Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File:                     3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier:          EUNnzuXSuif4+80tHxRH4hacEcSO3yr/AuLiUNbh3rQ=
Subject key identifier:   66:AC:02:DE:09:88:74:6D:A7:10:A7:42:00:2B:0F:FB:B0:27:61:FE
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer:       /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial:       01935878DB0AF9703243997AB1CB18743A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:02:15 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:15 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:15 +0000
Files and hashes:         1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: 4IXF96bpndjUNwSqeq0/Smic+aGjJYkwZjWzouaP+IQ=)
                          2: V7bHv19pW1PXiDl3iSHoE1ISBjA.roa (hash: cJpKKpTcMgfbUrk+6tVd/xCAxzITuGV43CspOgClDVQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:db:0a:f9:70:32:43:99:7a:b1:cb:18:74:3a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
        Validity
            Not Before: Nov 23 10:02:15 2024 GMT
            Not After : Nov 24 10:02:15 2024 GMT
        Subject: CN=66ac02de0988746da710a742002b0ffbb02761fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:22:c0:fa:dc:f5:54:88:04:f7:56:b5:75:
                    58:95:a4:80:35:63:08:e9:bf:b7:34:68:cd:62:31:
                    56:71:18:b1:5d:79:2a:51:e9:d5:19:89:41:47:07:
                    9a:9c:a1:1a:92:96:6a:0d:0f:3d:01:fe:8e:8f:c4:
                    c4:aa:f1:29:34:e8:67:cf:c1:4a:f7:9a:97:eb:6f:
                    8b:c7:75:8a:d5:23:f9:c4:ca:21:08:21:15:88:4d:
                    49:87:8a:bf:97:d0:0a:7e:d8:f9:f0:eb:17:73:84:
                    76:40:b7:d4:22:24:9d:2a:6b:d4:e2:a5:63:6d:a3:
                    bb:9c:24:d7:87:8c:84:77:b2:99:41:74:0a:09:1b:
                    e1:92:6a:3c:0c:af:95:34:24:a4:cd:09:d7:df:37:
                    c4:75:3d:ab:08:6c:68:17:eb:f7:6b:b5:69:0b:7f:
                    73:fc:8e:0b:b9:d5:08:c2:55:52:2a:3d:31:63:c1:
                    be:03:0d:a2:17:83:f9:c1:5a:5e:ca:26:b6:b3:66:
                    95:09:dd:9f:fb:f9:ab:89:36:cb:08:68:6a:14:2a:
                    5a:62:89:ae:a4:a8:09:af:ba:47:b5:cf:08:09:34:
                    02:44:b8:2e:f3:8f:f8:22:88:6f:4f:cd:f8:4a:bc:
                    c8:51:ff:9d:87:2b:6f:36:ba:1d:f2:56:cc:49:4c:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:02:DE:09:88:74:6D:A7:10:A7:42:00:2B:0F:FB:B0:27:61:FE
            X509v3 Authority Key Identifier:
                keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:bb:c3:d5:fb:d3:c6:7a:2e:a9:42:2b:cb:8e:13:a5:7c:94:
         b7:44:03:76:2b:c7:60:54:47:56:af:f2:31:12:73:d8:e5:81:
         39:dc:77:31:30:66:8b:96:f5:a5:67:61:eb:41:89:50:06:8a:
         1e:29:4a:62:c0:8a:4c:24:7a:d8:83:c2:e2:b0:33:db:36:f6:
         73:ac:39:55:55:b9:f2:80:1b:bc:fd:40:7d:ed:9c:89:e9:2e:
         dd:79:95:bb:31:4a:a4:cc:68:1d:35:32:db:f6:bc:f0:8f:ae:
         53:a5:0d:6c:1f:18:d1:28:33:4f:63:5f:79:9e:25:c5:80:7b:
         49:fc:ca:e1:77:32:22:e1:9e:59:4b:20:7a:f6:8c:f8:02:20:
         4b:0a:eb:f7:ff:b4:b4:73:49:bd:47:e1:d6:6b:44:a7:67:bb:
         52:d3:5a:3e:63:42:8b:cb:36:c2:61:5d:e3:4f:a0:0c:b0:41:
         f8:ff:7b:0c:2d:7b:1e:08:d7:90:d5:1e:d4:e3:d8:ae:63:4f:
         d6:43:c0:66:31:36:59:72:ec:8a:28:f6:58:da:20:4e:ac:6d:
         b0:86:5e:63:87:bf:87:09:13:b1:58:bf:24:37:f8:4e:a1:1e:
         71:46:a7:c1:35:81:2c:4f:13:13:0d:57:d9:41:10:39:ad:74:
         fb:f3:2b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:03 2024 by rpki-client on console-fra.rpki-client.org