Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          ZgMHY7oyACj+ryF2JTf3VtK5syE5fHuvDdJbz/ACFtI=
Subject key identifier:   11:B0:BE:36:6A:62:2E:B7:9E:05:F7:E8:7E:9C:AD:89:A3:DD:F8:CC
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       019358776D9BCDBC5BF7E0B3C789BB4070AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          0CF1
Signing time:             Sat 23 Nov 2024 10:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:41 +0000
Files and hashes:         1: 4wzrzTSe4OfvtHyfgVOfhTZzVMc.roa (hash: qFI+zaBmAHIEttJ/kaFzk4Tl6WLETr7kE2kQg9lJGak=)
                          2: EBaJ8tX9jtDT7VcahZ9DBCEQPZk.roa (hash: luviHiFK4SwTUyLU+LLLaLzh2PpTgQOOezzG2s6dLMA=)
                          3: ImAQannuwVOgMf04hE6LPunycrw.roa (hash: zJsd46VKYNgDL6hcbpCT+zIswpeMrVhLjWxvjwGDoB8=)
                          4: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: lhx9bW+Yg80XY4ZhB84CvChB+H38hqrA3N01IhFQIS4=)
                          5: Z8V3bUVFVrj4WBbfnShyWJdIBSM.roa (hash: 6i7VUxj1PPr1MRhiqcCj5yeA7wDwGyA30/+OinHZmmI=)
                          6: g-v6DDuss9rksfc24s6W710G1LI.roa (hash: K/YDaCC/IQvSAb/B3stTC5jtYkenfJpOL0TXXg+Iap4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:6d:9b:cd:bc:5b:f7:e0:b3:c7:89:bb:40:70:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Nov 23 10:00:41 2024 GMT
            Not After : Nov 24 10:00:41 2024 GMT
        Subject: CN=11b0be366a622eb79e05f7e87e9cad89a3ddf8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:6b:cf:7b:ff:60:39:99:ae:34:b5:d0:44:
                    6a:7c:70:3b:4a:fe:9b:c8:27:1b:7b:96:6f:f6:5d:
                    dc:73:c4:9d:d9:eb:5c:8e:7e:7b:ad:a2:06:b1:5c:
                    3e:97:0f:a7:52:81:40:98:df:6a:8b:bd:e3:1e:a9:
                    65:88:50:cc:2e:09:64:81:86:d7:c2:a6:f9:47:8f:
                    3b:f1:1b:72:89:81:fa:cb:6a:45:03:c6:cf:57:f6:
                    4a:15:d1:ea:14:ec:26:4c:d3:2a:4e:64:64:3a:73:
                    5e:f3:fa:b5:0a:50:de:22:4e:1c:38:8a:c0:d1:ac:
                    27:b8:7f:1f:71:87:13:c6:95:4a:95:12:30:c9:38:
                    19:8e:3a:5b:d9:d5:33:9d:36:20:d9:c2:c1:94:3e:
                    66:03:43:44:4b:3c:19:6a:79:b1:7b:77:1c:53:72:
                    1a:31:53:86:17:44:97:55:0d:09:1d:71:0d:9f:56:
                    69:4f:6a:26:a4:d1:19:9b:a7:02:d4:4a:28:75:c7:
                    03:6c:c5:c1:77:74:a4:77:03:b6:79:f7:29:d1:12:
                    fa:e7:da:52:f8:bc:d6:4e:f6:5e:11:fe:cf:0b:7d:
                    71:52:f8:ca:44:3c:ec:c6:55:4e:7b:95:f9:ab:72:
                    8b:73:91:db:6c:a5:5b:8c:ad:11:76:15:9d:4c:77:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B0:BE:36:6A:62:2E:B7:9E:05:F7:E8:7E:9C:AD:89:A3:DD:F8:CC
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:42:66:9c:55:68:13:33:e9:76:86:7a:60:57:be:f7:91:
         c9:13:c1:e1:e9:a5:2d:22:e6:be:b3:1d:a2:d7:68:32:54:89:
         5e:88:eb:ec:30:9f:3b:0f:24:77:df:40:9a:fd:9a:17:86:8e:
         21:d4:8d:63:07:7d:f2:a7:96:d9:6c:79:5b:1b:c1:ba:74:bb:
         06:c9:57:86:b2:ce:eb:f9:49:63:e7:e0:56:b1:31:02:bc:62:
         4d:ef:68:26:8a:46:56:53:e9:aa:2a:83:f4:b1:8b:f1:b4:16:
         37:cf:eb:d4:2c:a6:c7:07:31:3a:df:7d:7c:10:b8:63:2f:18:
         63:6e:48:70:85:c6:3c:5f:9a:53:1f:a6:53:8e:2f:1c:6c:5f:
         ed:a6:ee:f8:14:ea:5d:2b:3b:88:3a:8f:97:10:e9:6c:7e:9a:
         23:59:44:46:e0:14:8c:47:af:ba:d8:ea:84:75:41:23:e8:70:
         e2:99:0f:34:98:05:4a:47:3c:73:6d:5e:39:3a:3a:96:a1:09:
         23:4b:80:13:26:28:5d:cb:04:5f:f8:50:0a:f7:f4:72:50:c4:
         a3:ce:65:e3:fe:66:49:de:ea:f2:70:8a:24:8f:2e:a0:1f:d2:
         0c:4f:49:95:f3:b3:c4:18:be:87:20:8b:91:29:ba:99:ac:63:
         95:7f:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:06:07 2024 by rpki-client on console-ams.rpki-client.org