Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File:                     3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier:          4DqnqOioV6Gn7m64zrv8OtRW4KA0Vn9VAB/OS+UeHNs=
Subject key identifier:   0B:75:E7:A0:5A:77:8F:69:5D:38:CE:7E:05:91:90:42:41:AC:94:D0
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer:       /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial:       0194BA8471836D5B2FB17C9C7253D365E07E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 04:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:29 +0000
Files and hashes:         1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: 6z85zU7jadAPl5gOeY/ArFLL/aSqmU2RXLZFlueu+z0=)
                          2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:71:83:6d:5b:2f:b1:7c:9c:72:53:d3:65:e0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
        Validity
            Not Before: Jan 31 04:00:29 2025 GMT
            Not After : Feb  1 04:00:29 2025 GMT
        Subject: CN=0b75e7a05a778f695d38ce7e0591904241ac94d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:c3:ce:ec:5f:76:7a:65:48:48:86:43:65:
                    de:a4:7d:64:26:b8:b1:7a:57:bb:4a:e4:f5:e8:13:
                    dc:00:8a:15:93:e0:2e:f1:67:6a:21:9e:e4:26:51:
                    d0:a6:c7:77:b4:56:df:c7:29:b6:9a:ed:be:f4:fa:
                    b4:5e:ea:a3:e8:11:04:53:d3:c7:39:94:d0:15:7e:
                    fd:92:df:49:7b:3b:16:fe:5c:6c:fa:87:0f:e6:59:
                    56:82:e2:2b:9d:ac:ca:67:47:13:79:8b:29:73:35:
                    8e:4a:19:d8:cd:ba:d1:59:60:53:a9:79:13:49:cd:
                    71:e7:49:1f:ad:55:74:af:33:df:db:41:59:86:a4:
                    68:64:94:31:b8:e9:3d:02:56:34:c2:ed:bb:a0:d8:
                    93:a3:13:bf:dd:d9:f8:13:49:77:12:9c:a3:92:97:
                    4c:dc:15:5d:be:20:e7:7d:f1:d6:0c:ba:03:6f:44:
                    25:ed:fe:bb:b4:e1:10:91:d3:c8:fa:a2:3c:c8:33:
                    eb:d2:dd:67:af:82:ea:13:5a:66:de:45:9d:73:e6:
                    dd:37:b1:94:e4:39:9a:cd:b9:dc:84:ba:19:2a:51:
                    57:fc:1e:81:06:5f:b3:5a:a9:85:b4:e1:68:7b:15:
                    fc:d9:25:53:cb:8e:4d:53:ea:70:84:20:9a:b0:8b:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:E7:A0:5A:77:8F:69:5D:38:CE:7E:05:91:90:42:41:AC:94:D0
            X509v3 Authority Key Identifier:
                keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:1f:27:e9:6e:c8:30:1d:ed:6c:c5:b8:10:7d:9f:33:83:
         4e:f5:bc:db:b0:e8:58:d1:e2:20:26:c1:b2:86:86:cd:fe:03:
         1f:0d:46:c0:28:4c:44:55:35:42:b1:a3:13:3f:00:1a:9c:a2:
         a2:48:65:70:34:0c:ff:9e:b0:ed:1a:a9:6e:66:30:57:6a:05:
         57:27:c5:4e:0b:50:31:a8:74:08:bc:0c:d5:35:c9:b3:c5:e0:
         9e:a7:6b:f7:6e:df:c3:a2:76:4a:4b:bb:f7:ba:1d:79:66:42:
         41:4f:71:1f:b4:55:f1:64:ab:65:10:28:5a:6c:ad:6a:1f:5d:
         e8:41:d7:2b:bf:e3:db:f0:30:34:85:58:4e:4e:c8:fc:28:ad:
         1c:de:d2:9f:be:9a:9a:66:fa:69:c4:bc:27:fe:1f:0c:c1:01:
         77:81:7c:27:45:33:21:0c:b2:22:b5:24:70:c6:3e:f0:a5:60:
         1e:a1:99:ff:67:cb:5c:81:05:73:cd:3f:fa:9c:f1:f5:cf:23:
         83:af:45:ff:1c:ce:4e:92:b2:9d:cd:ae:2b:70:42:39:c5:17:
         7e:d1:ad:04:4d:d4:e2:fa:8f:88:21:d3:2c:3a:8e:80:1f:df:
         de:22:f6:67:20:de:6d:ba:de:a4:a2:92:1f:b7:79:62:52:4f:
         d9:0c:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:02 2025 by rpki-client on console-fra.rpki-client.org