Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File:                     3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier:          NNM7nuK48pHKRwSmp0xX7+CSR0VQYipGIK3rxkpogD0=
Subject key identifier:   72:7D:57:3C:D0:E2:5A:FB:05:11:C4:5B:D2:FB:D9:AE:64:DF:10:83
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer:       /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial:       0193568A9D0436A8417B7088036EB1774A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number:          114A
Signing time:             Sat 23 Nov 2024 01:02:24 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:24 +0000
Files and hashes:         1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: hjSpJ44kM30GB/RkcWQzq+5gtS3Jt6sRR8cb5+xjdLI=)
                          2: SRtmHCiqtWYvIuXBYr31JiAAogY.roa (hash: PTu+Lw8+lflfqbJpGzZnAUXfp79XwIx+2O6LHhimSSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:9d:04:36:a8:41:7b:70:88:03:6e:b1:77:4a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
        Validity
            Not Before: Nov 23 01:02:24 2024 GMT
            Not After : Nov 24 01:02:24 2024 GMT
        Subject: CN=727d573cd0e25afb0511c45bd2fbd9ae64df1083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:43:02:a9:26:03:dd:6f:0f:6f:49:c3:73:
                    2c:f5:49:a3:d7:5e:b7:10:58:05:93:1b:f9:c9:84:
                    d0:c3:5b:03:17:83:0b:3c:3b:e8:07:2d:5f:d3:0c:
                    b3:ad:e8:c4:2c:e0:b4:9e:5b:0e:f9:b7:f4:e9:07:
                    e1:67:2c:ed:a7:ae:40:4f:54:4d:05:9d:c9:cb:f9:
                    3d:cb:1c:d4:43:ab:c5:28:ad:cc:a7:e0:04:9b:04:
                    b0:4f:54:2d:67:c6:fc:86:8c:fb:f6:41:e8:8f:9c:
                    66:1c:0a:18:69:78:e1:c0:38:cf:94:9d:90:be:40:
                    53:f8:b8:8d:f5:fa:7b:5f:3a:34:03:e1:d6:c2:cf:
                    4f:82:c5:18:e3:29:b9:09:1e:74:85:e1:47:f6:aa:
                    bc:87:88:34:41:c6:27:41:ad:37:c3:7e:be:15:2e:
                    39:74:52:33:6d:7c:5b:9d:f6:99:8d:b0:88:6b:5e:
                    2a:fe:f1:35:c5:aa:58:c2:5f:a2:2e:a3:b0:ed:75:
                    72:ad:0c:be:e9:04:5a:90:26:83:2f:6e:56:32:67:
                    56:25:41:6c:ab:47:1b:d9:8b:b6:cb:36:ea:5b:05:
                    4e:06:7c:81:0c:74:72:33:27:a3:27:05:0c:05:ac:
                    a0:76:80:2a:c4:e4:81:4f:20:d5:30:17:09:4a:05:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7D:57:3C:D0:E2:5A:FB:05:11:C4:5B:D2:FB:D9:AE:64:DF:10:83
            X509v3 Authority Key Identifier:
                keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d0:31:d3:2e:37:97:7e:bb:b6:0e:ad:23:e3:a0:dc:33:eb:
         af:b8:af:72:41:3b:60:52:f5:16:28:e9:ab:90:2d:00:74:b7:
         a6:6d:63:b9:a5:f6:b8:81:5a:14:14:7c:e4:93:01:63:1c:a6:
         4e:38:18:10:81:c8:17:66:f9:3c:e8:d9:96:ef:f2:b2:23:e9:
         29:56:b4:18:2f:79:3f:b2:04:3c:dc:08:67:09:6b:f2:e8:e4:
         93:67:c1:46:f8:9e:1a:86:9f:d4:59:fc:2b:22:e0:f5:17:e3:
         da:67:39:46:32:39:2a:9a:a6:78:9f:11:09:b7:57:57:3f:68:
         cf:31:bf:c3:65:0c:5a:38:58:d9:15:82:db:84:de:0e:2b:16:
         6b:5b:7b:ca:e9:11:cb:fe:6b:7d:bc:e2:a1:d3:00:2e:07:bf:
         53:83:25:df:42:ba:05:b0:95:24:86:a3:68:55:36:c9:3a:39:
         68:6a:3a:96:dd:2b:72:40:7d:9f:1e:8a:e4:74:d6:ea:d4:1a:
         be:16:c3:da:f1:86:68:8c:75:6e:0d:66:0b:7e:9c:56:22:35:
         55:03:ea:0c:3f:f6:f2:26:96:1f:29:2e:b4:ac:27:44:ea:9f:
         83:68:c3:03:55:b6:05:29:e0:22:26:ac:65:e5:d9:99:82:1c:
         69:6c:01:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWip0ENqhBe3CIA26xd0o1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjQ5NmZlZmY5OTEyNzZiZDFiODUzMzZiNzY5N2E5ODAw
Zjg0YzEwHhcNMjQxMTIzMDEwMjI0WhcNMjQxMTI0MDEwMjI0WjAzMTEwLwYDVQQD
Eyg3MjdkNTczY2QwZTI1YWZiMDUxMWM0NWJkMmZiZDlhZTY0ZGYxMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq9DAqkmA91vD29Jw3Ms9Umj1163
EFgFkxv5yYTQw1sDF4MLPDvoBy1f0wyzrejELOC0nlsO+bf06QfhZyztp65AT1RN
BZ3Jy/k9yxzUQ6vFKK3Mp+AEmwSwT1QtZ8b8hoz79kHoj5xmHAoYaXjhwDjPlJ2Q
vkBT+LiN9fp7Xzo0A+HWws9PgsUY4ym5CR50heFH9qq8h4g0QcYnQa03w36+FS45
dFIzbXxbnfaZjbCIa14q/vE1xapYwl+iLqOw7XVyrQy+6QRakCaDL25WMmdWJUFs
q0cb2Yu2yzbqWwVOBnyBDHRyMyejJwUMBaygdoAqxOSBTyDVMBcJSgVvfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ9VzzQ4lr7BRHEW9L72a5k3xCDMB8GA1UdIwQY
MBaAFN0klv7/mRJ2vRuFM2t2l6mAD4TBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWIt
NjcwMDMwZGNhYzMwLzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWItNjcwMDMwZGNhYzMw
LzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdAx0y43
l367tg6tI+Og3DPrr7ivckE7YFL1Fijpq5AtAHS3pm1juaX2uIFaFBR85JMBYxym
TjgYEIHIF2b5POjZlu/ysiPpKVa0GC95P7IEPNwIZwlr8ujkk2fBRvieGoaf1Fn8
KyLg9Rfj2mc5RjI5KpqmeJ8RCbdXVz9ozzG/w2UMWjhY2RWC24TeDisWa1t7yukR
y/5rfbziodMALge/U4Ml30K6BbCVJIajaFU2yTo5aGo6lt0rckB9nx6K5HTW6tQa
vhbD2vGGaIx1bg1mC36cViI1VQPqDD/28iaWHykutKwnROqfg2jDA1W2BSngIias
ZeXZmYIcaWwB3A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:18 2024 by rpki-client on console-fra.rpki-client.org