Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File:                     DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier:          qMbxDu/zyzoA2sWXZ2S3823LQ7xKsxE4JBODAGYhEEQ=
Subject key identifier:   96:ED:27:70:C5:46:B4:D3:87:59:5D:E8:CD:E0:36:44:88:BC:D0:32
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer:       /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial:       0193579BD7349E6F7BEE9BB35CCBCD78DC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 06:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:51 +0000
Files and hashes:         1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: Uf1neEbpWYaFPFc+6/oBf8yBFsvBeKHw3ELP7tqDTCI=)
                          2: mf6lbFxmfNJZGO9LD453AtgsXLE.roa (hash: /akBcF8p+qqDnXIQl/LmDRlrY4kwlyHQnCYkz1JZQ2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d7:34:9e:6f:7b:ee:9b:b3:5c:cb:cd:78:dc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
        Validity
            Not Before: Nov 23 06:00:51 2024 GMT
            Not After : Nov 24 06:00:51 2024 GMT
        Subject: CN=96ed2770c546b4d387595de8cde0364488bcd032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:29:92:4e:70:90:e7:75:17:68:29:49:20:
                    de:e8:0f:d8:be:7e:9e:0c:e7:15:d0:7c:99:5b:f5:
                    71:01:53:db:b4:1a:5f:d5:92:8a:fe:7c:75:95:5c:
                    66:a7:0c:5f:d3:24:11:d7:42:c2:b8:71:c5:ab:3e:
                    03:54:e9:e0:79:a4:76:8d:e9:e7:58:58:14:63:cd:
                    57:19:38:e2:25:1e:5f:05:16:ae:4b:ef:c8:38:6c:
                    1a:1d:e3:8f:40:fc:e3:c1:91:0d:bd:56:5c:7c:14:
                    40:e3:52:9d:96:9c:c4:c9:8f:03:c7:e5:cb:69:c5:
                    ee:a3:d0:d6:54:c0:6d:b2:ca:02:c2:82:83:a4:0c:
                    18:61:ec:7d:6b:f1:50:cf:11:7f:e9:f6:7f:ae:e8:
                    74:b5:ca:10:64:14:e6:7e:82:f6:e9:2e:bd:26:6f:
                    b9:1d:bd:11:6b:20:42:fe:08:7d:46:70:61:f4:04:
                    e4:0c:3d:d4:3d:0e:14:7b:d8:69:28:61:6f:db:d5:
                    f4:d9:cf:60:28:c6:bb:67:0d:85:a9:ba:2e:7b:46:
                    fe:d5:e1:7b:6e:8d:f5:2f:d5:8d:59:c5:60:33:a0:
                    23:8a:1e:7e:a0:98:23:31:ab:ea:22:7b:88:d4:80:
                    72:7a:5d:2e:98:ff:63:ef:dd:6e:d3:b9:26:ff:f8:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:27:70:C5:46:B4:D3:87:59:5D:E8:CD:E0:36:44:88:BC:D0:32
            X509v3 Authority Key Identifier:
                keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9e:cd:35:d8:ce:dd:b8:ad:86:78:4f:98:70:af:09:c6:7f:
         8a:19:c5:d4:b0:04:22:ff:51:b0:8f:51:2c:41:33:59:3f:90:
         8d:cc:45:67:35:05:f0:31:91:b5:15:fd:c2:4a:ce:20:3b:a4:
         48:ed:dc:95:b6:49:8d:1d:b0:7b:f1:14:67:6a:f4:e7:fb:2e:
         e0:e7:c4:b3:3e:9a:3a:53:53:0e:1a:74:74:f1:52:1a:d5:a9:
         75:ad:0a:fa:49:8e:d5:9f:5c:48:b6:bc:6a:a4:d8:77:88:30:
         9e:1a:9f:54:f8:15:b5:38:ca:78:b6:65:cc:27:f6:d2:78:3a:
         99:2b:3a:a1:b3:ef:2e:24:23:84:fc:3d:96:f6:8a:41:e8:40:
         22:3d:e3:2c:3b:70:3a:df:01:5e:ea:53:11:97:0c:13:64:3d:
         82:2a:6e:41:1e:45:6b:79:04:8a:ae:46:ca:b0:f7:65:e2:a5:
         ff:40:53:14:e9:84:3b:a1:69:a9:9b:7a:39:a0:41:a5:09:45:
         96:b8:70:9c:33:c1:c7:2b:bc:91:25:30:06:f1:e2:5d:d0:ff:
         17:27:1e:34:ee:02:05:68:ca:d7:11:7b:74:29:b7:80:0b:76:
         f7:93:78:ec:f2:12:76:a8:75:1c:10:b8:8b:cf:f2:31:a1:46:
         43:21:51:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm9c0nm977puzXMvNeNw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDg0ZGRhYzUwYzU5YWVjYWYwNmIwOWI4NTczYTg2MmEw
ZWEzZGIwHhcNMjQxMTIzMDYwMDUxWhcNMjQxMTI0MDYwMDUxWjAzMTEwLwYDVQQD
Eyg5NmVkMjc3MGM1NDZiNGQzODc1OTVkZThjZGUwMzY0NDg4YmNkMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixApkk5wkOd1F2gpSSDe6A/Yvn6e
DOcV0HyZW/VxAVPbtBpf1ZKK/nx1lVxmpwxf0yQR10LCuHHFqz4DVOngeaR2jenn
WFgUY81XGTjiJR5fBRauS+/IOGwaHeOPQPzjwZENvVZcfBRA41KdlpzEyY8Dx+XL
acXuo9DWVMBtssoCwoKDpAwYYex9a/FQzxF/6fZ/ruh0tcoQZBTmfoL26S69Jm+5
Hb0RayBC/gh9RnBh9ATkDD3UPQ4Ue9hpKGFv29X02c9gKMa7Zw2Fqboue0b+1eF7
bo31L9WNWcVgM6Ajih5+oJgjMavqInuI1IByel0umP9j791u07km//i3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbtJ3DFRrTTh1ld6M3gNkSIvNAyMB8GA1UdIwQY
MBaAFA3YTdrFDFmuyvBrCbhXOoYqDqPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMt
Y2RlZTk5OTVlOWU3LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMtY2RlZTk5OTVlOWU3
LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJ7NNdjO
3bithnhPmHCvCcZ/ihnF1LAEIv9RsI9RLEEzWT+QjcxFZzUF8DGRtRX9wkrOIDuk
SO3clbZJjR2we/EUZ2r05/su4OfEsz6aOlNTDhp0dPFSGtWpda0K+kmO1Z9cSLa8
aqTYd4gwnhqfVPgVtTjKeLZlzCf20ng6mSs6obPvLiQjhPw9lvaKQehAIj3jLDtw
Ot8BXupTEZcME2Q9gipuQR5Fa3kEiq5GyrD3ZeKl/0BTFOmEO6FpqZt6OaBBpQlF
lrhwnDPBxyu8kSUwBvHiXdD/FyceNO4CBWjK1xF7dCm3gAt295N47PISdqh1HBC4
i8/yMaFGQyFRnQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:52 2024 by rpki-client on console-ams.rpki-client.org