Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File:                     3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier:          pq19E9N+hjfGmxAfFAVMpb+8SvxiwG80dDBFKyN1G1A=
Subject key identifier:   B6:38:06:5F:EC:10:11:31:23:8B:51:34:FD:E3:CC:9C:2B:82:5F:5D
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer:       /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial:       0193542C7613E80400D53C6ED7B01FFD1393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number:          0140
Signing time:             Fri 22 Nov 2024 14:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:20 +0000
Files and hashes:         1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: MDyVqEgjGyW9E797LTup3WxwPCMB3KKn/qCuW0k9r8s=)
                          2: K96TRq4LVoRWSObdxic6jxglY90.roa (hash: ++87SdI7uiWMkNqn/Z80gXYmoUYOw9OElamGyaGBgc4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:76:13:e8:04:00:d5:3c:6e:d7:b0:1f:fd:13:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
        Validity
            Not Before: Nov 22 14:00:20 2024 GMT
            Not After : Nov 23 14:00:20 2024 GMT
        Subject: CN=b638065fec101131238b5134fde3cc9c2b825f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:78:df:87:05:3f:44:a1:50:d8:f1:75:f6:
                    27:5c:3b:e1:f8:67:fc:07:a8:a9:a6:f6:53:60:4c:
                    01:ea:80:c9:ef:47:bd:e3:00:00:68:31:cc:23:e3:
                    2b:5b:e8:29:46:cc:04:87:0c:69:ad:cc:00:a2:1d:
                    17:a2:65:e2:6a:50:42:4f:ea:20:a1:ad:85:9d:6e:
                    10:1e:9e:e2:c3:82:05:f4:3a:9f:74:4a:11:2f:51:
                    49:7c:b7:62:bc:1f:e3:cf:3a:16:34:ee:8e:d7:f5:
                    c6:e2:9e:fe:b7:67:d0:ae:90:e3:9d:5f:0e:0a:f3:
                    06:52:9f:7f:4f:62:8f:ae:25:0a:0c:5e:64:b9:42:
                    56:db:81:9d:ef:99:50:9c:21:7d:23:63:6b:7c:f1:
                    4b:f4:20:73:53:fb:93:fc:b7:8d:b1:97:85:60:34:
                    de:44:df:9a:3e:3b:d0:77:b4:7b:19:42:8c:03:18:
                    89:1c:06:ab:38:1d:03:f9:2c:3d:7e:82:6c:ef:15:
                    2c:f7:dc:49:a8:43:a9:39:07:0b:fa:8d:62:76:fa:
                    44:e3:18:5b:d6:76:cb:c7:a5:46:3d:5a:f5:04:d3:
                    1a:c3:1f:65:ef:89:33:60:c9:e3:bd:d0:44:51:35:
                    14:33:49:a1:b8:7c:0a:f4:52:d3:57:be:87:1f:e5:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:06:5F:EC:10:11:31:23:8B:51:34:FD:E3:CC:9C:2B:82:5F:5D
            X509v3 Authority Key Identifier:
                keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:09:68:5f:05:a2:d9:27:65:89:83:77:a4:96:24:9d:80:04:
         58:00:1a:80:98:ae:c0:ec:c9:c5:d4:9b:7e:f5:c3:98:53:88:
         d3:2f:55:e2:58:b9:2f:cc:18:55:82:2c:9c:2b:c8:22:59:af:
         86:92:b9:0f:3c:3c:60:0e:7a:cb:47:bc:94:bd:d0:e7:6c:2b:
         49:a3:df:77:6f:7e:04:30:ed:81:38:31:d4:90:aa:7e:8a:13:
         c3:ce:7c:22:af:ea:77:37:45:ea:70:97:c8:bb:b0:b9:08:30:
         f9:6e:a6:a6:17:5e:d3:8d:cd:21:5d:d4:68:9c:43:6f:c6:d4:
         51:db:34:0b:4f:21:bf:6e:08:b5:9a:42:56:3e:cf:96:e4:b1:
         7e:c1:1f:44:64:d6:3f:24:17:24:65:d5:c4:6e:72:c5:a4:14:
         7b:3f:26:0e:d6:e6:db:9e:f8:fe:a9:12:ea:48:ab:fa:e7:e6:
         86:ee:f4:d6:f4:9f:8a:16:86:ce:b8:44:18:c4:8c:f7:e7:b8:
         a3:2d:a6:5a:c3:64:3a:eb:2b:a3:d8:c6:d4:37:77:99:14:60:
         a4:f7:ea:0d:b5:d3:91:8e:3d:3d:77:16:14:2d:f5:67:a5:12:
         e5:16:9b:4f:10:eb:b8:3e:58:1e:79:90:58:19:1f:cc:00:81:
         9e:14:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:46 2024 by rpki-client on console-ams.rpki-client.org