Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File:                     3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier:          PQhhiBB4BCfTGH9N5x6ELY47aSZ2XYanSkSa5MazqmY=
Subject key identifier:   71:29:CA:96:6C:56:EE:2D:C2:19:4D:C4:C5:01:41:C9:5F:73:02:BF
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer:       /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial:       0194060ED96634C4CC5203516F25B1806E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 03:00:23 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:23 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:23 +0000
Files and hashes:         1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: VfOlFs00nLrgf8Hb8v3/pYj3JZ0jhWNLamLERgWcp/k=)
                          2: JTPQ-3ZtL69HYLU6CBqZrlq1Z2I.roa (hash: bbxTO7bA9/ZeQUTjDTk/VKmsSgxo67NHwh6Y/9SVa6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0e:d9:66:34:c4:cc:52:03:51:6f:25:b1:80:6e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
        Validity
            Not Before: Dec 27 03:00:23 2024 GMT
            Not After : Dec 28 03:00:23 2024 GMT
        Subject: CN=7129ca966c56ee2dc2194dc4c50141c95f7302bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:42:23:3f:bf:60:e1:1e:31:1c:d3:6d:19:
                    7e:54:87:4b:87:3c:a6:c8:5e:36:6a:c7:ce:02:45:
                    6b:8c:0c:26:b3:96:ee:d2:69:55:f8:17:48:f8:0f:
                    aa:4a:b6:38:b9:82:42:f5:d0:7a:3e:c5:07:8b:5b:
                    fb:4e:63:33:ef:77:b7:0b:87:5e:2c:60:78:f3:41:
                    3d:a5:22:08:35:7e:1b:fc:ba:24:e8:8d:59:18:5d:
                    7b:76:2f:6f:93:be:90:2c:a6:60:e1:b9:62:1b:38:
                    60:83:52:6c:73:d2:4b:47:34:2d:56:a1:49:c6:b1:
                    f8:ff:70:18:c9:d9:0d:58:ef:23:1b:c3:26:cf:2f:
                    51:3f:23:fd:aa:86:21:e9:3c:be:d9:9e:c5:da:d1:
                    25:6f:b2:85:3e:1f:d3:98:fa:67:fc:8f:07:69:56:
                    52:94:be:49:fb:f9:2a:67:3f:2a:74:9c:34:15:29:
                    85:18:0d:29:86:12:ba:16:8c:1b:06:80:32:c6:ab:
                    0d:a7:f3:f4:83:17:83:75:f8:b3:e5:e0:17:45:31:
                    10:90:ee:c7:6d:5d:90:c4:27:42:65:4e:03:89:79:
                    4a:ee:3a:ac:d7:9f:e9:86:6f:25:10:f0:6b:cf:c4:
                    99:65:41:d4:a3:82:af:ea:ff:04:ee:59:17:79:6e:
                    4c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:29:CA:96:6C:56:EE:2D:C2:19:4D:C4:C5:01:41:C9:5F:73:02:BF
            X509v3 Authority Key Identifier:
                keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:e4:98:e0:62:50:54:a1:17:b2:eb:cc:c5:19:7d:da:36:
         b2:73:c7:71:f1:51:8c:d5:bd:0d:af:58:1f:7e:7e:17:9a:f4:
         95:30:e2:90:d6:a3:3b:d1:af:91:19:0a:e7:99:9d:15:b2:7d:
         a8:94:ec:2d:dc:84:6c:8e:d8:6d:a7:82:8c:85:28:b3:3c:eb:
         6b:d1:98:ed:90:88:c7:10:4a:17:7b:2d:2b:0d:e4:bb:51:d0:
         8e:d2:14:f8:e4:e1:2f:28:7f:d9:33:e9:50:27:18:eb:ca:51:
         93:93:f6:2e:15:41:2e:c9:2b:2e:82:8f:b9:bb:00:9e:54:30:
         64:ab:c7:99:f3:39:04:87:d1:84:de:39:0e:a6:3f:7b:be:39:
         7c:ee:30:4f:cc:12:6e:98:37:53:f3:fc:a4:52:48:29:9e:ff:
         33:b0:be:d3:62:f3:54:4d:74:d7:b7:07:8f:18:83:9a:e0:f2:
         b0:0a:59:22:fc:23:79:7c:bb:37:5b:4c:95:f5:e5:3e:23:79:
         09:23:81:c6:69:32:0f:0c:3d:9e:da:06:5d:ed:cc:ac:c9:06:
         81:6f:aa:63:36:e9:6a:4b:50:44:0d:01:6c:53:34:d8:d4:3a:
         16:55:e5:9b:06:9b:11:57:17:57:57:48:f7:42:0d:a7:10:c3:
         1f:48:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:40:20 2024 by rpki-client on console-ams.rpki-client.org