Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File:                     0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier:          ddHs013xOWANhu8BZuGz+3eJ3AQaL3cnLQkZk/FESDc=
Subject key identifier:   98:D2:30:23:0E:4D:6D:55:75:75:31:FF:B8:41:CA:CB:4B:B8:B0:B3
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer:       /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial:       019353BEF60C4B17F16F085858A77AB1F166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number:          0774
Signing time:             Fri 22 Nov 2024 12:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:43 +0000
Files and hashes:         1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: 4kv/8PdzOHX42jRvnIma0F88i9F2xRT+Ic/7TPl025s=)
                          2: DH5fLipzXBIcyjH1A7M2f7u-T_k.roa (hash: axuBIpjnZTs9DMigNilhuZ+dPunuYVUNysn8M4aocb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:f6:0c:4b:17:f1:6f:08:58:58:a7:7a:b1:f1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
        Validity
            Not Before: Nov 22 12:00:43 2024 GMT
            Not After : Nov 23 12:00:43 2024 GMT
        Subject: CN=98d230230e4d6d55757531ffb841cacb4bb8b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:fc:da:6f:1b:28:15:ec:20:94:1a:3d:0f:
                    98:33:62:9c:9f:c3:d6:73:a6:69:ab:6d:75:84:31:
                    d1:1c:5e:6f:04:92:af:5c:05:a7:d1:58:6c:8f:24:
                    c8:22:9f:6b:2e:cc:ce:6a:a8:06:b0:57:6a:74:9f:
                    00:e0:6b:00:f9:41:df:e5:a4:84:95:e4:b9:6e:68:
                    86:bd:8d:c3:78:75:e4:eb:de:0c:d7:19:76:a7:94:
                    e3:f2:0e:b4:43:4f:f8:9b:4d:fd:dc:72:24:a6:4b:
                    c1:e2:87:c9:74:f6:76:0e:05:7d:30:0d:fc:24:c6:
                    67:69:a5:b9:58:7d:89:8d:0b:33:97:6a:2b:f7:7c:
                    1f:67:51:4d:bf:30:53:92:e1:9c:d9:14:ba:41:b4:
                    b6:2b:55:41:8a:59:d3:be:ab:94:b2:11:11:7c:ab:
                    ec:f3:86:ab:64:8d:10:04:5b:9b:86:ce:3c:b8:2a:
                    90:23:fa:64:57:d4:dd:d7:0d:33:1c:d0:d5:03:ad:
                    ae:3f:fa:81:69:00:5d:23:63:a0:fe:ae:93:b5:3a:
                    84:e7:20:ac:b6:e7:17:20:11:18:cc:29:e4:0d:dd:
                    7c:c2:d8:da:af:c9:31:b6:57:f5:17:cb:a6:53:1c:
                    a5:a0:f3:51:1a:e9:af:76:9d:22:84:9d:a0:3c:15:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D2:30:23:0E:4D:6D:55:75:75:31:FF:B8:41:CA:CB:4B:B8:B0:B3
            X509v3 Authority Key Identifier:
                keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:31:a7:31:19:9e:94:5a:4d:6c:6e:e4:30:e2:f9:77:96:73:
         90:c2:d0:07:5e:8d:3f:25:2e:1f:13:5f:49:31:8d:01:39:9a:
         c8:a3:43:45:cd:31:db:52:02:01:21:df:1b:3f:e1:8a:ad:99:
         cb:ee:91:c0:25:aa:bb:16:c7:89:93:ca:87:57:3d:f2:5e:56:
         f0:e3:af:e6:78:9f:c5:0c:00:6e:6a:e5:84:90:d3:6f:fc:19:
         ca:e0:b1:94:ea:5e:e6:ef:90:69:33:d1:d9:fe:11:18:ae:2d:
         f2:05:a9:26:9e:38:e9:9d:a9:a7:1b:0a:06:ba:5a:0f:32:98:
         be:54:50:c7:fb:73:b1:42:49:a5:89:df:0f:6c:a8:47:24:91:
         ba:80:34:24:9a:99:46:9b:07:8e:30:07:44:a1:68:ef:2b:f5:
         0b:d8:f3:35:e8:e0:e2:1b:03:3f:c9:27:e8:ea:18:c9:96:e5:
         29:92:93:18:bc:da:e9:52:02:4f:ad:40:c6:56:e0:d6:11:38:
         62:be:97:f2:34:e0:47:39:59:82:c2:2d:03:7b:6a:fc:36:a1:
         c0:89:64:b2:dc:8e:d2:1a:cd:f7:69:57:9a:3c:35:e6:ca:57:
         43:3c:6b:d0:cd:90:f3:3b:89:65:ac:64:d9:61:32:0c:72:2a:
         55:5c:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:10 2024 by rpki-client on console-ams.rpki-client.org