Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File:                     PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier:          AAlGlaeXf6NTnHMq6Uby/r2O5VYSqwjTMVsC1rBHv10=
Subject key identifier:   B7:76:91:53:08:AE:D1:EB:B9:58:51:01:EB:96:9D:F7:BD:F2:2B:C2
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer:       /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial:       019364B2647D3584C4102EC9CEFB6E1D1634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number:          051C
Signing time:             Mon 25 Nov 2024 19:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:32 +0000
Files and hashes:         1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: nQJslnCUWB7JoP2mmcFH3lSyq3R6zwrPGmXqn+2nODU=)
                          2: ycMokGvexTq49k-kuhf2PcfmtFs.roa (hash: jeYn1Df5ySKu+UVY+9R7OHJd8V3YdtE2tBzeMMqj60o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:64:7d:35:84:c4:10:2e:c9:ce:fb:6e:1d:16:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
        Validity
            Not Before: Nov 25 19:00:32 2024 GMT
            Not After : Nov 26 19:00:32 2024 GMT
        Subject: CN=b776915308aed1ebb9585101eb969df7bdf22bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:b5:df:31:8a:30:9a:40:82:09:3f:53:5e:
                    46:c2:5d:66:ba:5e:94:1d:47:c0:c6:23:e6:5e:2c:
                    01:10:3c:12:4f:0c:0a:f7:38:85:c5:05:dc:aa:5f:
                    b2:87:55:74:bd:1c:0d:eb:be:45:4e:de:8f:e6:2e:
                    ad:dd:11:49:56:47:3a:c3:2e:cd:87:0d:b6:ed:10:
                    01:f0:30:33:4c:37:3b:7d:2b:03:ae:b7:07:cf:93:
                    c8:99:77:5e:67:19:00:71:58:92:62:07:78:8a:23:
                    65:8d:71:ee:cd:16:c2:df:eb:56:70:cb:23:e9:a4:
                    ec:6e:eb:af:52:81:4d:e4:7d:02:8e:4d:db:f8:91:
                    51:0e:ab:2b:17:44:4e:d8:b9:f2:31:db:82:3c:c5:
                    75:30:79:a5:0e:f9:f6:ea:2d:9f:ab:1a:59:af:3e:
                    f1:44:79:bb:c2:f4:24:4c:b9:d7:87:30:25:a0:12:
                    35:22:7d:53:dd:ce:07:7c:6f:a2:1e:38:32:c4:8f:
                    01:1a:2e:45:0c:28:85:39:38:a3:ee:a7:8b:3c:ca:
                    4a:a1:bd:f3:1f:e9:b3:4a:12:1a:e0:a9:b3:e8:71:
                    14:d0:86:bb:2f:d4:bc:40:0a:e7:02:c7:a5:b4:57:
                    43:e6:1b:f0:78:b9:5d:59:a1:55:33:a4:c3:8d:26:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:76:91:53:08:AE:D1:EB:B9:58:51:01:EB:96:9D:F7:BD:F2:2B:C2
            X509v3 Authority Key Identifier:
                keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:8b:de:c1:37:c7:c7:48:dd:d2:ca:8e:26:b4:4f:60:8f:
         2d:b5:80:2c:b0:30:55:13:a5:62:26:3c:f5:9f:03:32:0d:a2:
         8c:32:78:ba:81:a7:9b:0e:d2:32:31:51:5a:75:26:33:9a:55:
         ad:f6:8a:2a:b2:0d:8a:e2:5a:e4:b2:1e:2c:2b:27:c1:9b:4f:
         76:ff:03:36:5f:51:ee:79:83:c7:ad:f7:c2:62:1a:8e:28:23:
         11:26:47:c1:1c:34:4f:97:69:0d:59:f0:3e:12:d6:dc:45:11:
         7d:c8:b6:41:bb:48:b1:ee:89:69:55:ac:e1:88:1b:82:d8:a7:
         20:33:b0:de:d6:2f:38:6d:2a:bb:36:dc:95:92:4c:33:54:64:
         12:b3:9b:02:b5:f9:1b:45:1a:16:d6:95:54:13:87:1b:5e:02:
         ef:83:ab:c7:ba:9e:f4:b8:34:0c:d4:91:32:ac:51:64:31:3e:
         8d:09:f4:e3:ff:f9:70:04:8e:ad:48:dd:b6:d8:4b:68:bf:42:
         02:c2:4c:3e:7e:da:78:c3:c8:ee:b8:fb:cf:7c:12:bf:06:22:
         8c:a0:ad:05:b6:98:a3:f6:c5:4f:62:47:38:02:b9:e9:77:a8:
         c8:68:0c:b0:fc:49:f3:fa:f3:21:e9:f2:02:70:bf:b9:b2:44:
         dc:f9:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:55:44 2024 by rpki-client on console-fra.rpki-client.org