Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File:                     Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier:          rswSw3x3LyDM1eSh2LyrJ0IrJe6S6K9qQ6dhgkLTUVI=
Subject key identifier:   7A:FC:36:69:B5:FE:38:E7:74:13:86:25:AB:4F:DD:95:AE:B5:65:2F
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer:       /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial:       01936AB4668E337396B0DC9AB2F57DAC08B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number:          0F10
Signing time:             Tue 26 Nov 2024 23:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:27 +0000
Files and hashes:         1: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: LEGuv+1EJFilLtwAqo2gnL8sxshzrXr4/DKLNl2LnX4=)
                          2: exgyu_KGsGbeaVlcVthg-y0EvHU.roa (hash: 6PAc8ldi5ha9CVZuwSLihq+IGewXVSz9rAvEIQomus4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:66:8e:33:73:96:b0:dc:9a:b2:f5:7d:ac:08:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
        Validity
            Not Before: Nov 26 23:00:27 2024 GMT
            Not After : Nov 27 23:00:27 2024 GMT
        Subject: CN=7afc3669b5fe38e774138625ab4fdd95aeb5652f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:15:82:7e:d9:7f:5b:43:61:6c:57:2c:3a:
                    3e:f6:3a:c9:82:96:92:11:1e:98:43:4a:41:1a:da:
                    5f:72:71:11:3b:bb:b6:28:92:25:11:46:bf:8d:37:
                    91:69:4c:da:85:0a:b7:ef:cb:79:73:62:5b:92:91:
                    6d:20:0b:fd:d5:5a:b8:25:56:d2:41:1a:a7:c5:f8:
                    1a:a0:28:8b:2d:6d:33:d0:6b:bb:92:f5:0c:b8:ed:
                    6f:09:3e:2e:8e:d1:15:82:05:cc:5d:65:2d:b4:0a:
                    09:1a:73:1f:7f:35:53:3f:91:90:c1:01:7b:64:0a:
                    69:57:df:6a:c3:a1:18:7f:8c:29:64:09:2f:0c:66:
                    1e:a0:08:5b:2c:8f:a3:78:18:64:78:f0:d6:d5:73:
                    7f:7a:68:5c:fb:51:1f:95:de:e0:85:24:39:f6:ee:
                    b4:8d:d9:41:2b:cc:9d:a3:5b:91:aa:0e:f4:1b:06:
                    1e:3f:db:a1:7a:7c:5c:21:cd:e0:80:bd:cc:23:7d:
                    88:f3:73:56:fd:80:cc:78:e1:91:1c:5c:b8:92:2a:
                    44:29:b8:2d:ac:53:16:76:dc:13:88:36:56:7c:ba:
                    e0:92:05:75:dd:ba:20:fd:b9:74:12:8b:e5:22:10:
                    24:50:22:5b:db:10:70:f7:f1:0d:38:66:83:57:34:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FC:36:69:B5:FE:38:E7:74:13:86:25:AB:4F:DD:95:AE:B5:65:2F
            X509v3 Authority Key Identifier:
                keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:ed:2b:54:1b:a3:26:9a:32:cb:fd:da:2f:cf:a1:fb:c6:
         23:02:2e:7b:af:55:39:de:1a:ab:4a:53:fa:fb:2c:0e:5f:57:
         6b:2b:d1:06:84:f7:8d:fb:30:e4:8a:da:ba:9c:ed:9d:36:30:
         70:c6:49:3b:91:9a:51:df:1b:45:43:0b:54:29:bd:8c:2f:7e:
         93:94:8f:82:3e:e4:58:fe:49:22:13:9c:2c:08:c6:8b:51:50:
         51:f3:a1:c3:c0:4d:c7:fd:c7:27:8b:ae:09:05:e1:2f:7d:6e:
         c0:17:63:0a:d1:fb:77:fc:65:dc:0d:2f:a4:1b:ca:56:4c:61:
         ec:fb:4f:aa:42:e6:54:4e:a1:a1:23:84:34:21:68:ba:5d:a6:
         35:1f:65:c5:8a:65:f9:58:7e:5b:d2:76:e4:55:af:72:29:d3:
         c0:c6:d5:9d:cb:1c:b0:27:4c:dc:73:e1:03:8d:fe:4e:eb:d2:
         94:04:c6:59:07:de:2b:fe:e5:48:a5:b4:43:1c:0f:12:04:1c:
         1d:b3:5a:67:d5:49:ca:67:d2:f9:6a:98:73:16:47:fa:0a:da:
         56:5c:e7:fe:5a:bc:6d:7e:82:19:25:2a:d9:a2:8a:a4:13:a7:
         c8:b8:ce:34:89:f7:7e:ff:de:ce:a8:59:87:d4:ef:9d:89:7a:
         80:b5:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:34 2024 by rpki-client on console-ams.rpki-client.org