Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File:                     3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier:          CaBNs4L2q9YpstJCEpYjYiS/3tJFoprgbjY+PHyG+Gs=
Subject key identifier:   40:87:36:12:F4:BE:83:16:1D:80:2F:39:D3:97:B3:FE:85:B7:63:38
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer:       /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial:       019351628A32A200E6AC0455DE63A09D5760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number:          12C5
Signing time:             Fri 22 Nov 2024 01:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:32 +0000
Files and hashes:         1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: mPole3qTndBlDIt1Q2g47oh4RYCzF0NUH9zqoG3Ll2g=)
                          2: CNkhtM1azS7zFOVcJSRWGXY-FxI.roa (hash: CQ2o2qrZ8xrVqQWXoEL/6KZCcIdKQ2hTQfJjYCCqiWQ=)
                          3: FNS0RWcIBc7fy3mFZEwf_J8-kt0.roa (hash: TkxzNuwxp4FRlSdpByiBli1AB/9VhPf7zbqysYXNsJ8=)
                          4: J5mcurTmXe8vCgIXi7UWzJgRnmw.roa (hash: 6oQQtlDzW3NJnEixW2+7R1eitFsUjJftC8vSn016wL0=)
                          5: RhTfyynBamLA7D27KlcImN_HcL0.roa (hash: 6eRSd80tP+v72zSwuG4Im1bZXG1shuWpjaZKjZw+9zY=)
                          6: mBKgNxaG6rRw8b8a0_oPuOpVVRo.roa (hash: 4QHUFwtra+l5tymbdJywMMYlhttUiCCKzgREulAwPGU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:8a:32:a2:00:e6:ac:04:55:de:63:a0:9d:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
        Validity
            Not Before: Nov 22 01:00:32 2024 GMT
            Not After : Nov 23 01:00:32 2024 GMT
        Subject: CN=40873612f4be83161d802f39d397b3fe85b76338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:8b:ee:a2:ae:cd:e3:4e:9e:36:53:70:05:
                    35:f5:ac:5a:f6:2e:86:70:ee:5a:d3:5e:40:68:15:
                    c3:a6:b5:91:6a:af:1c:d9:4e:7d:95:04:3f:ae:b3:
                    f2:97:5b:0d:ef:aa:26:9b:2c:33:a6:b5:6d:cf:a5:
                    fa:2d:fe:df:2c:ed:2d:92:b0:29:b7:aa:d4:e0:68:
                    4b:45:61:7a:82:82:27:d6:a7:1b:2d:12:ee:1e:a8:
                    63:a1:e3:26:de:d5:62:eb:67:3d:97:fc:ec:ba:fe:
                    b2:6e:27:45:ac:30:c3:12:84:1d:0c:00:93:d1:e7:
                    25:29:c1:c4:2c:b5:d3:25:4a:52:3b:03:1b:43:f8:
                    2a:79:65:8b:fa:07:72:39:91:e6:ff:a8:d8:78:65:
                    b3:5e:1b:ca:72:91:9c:d0:eb:05:31:62:4c:c3:4c:
                    cd:7d:b6:6a:17:cd:1b:32:20:78:c3:bb:8c:bd:6a:
                    e8:2a:fa:ac:bc:0b:d0:3f:22:9c:35:ca:33:39:e0:
                    62:bd:48:33:99:b2:11:f8:40:9d:16:55:53:eb:4b:
                    26:a8:9b:5e:ec:cd:a1:21:22:b7:f6:ba:df:fc:90:
                    9e:b0:e8:26:0f:89:81:ea:c3:76:ca:68:02:d7:c7:
                    2d:10:85:9d:97:95:6e:9f:eb:01:18:6d:59:7f:e9:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:87:36:12:F4:BE:83:16:1D:80:2F:39:D3:97:B3:FE:85:B7:63:38
            X509v3 Authority Key Identifier:
                keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:88:67:30:55:73:5b:d7:d3:bd:8f:ac:63:8c:35:da:d8:
         06:9c:34:e4:f8:59:b4:f2:38:6e:b9:61:ac:c0:66:c6:8c:e1:
         e2:6e:c2:88:66:57:19:99:f9:40:9d:a5:5c:4d:60:f6:85:32:
         79:35:f6:f9:ce:de:80:3a:ef:c8:4f:5a:ec:be:5f:e9:2c:ba:
         cf:72:53:04:bd:9a:5a:99:98:03:40:00:46:aa:ae:02:bb:06:
         a1:4e:52:33:ac:f5:c6:b0:1e:22:e5:fd:64:18:3c:f9:56:b0:
         a6:fe:aa:df:28:8f:e0:11:fc:e4:ca:5a:48:44:c3:39:17:d1:
         82:e2:56:b4:5b:47:f3:4f:ab:54:84:68:6a:71:e0:2e:42:49:
         79:7b:ff:20:a1:39:01:83:be:46:d1:e4:a3:5e:f5:e2:91:72:
         83:4c:e2:ae:1c:50:ac:53:9b:48:d5:0f:21:19:66:53:67:6b:
         63:c6:03:30:2b:94:ae:ed:4e:98:d1:e7:50:70:ff:fd:c8:4b:
         dc:8f:0e:a3:5b:4b:6e:24:64:2a:11:72:85:2f:1c:1b:52:b0:
         b0:72:50:4a:29:c5:c1:96:1c:c9:d9:dd:4b:3c:39:bd:bd:25:
         67:be:5f:6a:08:fd:fa:3d:6f:ce:e2:4a:e0:47:d3:7f:43:ed:
         b4:77:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:34:36 2024 by rpki-client on console-fra.rpki-client.org