Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File:                     PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier:          3VHIh9RcYL+dlY/UGi2FGPf4nQQf2Xbz+9peZSa+7Ds=
Subject key identifier:   B7:37:4A:A6:F8:1C:5D:67:8B:5F:7D:0F:48:06:94:E2:29:E3:AB:7A
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer:       /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial:       019368FD2C441FBDFAFB550CF5488C4BBB77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number:          0AF4
Signing time:             Tue 26 Nov 2024 15:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:42 +0000
Files and hashes:         1: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: ULmjKwrVlg4Oxw3pK+Y/VdMBJtsyhjE57NZtsenJQVs=)
                          2: RgihbVWYeJAstfIlrnAA5-MXeS8.roa (hash: 277ns0u6IY6uHwVoGcCE2KB/K7Y3bvUHUf/N/7bsV/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fd:2c:44:1f:bd:fa:fb:55:0c:f5:48:8c:4b:bb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
        Validity
            Not Before: Nov 26 15:00:42 2024 GMT
            Not After : Nov 27 15:00:42 2024 GMT
        Subject: CN=b7374aa6f81c5d678b5f7d0f480694e229e3ab7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:08:72:30:ad:33:3f:45:03:43:02:4d:48:
                    24:6c:1b:9e:4d:68:8e:ff:3e:d1:ab:51:23:d7:18:
                    76:87:e3:0b:23:7a:1b:af:6d:f6:81:2d:b1:cf:76:
                    47:93:dd:26:62:cf:95:13:58:b0:19:62:d2:7a:94:
                    3d:e3:42:45:25:9e:18:cd:33:ba:2d:11:5c:f7:d1:
                    48:60:f7:ca:e1:8c:0c:3a:79:94:0e:dd:e4:d9:e5:
                    cd:e6:30:13:5d:63:74:44:95:c8:46:a5:9d:18:34:
                    a7:32:95:3e:e9:4c:61:2b:af:f7:af:a2:7d:df:6e:
                    2e:97:81:66:25:ea:a9:ba:84:25:78:89:80:26:cb:
                    29:24:91:89:c7:26:a5:ed:5a:a1:74:b4:45:5f:37:
                    a3:3d:90:f1:99:25:d4:70:83:cd:b1:15:ab:74:63:
                    6e:f2:d0:2d:b6:d6:be:05:ff:63:f9:99:42:2f:22:
                    8c:e2:43:da:2f:09:c1:8d:bd:af:b2:16:2a:d1:e0:
                    f7:9c:da:f5:af:33:ff:b0:44:f5:31:f3:90:ac:f4:
                    c9:80:d2:c4:3b:c5:b1:cb:de:6a:64:6e:08:46:16:
                    aa:fa:ea:c5:c9:ac:36:d1:13:0f:02:59:4a:d2:74:
                    76:b1:f6:8e:c2:5a:f8:d5:4d:57:7d:38:ba:6f:7a:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:37:4A:A6:F8:1C:5D:67:8B:5F:7D:0F:48:06:94:E2:29:E3:AB:7A
            X509v3 Authority Key Identifier:
                keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:95:6f:cf:ff:c4:99:1e:0a:fa:c8:7a:9e:62:20:eb:4d:
         5d:dd:67:9d:ba:eb:00:73:62:1d:a2:b9:e0:df:6e:97:80:3c:
         b2:a1:36:f5:bc:96:09:b0:3b:85:6b:36:44:a9:e8:5d:44:2a:
         0c:57:02:fe:46:2a:f5:a7:42:fa:7e:63:e5:3a:33:f9:05:cb:
         07:c7:e7:30:79:23:2e:e7:a3:c1:8b:16:1a:ca:f7:0a:99:d4:
         a3:7a:a1:2f:ac:bd:26:d4:39:98:b0:a1:45:26:76:96:7c:f5:
         f1:46:13:44:47:91:29:66:70:45:3a:c0:b9:50:8e:bb:58:a3:
         4c:02:51:7f:cd:79:84:fb:a8:05:a5:32:4d:45:69:0a:61:d6:
         0f:94:d7:88:72:92:62:a8:1b:f7:21:0d:d3:32:15:31:fe:c9:
         5d:b4:1f:66:fc:1c:7b:e4:df:73:84:87:3c:8c:32:4d:56:8f:
         b0:db:af:e0:2f:21:9e:03:5a:d8:a5:32:a6:36:39:cf:5d:f4:
         c9:a2:26:fa:e6:cd:d6:91:3c:6a:eb:13:39:62:9b:16:45:ae:
         a7:32:7d:eb:74:5d:08:04:53:b0:1c:7f:de:f4:0e:7b:07:c1:
         b7:b6:13:ed:9a:5a:73:0a:bf:b6:40:42:39:cf:60:96:7c:0c:
         29:67:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:33 2024 by rpki-client on console-ams.rpki-client.org