Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File:                     sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier:          AWon0ReGBlAUpp/MlVrqaAljifq2dQmK+MBSrf0u8Rs=
Subject key identifier:   B8:EA:3B:65:1E:1E:46:D5:4A:09:01:5C:C5:5D:59:E1:DA:4F:16:54
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer:       /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial:       019357D2B8F1B79DF70F1F4340D658183ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number:          6A
Signing time:             Sat 23 Nov 2024 07:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:47 +0000
Files and hashes:         1: O_YjRDU_9tP-_D2lyajlKhgOKV4.roa (hash: 5M16ibGMDiRgL0gFbOcZ0kES2rpgYEkZF03w8VJf4SA=)
                          2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: oKWq33UiTjeW4+0IWxMpSbH+nZB71O2g/1wIvXiXlS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:b8:f1:b7:9d:f7:0f:1f:43:40:d6:58:18:3e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
        Validity
            Not Before: Nov 23 07:00:47 2024 GMT
            Not After : Nov 24 07:00:47 2024 GMT
        Subject: CN=b8ea3b651e1e46d54a09015cc55d59e1da4f1654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:b5:da:fc:b0:bd:8f:b1:c9:88:9c:cb:cc:
                    66:e8:41:23:79:df:ce:16:66:92:bb:71:be:b0:45:
                    14:67:cf:d3:26:2e:2b:61:1c:41:46:bf:5d:b6:57:
                    e0:1d:fc:dc:44:d9:7a:5c:25:7a:9e:3c:f4:4b:ce:
                    1e:07:65:e8:15:e9:75:2a:d6:20:07:5d:12:91:57:
                    2d:3b:54:42:88:6f:da:79:c3:5e:23:59:9d:ac:69:
                    6c:4f:18:79:27:c3:02:4b:60:97:10:04:25:46:23:
                    a4:0d:90:0c:18:cb:48:6f:92:f9:ea:c3:7e:5d:72:
                    1e:2b:95:8e:0c:ff:2a:b3:c3:99:77:78:cd:9d:c9:
                    ce:c3:13:8c:85:4d:f4:cf:6a:4e:a4:a6:d9:3c:88:
                    3b:79:f1:4c:0b:cd:c4:bb:07:36:06:0d:ca:4a:a2:
                    5d:da:04:76:37:ca:de:58:9b:ad:64:15:ea:f5:89:
                    90:b3:5c:65:04:3d:2d:97:ba:4b:25:2a:eb:2f:03:
                    3b:3d:47:ca:ff:e9:49:2c:ab:97:e2:f4:4a:92:94:
                    08:43:e7:ff:cd:ca:84:29:e2:00:78:44:71:c2:89:
                    58:97:6d:33:a3:bf:0b:8a:6a:a7:c7:a5:b9:59:72:
                    f9:3d:ec:46:be:4a:92:29:a8:64:78:66:77:3b:4e:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EA:3B:65:1E:1E:46:D5:4A:09:01:5C:C5:5D:59:E1:DA:4F:16:54
            X509v3 Authority Key Identifier:
                keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:14:8a:73:b5:14:78:fe:e9:93:99:ac:43:f1:2f:e1:f1:97:
         37:57:74:a2:ae:ab:9a:e8:2e:5f:d3:e2:76:e8:7b:98:73:1a:
         71:ec:75:70:9c:1a:d3:7b:3c:23:e5:64:e1:64:0e:0d:ef:5c:
         58:3b:a4:91:b1:ac:e8:76:74:e4:ba:61:2e:fe:86:f6:78:12:
         f3:21:be:28:d7:4f:60:b5:b1:5b:f1:8d:da:bf:59:8d:f8:40:
         66:46:f5:4b:6b:ed:97:ea:b9:42:cf:e4:df:4a:72:f0:3e:b3:
         95:fe:44:c6:e1:de:89:5c:6f:50:9b:b7:07:d8:3f:6c:be:ae:
         0e:3d:db:44:db:aa:55:a8:eb:03:79:8e:3a:e7:97:89:ed:54:
         f7:64:07:f4:fc:b5:70:5c:13:37:13:cf:f5:54:0a:57:48:e4:
         67:b0:9a:41:07:75:7b:98:53:0d:8e:bc:b4:5c:31:b0:90:d1:
         f1:96:30:46:f5:5c:bb:26:ef:d4:b5:52:d0:ea:63:8c:af:4c:
         b4:38:a6:30:86:56:a1:cc:11:4f:c4:28:8f:33:b3:0a:bf:d5:
         ab:ae:13:fc:0e:cf:1e:0d:35:2f:c8:77:9a:b3:15:41:d7:e5:
         4c:61:bb:5b:59:24:47:f0:9f:50:52:82:97:06:d1:f2:94:4d:
         b1:22:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:09 2024 by rpki-client on console-fra.rpki-client.org