Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File:                     dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier:          mSisazmlNmWSV9WIdzW1MElanVMRnm05Bsb7aCAbAX8=
Subject key identifier:   A1:EA:0E:23:7C:FC:E4:CE:B4:7A:E2:23:5A:6C:56:1D:7B:AF:BB:7D
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       0193587891D52B571B91464E587684C6CDBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number:          0CC6
Signing time:             Sat 23 Nov 2024 10:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:56 +0000
Files and hashes:         1: A14cA0AuNc3roHwTS47YSjESwJk.roa (hash: NpH6jv0EuNj8+L3YFs4pxsbp9rptDsLxZsIwm6Csxx4=)
                          2: L1C-ryV_cxTKzB2_-3VP76iDww4.roa (hash: C/1YSRmWRyKzUpt0I1CWW05dqBU1epvKDtFMmYa6xPw=)
                          3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: qT1hUe46u9ZDLwXqwjJK9PwcryvCQAxP5GGZpVuAMwo=)
                          4: j0_pJ-9yv5JkalmBmhNNHbDthxI.roa (hash: QtDJ4M7dm78++jaQvdQXFCezqmW1TlKkBXhgDtJp/ew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:91:d5:2b:57:1b:91:46:4e:58:76:84:c6:cd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: Nov 23 10:01:56 2024 GMT
            Not After : Nov 24 10:01:56 2024 GMT
        Subject: CN=a1ea0e237cfce4ceb47ae2235a6c561d7bafbb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:22:91:0f:96:91:2a:01:f0:6a:99:ed:d3:
                    09:a1:dc:25:dc:d1:9c:5f:d4:f4:0d:97:f1:cb:4f:
                    13:4d:65:ad:28:8e:3c:69:88:73:d7:e9:fa:3a:62:
                    9b:b1:93:b0:06:54:c9:0f:f0:9f:b7:ba:43:64:44:
                    65:f1:f0:1d:ab:a8:6b:d2:85:51:78:4b:fa:18:d2:
                    ca:0c:28:60:41:e3:ff:5f:da:60:23:04:02:f4:8c:
                    d6:ea:5e:a8:16:8c:6e:bb:e1:08:37:b6:15:05:47:
                    61:b5:a4:a6:8e:c0:8e:06:e6:95:5f:69:c7:0f:a8:
                    a6:eb:c8:9a:04:6b:f5:53:03:0f:90:cb:4c:9f:ca:
                    d0:10:8e:77:88:d7:14:ca:5c:b0:6c:3b:2a:31:8b:
                    2d:b0:c5:62:81:03:d7:1a:22:3b:d4:3c:3c:1c:3c:
                    47:75:50:04:7e:e6:ea:95:37:40:73:19:9e:1f:90:
                    70:c8:73:17:35:38:6b:e0:8f:14:e3:03:17:0d:08:
                    d8:75:ce:72:97:ab:d7:14:97:84:5b:f1:5b:06:d9:
                    ad:e7:aa:b7:e9:81:76:95:a3:2b:88:36:74:a5:45:
                    a0:67:1a:a1:64:aa:f3:a5:1f:91:94:a0:77:09:cc:
                    c8:57:16:9a:4c:2f:b1:00:f9:d9:9e:4b:a9:49:d8:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EA:0E:23:7C:FC:E4:CE:B4:7A:E2:23:5A:6C:56:1D:7B:AF:BB:7D
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:82:ea:7a:a1:69:99:9c:af:47:06:f1:75:6a:78:72:a0:9d:
         35:7a:9e:ba:76:ab:4a:39:24:70:27:f1:df:68:75:45:04:ac:
         77:82:9e:e5:24:62:ef:d3:28:68:39:6f:a4:3c:fe:c2:e9:fa:
         0b:b9:6b:b7:0a:e9:c3:b5:89:f6:d5:ec:eb:0f:b3:b4:39:a8:
         c1:64:15:c8:bb:69:9f:4f:ae:35:1f:9e:4d:ae:71:16:20:0a:
         7b:62:f4:e0:53:7b:b6:67:84:27:d7:3e:e0:44:11:37:05:ff:
         ff:48:5d:3e:ad:38:a7:8b:7f:13:3e:e6:a5:f2:6d:da:6f:40:
         b6:20:c8:c1:42:ad:ae:c1:7d:22:8a:ae:0c:9f:f7:74:de:7e:
         d1:41:a1:eb:08:8b:aa:d6:12:37:42:99:22:1a:49:c4:4a:10:
         8e:b4:7a:b5:57:05:64:9a:3a:84:e9:bd:15:97:3e:c8:4c:a9:
         9f:d5:64:96:ef:32:0b:77:a8:45:98:b5:37:19:8a:06:9a:06:
         ee:a3:c5:1c:9d:dd:47:2e:16:e7:75:8d:7b:5f:f7:ee:a5:dd:
         c3:1d:77:6a:15:59:12:b0:fb:c8:11:31:8d:ce:b5:c2:aa:02:
         17:db:e2:fa:d1:eb:d2:e6:8d:5e:45:fe:75:0e:aa:e3:c4:bc:
         3d:49:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:55 2024 by rpki-client on console-fra.rpki-client.org