Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File:                     t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier:          NDmmyuAqtIroIRf2gtJznk2JwENQ6OyQguE/UJXXJM0=
Subject key identifier:   D3:D1:A6:84:47:D7:60:75:7A:D5:32:F1:30:4A:28:9A:73:0F:E3:FD
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer:       /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial:       01920FBC47FB862768DFFC971B5B19B47B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number:          12D5
Signing time:             Fri 20 Sep 2024 14:00:50 +0000
Manifest this update:     Fri 20 Sep 2024 14:00:50 +0000
Manifest next update:     Sat 21 Sep 2024 14:00:50 +0000
Files and hashes:         1: 1-oOpyBxBE4BaZVnWjH8whLV2uHA.roa (hash: SJSnidgx+Xd19Lndlt3W0TvFZpqS+2o9sZpHSciIF8E=)
                          2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: +YOIDK0lY2+CNRTqK5SEhKB/p3+JYiEQq61xf+agZks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0f:bc:47:fb:86:27:68:df:fc:97:1b:5b:19:b4:7b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
        Validity
            Not Before: Sep 20 14:00:50 2024 GMT
            Not After : Sep 21 14:00:50 2024 GMT
        Subject: CN=d3d1a68447d760757ad532f1304a289a730fe3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:fa:f9:22:ce:09:cb:b4:b2:0a:f5:ab:90:
                    22:74:f2:08:e6:bb:4f:ec:6d:76:25:40:37:86:d6:
                    c6:bd:cb:e5:a3:c0:f0:17:ed:cc:18:c6:d7:84:80:
                    b4:3d:4e:14:28:6d:27:8c:27:25:f2:ae:f0:d6:a7:
                    15:3e:19:c8:61:49:c7:1c:c6:49:b6:4b:2b:23:76:
                    87:a7:2e:21:a8:aa:b4:65:47:69:84:f3:3f:1b:2f:
                    80:d7:43:b2:fe:c4:43:96:38:ed:7f:bd:b0:e5:59:
                    26:af:ab:39:3a:33:a0:8c:0f:51:51:b4:e9:2a:79:
                    cb:f1:3f:31:98:a8:67:a4:19:51:7b:7c:d9:6a:3a:
                    a6:88:d1:ba:21:bd:9f:09:79:ee:87:dc:f2:8c:2a:
                    24:dc:3d:39:26:bb:be:ad:ec:6a:2b:9c:1a:47:26:
                    ad:3c:d2:7a:23:f5:03:57:b8:7d:55:45:54:59:e4:
                    a5:0c:e8:cb:32:57:f4:04:f6:a6:20:af:b5:2f:7c:
                    f7:db:09:5e:3f:95:a4:e8:ba:e5:a3:8d:78:08:3a:
                    c3:3e:f8:00:6d:e3:70:de:09:85:aa:df:57:f9:84:
                    4b:27:06:98:da:7d:58:de:a5:15:8b:c5:aa:cd:5e:
                    0a:f9:63:bf:d8:e5:7c:e4:02:59:f6:b1:c6:62:89:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D1:A6:84:47:D7:60:75:7A:D5:32:F1:30:4A:28:9A:73:0F:E3:FD
            X509v3 Authority Key Identifier:
                keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:74:b2:c6:d8:9a:e7:8b:18:c1:7a:6f:a3:53:1d:63:8f:
         70:7b:af:6f:85:99:35:3b:1e:ee:b2:ae:93:c6:22:23:98:0c:
         f6:c9:5b:a6:83:b0:03:52:6a:18:6c:43:1e:d9:36:b5:bd:14:
         1e:92:26:13:74:de:ca:ff:8e:66:69:2f:be:69:fe:a7:6b:bd:
         eb:95:1e:8a:f5:df:61:68:85:e1:3f:86:92:7e:33:03:be:ff:
         b6:6d:9f:d3:fb:b2:42:60:00:70:de:62:01:46:7c:b7:aa:be:
         3f:a0:0c:cd:40:b1:8b:1e:3b:85:be:0d:48:25:0e:d5:8f:39:
         01:df:1d:44:34:c3:21:61:1a:e8:95:f4:99:53:30:cd:bb:ff:
         5f:03:e7:5c:35:3b:86:94:db:da:44:34:ba:c1:df:b9:d6:16:
         95:e6:a7:ce:e9:23:9e:e0:4a:63:55:46:5f:14:ca:49:4c:d6:
         38:82:b8:bd:04:23:81:bc:04:94:56:b3:a3:82:df:bf:7f:cb:
         be:ad:83:8b:fd:43:63:cf:2a:1e:f6:d7:1c:0b:86:b5:b2:b4:
         0a:00:ef:86:b4:08:fa:91:14:fa:5e:60:02:63:28:35:23:d2:
         09:32:bc:ca:f7:4e:4a:1f:9b:df:de:ef:b8:ef:07:74:08:e5:
         1d:27:aa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:14:06 2024 by rpki-client on console-ams.rpki-client.org