24 03:00:19 2024 GMT
        Subject: CN=64c3ea882f5ee047363c7d7902bc2de4cbf899b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:27:f2:de:54:30:94:c6:48:75:0a:99:87:
                    d2:d2:b6:78:88:a9:65:06:cb:40:85:ca:dc:43:8f:
                    b6:4f:e9:b4:16:bd:e7:37:32:29:77:b4:53:c9:9e:
                    23:21:a1:ae:9d:31:4e:19:35:cc:d1:03:6d:f5:9b:
                    cc:e6:0e:f6:70:86:e6:63:7c:22:87:5f:9d:1c:00:
                    e9:46:40:f6:1f:5b:00:ac:0a:85:33:f4:c8:a8:1e:
                    17:b5:47:1e:da:5b:27:5a:90:f8:14:09:80:ec:1e:
                    c0:ac:9f:15:e4:51:7d:05:24:d0:00:7c:39:88:c7:
                    15:35:2e:0e:fd:d5:6d:3c:89:ce:a2:7b:78:e1:b9:
                    54:38:ff:8f:18:07:5b:62:7d:cb:97:c9:c1:27:2a:
                    35:52:3a:42:8a:ea:c9:2f:fe:c2:7d:8f:76:ea:5c:
                    db:a4:b8:fe:27:d4:92:7e:dc:23:c9:92:f0:92:ed:
                    78:ec:0e:78:64:84:01:dd:f5:44:aa:d1:fc:bc:2a:
                    62:c1:37:b1:34:ee:47:93:17:8f:81:72:9d:77:2e:
                    66:fa:26:52:c0:21:c5:ef:5c:eb:de:c6:73:07:ef:
                    35:49:dc:a4:b0:07:8d:b8:ea:ce:ed:41:ca:b2:f3:
                    c7:e9:65:b8:5b:4f:04:4c:a2:a6:9b:8a:6d:b5:99:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C3:EA:88:2F:5E:E0:47:36:3C:7D:79:02:BC:2D:E4:CB:F8:99:B2
            X509v3 Authority Key Identifier:
                keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:43:8c:4d:21:84:c8:27:8f:8a:60:b0:07:8a:31:b7:d9:19:
         dd:a0:54:80:3e:59:2a:3b:64:35:6e:7c:26:f1:87:32:a3:66:
         4e:14:39:1b:87:50:9e:c9:66:49:be:cc:79:ad:0d:c1:35:3c:
         c4:33:6c:b2:fa:87:f3:4e:2a:ba:f4:b6:74:52:bf:8c:76:1a:
         ea:cf:11:2e:8c:07:0b:a9:00:8e:81:db:df:50:c8:18:d9:85:
         af:9d:2b:d5:9e:f3:61:2e:34:fa:0f:d3:94:f0:0a:c1:62:33:
         3b:c4:dd:e4:23:59:72:73:41:0c:e9:b6:45:8b:c3:95:81:66:
         70:4a:84:fa:d5:bb:4a:14:8e:e4:22:26:bd:4e:e8:7d:59:b0:
         29:73:65:43:67:0a:46:44:c8:8d:07:9d:c2:e1:b6:ff:8a:dc:
         e9:a2:2c:3f:00:46:a2:3e:da:29:62:9c:e8:d9:58:31:e0:a2:
         e8:15:22:65:4d:13:ca:97:fc:fb:cc:b3:16:67:35:ae:e5:8c:
         33:27:bc:63:6f:24:e8:d6:89:0a:05:3e:2f:92:48:cc:68:c9:
         d1:66:1a:02:27:89:5b:65:ea:3f:79:2c:15:07:67:d3:95:00:
         d4:83:6e:05:54:bf:23:35:b4:6b:9b:12:30:f6:49:af:90:af:
         3a:79:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:32 2024 by rpki-client on console-fra.rpki-client.org