Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File:                     hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier:          L2Pp0Ixj898iJJFkXFVaIh2R6EhtMrx8s8ovSdtMmWU=
Subject key identifier:   E9:F2:64:9C:82:7B:E1:42:FD:8F:36:75:77:AD:D2:A1:4F:4F:52:B2
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer:       /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial:       019363D682ED72A1E8F2D66F7418D0FFBF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number:          0DB4
Signing time:             Mon 25 Nov 2024 15:00:22 +0000
Manifest this update:     Mon 25 Nov 2024 15:00:22 +0000
Manifest next update:     Tue 26 Nov 2024 15:00:22 +0000
Files and hashes:         1: BHnjuJooKvnA1jOSZl6vmXQjmDU.roa (hash: tnPrnkcL3cEF67bKbiAWPkeVhWotGn0Z1zJLcwWJiKI=)
                          2: S85cJVCevxzmXw4rRE4kiYrpM5M.roa (hash: KKZEgz8sIVXmsSTy1OOEJmU5iB1JH/JFG0WGlnD0p6U=)
                          3: VrW7vN1_JOG5zrE6Rwu3D9QA10Q.roa (hash: RMmsPR5Dj5DlLiTn/lBy4/txwbzsQxkOhcSUbyPZDtY=)
                          4: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: QVDPeCG3FFHQ1L6FDX+34SzkIGPUDYRNaxEr1HEL6ZE=)
                          5: iXuYjiMVbwReZewg5MqqY-la1Rc.roa (hash: dRwNIjeZSIGESEO1HXXh1aUKOS1Dh7ylA20t5Rvk3BE=)
                          6: xIvbIFq2GTRibPM3JvC73t-Jv84.roa (hash: S9PZ1tpiYt2eK0ybZNEtLZwz2erbqD7AXoSAUQWy9gs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:d6:82:ed:72:a1:e8:f2:d6:6f:74:18:d0:ff:bf:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
        Validity
            Not Before: Nov 25 15:00:22 2024 GMT
            Not After : Nov 26 15:00:22 2024 GMT
        Subject: CN=e9f2649c827be142fd8f367577add2a14f4f52b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:f1:5c:1c:70:33:65:8e:18:8d:de:5f:49:
                    bf:c8:77:03:cc:b9:56:87:7b:1e:ea:d0:21:69:20:
                    c5:11:40:62:eb:5b:ac:cb:65:d9:9d:a8:e0:80:eb:
                    0f:b9:30:86:27:fb:ff:40:a3:0b:a3:02:23:2f:20:
                    25:9d:fe:e2:64:c3:30:3f:51:3d:3a:2e:5b:5a:ec:
                    d8:96:30:4f:e1:c2:21:1c:d8:29:19:50:78:0c:5c:
                    ab:7a:85:44:23:04:12:0e:f5:cf:e0:e8:f6:3c:d5:
                    e0:d4:c8:90:68:72:9e:3d:96:73:50:ae:b8:52:0c:
                    40:81:45:10:44:f0:5f:ae:6e:d2:5d:82:43:19:f9:
                    3d:f6:41:66:50:15:32:6f:67:69:81:7a:e5:a4:fc:
                    56:fd:3d:2f:e0:34:e6:7a:97:1d:08:95:78:f5:e6:
                    af:2f:2d:b3:07:89:68:fe:d3:ca:9d:38:fd:43:dc:
                    a1:7b:46:80:f5:38:86:62:60:ee:5e:39:f0:20:e0:
                    09:c1:be:ff:1d:7a:07:cc:04:07:cc:1c:cb:93:d5:
                    5a:7d:46:ea:6f:28:ad:9d:83:a1:ad:50:ac:33:6d:
                    19:92:98:8e:db:74:16:5e:f6:03:d6:9f:bb:9d:56:
                    6d:ff:15:62:90:48:56:18:50:b1:2e:91:0e:07:92:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F2:64:9C:82:7B:E1:42:FD:8F:36:75:77:AD:D2:A1:4F:4F:52:B2
            X509v3 Authority Key Identifier:
                keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:c4:4c:3d:4d:3f:91:98:23:0c:88:30:43:ce:29:ae:25:22:
         ec:e2:f7:b6:eb:3f:61:e2:9a:16:97:19:2a:b8:64:ea:18:e1:
         6b:ff:9f:89:e9:c6:4d:dd:05:49:f2:b3:c4:96:e5:d6:e6:72:
         ea:e5:0a:57:9a:47:50:00:fe:f5:21:c4:7f:89:7a:45:a9:da:
         78:3b:a7:83:a9:97:bd:31:0e:b8:bd:0c:32:d3:a0:a2:fd:0e:
         65:80:2f:37:9a:24:16:0b:13:68:cf:83:16:16:de:0d:ec:15:
         e2:ef:4d:45:0b:ea:a7:91:d1:a3:e6:a2:6a:8d:5c:01:87:35:
         06:27:9a:f8:88:f5:25:35:af:3a:35:e9:c3:a4:2f:a8:d4:84:
         c4:d5:d3:79:18:f5:2c:a1:3a:92:60:45:8c:44:16:7c:15:49:
         4a:fd:7f:11:ca:29:0a:28:dc:06:3d:6f:ae:37:73:20:6c:da:
         11:78:75:ab:b0:ef:d9:a4:6e:bc:52:0e:96:36:cf:26:d2:ed:
         e8:3d:05:a9:66:9e:c0:00:a9:ed:ca:1c:27:1c:78:dc:58:53:
         24:72:88:8c:46:b5:14:53:34:60:6b:05:1e:06:d0:a6:41:9e:
         8a:61:35:a6:94:22:05:4a:fa:12:84:32:f0:f7:52:f6:d8:44:
         2f:91:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:48:21 2024 by rpki-client on console-fra.rpki-client.org