Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File:                     28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier:          b3F1kHdp1o7AhTDO6SgbMFY2jh/k2j/ZnlNiql/zcsM=
Subject key identifier:   EA:3D:84:0B:56:98:4E:C0:A6:A8:17:A0:DD:55:8D:E1:EF:B7:C7:92
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer:       /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial:       019359F78AE78589903A33A0C12E6D8582F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 17:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 17:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 17:00:15 +0000
Files and hashes:         1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: b3iCjxEqpT2OwJ56BNpQMkdHRJfqJ8/UusVnRO+gHYo=)
                          2: rejN9UQ62WpCliarayO8dsB0u8I.roa (hash: vWC27sw3c1Nm4b/Lj6Ng/zJxXPT4xY9K1cDSPh8e3YU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:f7:8a:e7:85:89:90:3a:33:a0:c1:2e:6d:85:82:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
        Validity
            Not Before: Nov 23 17:00:15 2024 GMT
            Not After : Nov 24 17:00:15 2024 GMT
        Subject: CN=ea3d840b56984ec0a6a817a0dd558de1efb7c792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:d9:83:84:1f:b2:9e:74:44:55:89:93:f8:
                    e9:54:e4:30:eb:6f:66:56:d5:9e:a5:e9:02:4a:c3:
                    d5:81:21:5c:5d:95:a6:cd:b4:7e:60:67:2d:a9:fc:
                    0c:e9:3a:2c:36:93:e1:ee:cc:0a:be:e4:d4:d0:f9:
                    55:4a:0c:6e:3a:4d:14:82:c9:0e:ba:d6:e4:17:00:
                    23:65:b5:68:ed:54:48:32:83:ce:22:ee:3a:64:65:
                    a5:34:0a:e8:4b:d5:9d:ea:87:77:ab:29:1b:28:31:
                    7e:c6:8c:ae:2d:9a:70:17:15:87:ec:ec:8b:d6:9d:
                    34:25:0f:84:2e:cc:22:12:d9:44:ca:0b:63:06:b1:
                    d2:3a:2a:6a:bb:d4:e5:6a:86:fb:20:73:41:fc:29:
                    c8:d6:37:2b:0e:f4:95:3a:27:e0:3d:db:68:68:ca:
                    cf:28:40:91:17:57:3d:c9:89:81:2a:b4:6b:1d:26:
                    69:bd:da:26:13:41:d5:50:1c:53:5c:83:d9:c4:ba:
                    4c:2c:3b:92:68:3d:65:ee:b5:78:bb:4b:c1:10:b7:
                    8d:68:b8:d8:67:65:7a:1d:fe:92:95:f6:b4:14:e9:
                    73:52:33:c4:04:cd:b4:e4:04:cb:19:02:fc:f9:69:
                    6d:78:0a:b4:f5:76:37:b7:c6:0d:d6:39:51:1e:e4:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:84:0B:56:98:4E:C0:A6:A8:17:A0:DD:55:8D:E1:EF:B7:C7:92
            X509v3 Authority Key Identifier:
                keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:bd:e1:0c:8d:c9:74:69:07:d1:f2:a6:59:43:1a:59:af:
         47:bb:dd:ac:26:10:f3:c2:3f:78:32:04:01:fb:5c:cc:9b:6c:
         5b:b3:0c:f6:6c:16:b4:80:bf:b1:4d:54:f1:46:05:5a:cf:b4:
         f3:f7:0e:a4:41:2a:3e:3b:02:b6:b3:bb:91:9a:55:bc:dd:09:
         e9:73:6e:ba:bf:a5:c4:09:82:05:f2:44:77:ac:d5:43:e4:3e:
         d5:20:79:95:d8:f6:7f:43:d1:d1:7b:a4:1a:92:32:64:44:ad:
         e4:7b:63:a7:87:01:d3:21:dc:34:e9:f3:32:4b:ce:2b:5a:43:
         fe:4a:d2:2b:ac:05:4d:5f:0a:aa:85:7d:02:cc:02:97:b7:6c:
         df:11:e5:c3:cb:df:fa:8d:f8:dc:11:76:63:2c:4d:53:04:29:
         09:80:34:2b:fc:01:4e:f8:f6:12:dc:3e:f4:2d:15:7d:f4:ae:
         4e:86:86:4a:ff:4f:7d:cf:5b:b5:2d:94:f2:1f:34:f0:82:5d:
         c2:b9:a0:f6:95:06:96:96:22:55:9e:f9:1f:b4:a5:06:60:70:
         c6:c5:24:2f:32:56:b7:c1:ff:88:eb:a4:61:8b:80:cc:4d:b2:
         25:b2:c3:c7:08:88:4d:30:a9:9a:32:ac:59:36:0b:f9:e2:c1:
         d8:11:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:04 2024 by rpki-client on console-fra.rpki-client.org