Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File:                     6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier:          DfvijvuDp7fl5Oc3uVq9HuXJqVrOgCAb8bSC94O+yAE=
Subject key identifier:   FF:27:EF:DD:88:F7:40:3E:B7:DF:C8:C4:DD:79:75:07:9B:69:13:E3
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer:       /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial:       01936520596E9F2BEA9CAAF28ECFCB8E7C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number:          07B3
Signing time:             Mon 25 Nov 2024 21:00:38 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:38 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:38 +0000
Files and hashes:         1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: ObBYK9OVoitrg1AjoxgimkazkjLi/uCq8oPXIpBEI38=)
                          2: wmsdqHYVG98HsZ4q304MVPj2OPI.roa (hash: cyeS+6VKd2KXaPKaK64feuEQAAfFcyo7E6TJQIZ7bBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:59:6e:9f:2b:ea:9c:aa:f2:8e:cf:cb:8e:7c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
        Validity
            Not Before: Nov 25 21:00:38 2024 GMT
            Not After : Nov 26 21:00:38 2024 GMT
        Subject: CN=ff27efdd88f7403eb7dfc8c4dd7975079b6913e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:34:da:ba:f4:12:d7:0a:79:1f:b9:98:54:
                    93:c1:6b:f5:aa:14:0b:a2:a3:56:4f:e2:d0:29:33:
                    8a:cc:83:e1:6e:02:b9:f0:28:02:1f:24:11:6d:23:
                    cd:4b:b4:66:c4:2a:58:db:72:53:e1:5a:d6:d8:53:
                    4d:68:62:93:0f:8d:a9:09:0c:ce:fd:5c:b7:4a:4b:
                    e9:39:ca:ad:8a:13:6a:db:9c:06:9b:e5:e6:ae:8c:
                    7a:bf:d8:64:9d:6d:f7:c3:66:14:64:3a:76:dc:35:
                    b8:ec:42:98:2e:3b:fb:1d:10:c5:97:b1:82:86:77:
                    b6:f3:33:47:1c:70:a0:10:f9:6f:5c:65:56:61:95:
                    5b:32:8c:f0:af:ef:b7:3a:2a:ff:ec:c8:70:c1:5d:
                    12:98:d5:25:09:26:e8:bb:b3:6e:83:68:b8:19:98:
                    6e:0e:30:c8:46:6e:38:ea:8e:d8:6d:66:2a:1b:98:
                    0a:10:61:4d:fb:93:84:a1:a4:39:28:3a:66:a9:d8:
                    23:f1:2f:04:aa:38:32:0a:c1:ec:40:17:0f:4c:8e:
                    1a:57:6f:c7:1c:03:9e:2d:a2:2f:6c:ef:d4:7f:b7:
                    9e:96:77:a8:5a:80:31:5c:54:e9:1f:0f:64:49:62:
                    0b:c7:4d:08:22:ec:78:b0:29:79:a2:b4:63:c3:72:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:27:EF:DD:88:F7:40:3E:B7:DF:C8:C4:DD:79:75:07:9B:69:13:E3
            X509v3 Authority Key Identifier:
                keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:56:e1:13:69:ad:b4:54:73:ae:12:a9:7f:2c:38:eb:87:
         3e:86:82:07:79:15:f7:ea:67:4d:04:b1:4d:5b:fe:0a:1d:65:
         5b:e5:13:58:fb:18:70:c1:01:15:86:0e:6d:a3:5d:70:39:04:
         6d:de:63:c3:18:c6:42:30:c1:ae:00:e0:64:fd:e0:04:26:f7:
         77:17:0a:ab:80:67:07:4c:08:f7:34:55:30:bf:35:48:87:74:
         8e:c9:3e:99:df:c4:67:9c:f4:a3:a0:14:96:a3:3c:b2:fc:8d:
         c7:dc:b1:57:e6:00:be:01:93:05:d8:17:da:20:2e:12:d7:dc:
         21:2e:fe:55:a9:3a:75:d9:a4:d0:16:9d:d4:e6:db:45:e8:a2:
         1a:e7:83:d7:02:f3:97:fe:16:55:d6:45:eb:64:db:8d:51:1d:
         86:cf:68:f3:e6:8d:82:71:6b:a2:69:4d:a5:1b:e6:0d:59:31:
         ae:23:c6:da:69:0c:85:29:90:69:74:3d:e0:4a:2b:81:01:bc:
         b7:35:d8:d1:9a:c2:13:37:1e:bc:dd:6c:f4:c4:54:f5:4b:89:
         e1:72:de:bd:53:a8:49:d3:43:34:ee:1b:67:cd:61:2c:82:3c:
         0d:1a:26:90:c1:73:18:f7:ce:6f:35:88:57:86:bc:07:c3:17:
         66:08:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:55:38 2024 by rpki-client on console-fra.rpki-client.org