Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File:                     3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier:          rZdSLi14r2TOhTRAzqN6qOs3t8AsDvq4ZfH9cOLIEnE=
Subject key identifier:   06:D4:C5:FC:94:81:17:EC:E2:91:07:FF:71:B4:E5:31:F5:60:F3:4B
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer:       /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial:       019369DA337C025549B8DC7903BF62A33A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:07 +0000
Files and hashes:         1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: OzUdNZNp77RpWBLnZmYhXvRNZQwJmoUd4XV6cYB1QjI=)
                          2: Fd5yb-ufWxeroiPtnx2T_LrhWM4.roa (hash: OBz9lyfReM7k8kcmC8a2ljwvObp39OS0PMgebI8cihc=)
                          3: W7pUbXgtSNveuxn1b9tTbpsDTjM.roa (hash: 1GTcVoKBMCK62vzD34siR9t/U5gleTwOcsPDbS2008Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:33:7c:02:55:49:b8:dc:79:03:bf:62:a3:3a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
        Validity
            Not Before: Nov 26 19:02:07 2024 GMT
            Not After : Nov 27 19:02:07 2024 GMT
        Subject: CN=06d4c5fc948117ece29107ff71b4e531f560f34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:1c:7d:0f:41:3f:00:64:cd:78:94:93:4c:
                    23:f6:bc:35:ed:25:0d:fe:34:4d:99:f9:f3:6e:fb:
                    d7:f2:cd:5d:1c:7a:d8:b1:ba:34:21:56:bd:a8:b2:
                    b9:5d:b8:53:47:fc:51:20:35:9d:b9:4b:06:92:43:
                    64:18:0a:0f:25:63:55:1b:32:53:0a:05:09:c6:23:
                    12:d8:a9:61:34:d8:1a:93:38:07:5e:14:66:33:d8:
                    2c:cb:7d:ff:67:e9:a7:6e:ff:c8:12:8c:1c:a4:35:
                    a6:5a:5c:74:98:c2:91:92:b8:95:5f:65:a2:bf:15:
                    33:7f:ce:20:d6:40:6c:be:76:83:1e:32:49:7a:74:
                    50:f9:d1:cf:cd:22:4d:65:2e:60:8a:1a:8d:9e:f5:
                    65:49:1e:ad:76:6a:8e:85:77:93:3c:51:45:28:a0:
                    0f:ad:52:aa:1d:9f:36:4e:5c:f5:b0:b8:1b:f3:d9:
                    5d:f4:d6:a4:3a:49:4c:24:2b:fa:c4:91:3f:33:6a:
                    55:26:a2:cc:fb:37:70:d2:5c:4b:89:a9:70:28:27:
                    7d:70:04:35:ea:cb:01:b1:1e:05:25:66:05:f0:60:
                    96:a3:5b:b9:fe:43:20:ed:f3:53:0e:ea:d8:c0:0a:
                    ee:c7:24:93:cc:d5:56:0e:c5:40:6b:8e:9f:6f:9b:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D4:C5:FC:94:81:17:EC:E2:91:07:FF:71:B4:E5:31:F5:60:F3:4B
            X509v3 Authority Key Identifier:
                keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7d:ee:db:5b:03:78:e7:45:72:1c:d6:3f:e2:88:9b:a8:ad:
         82:3f:5d:5f:e0:33:a1:7f:de:dd:d4:74:47:3a:16:bc:27:f4:
         f2:fa:d8:20:cf:58:fc:eb:bb:d6:61:36:3f:ba:5e:18:a0:7a:
         c1:a8:31:bc:2a:94:43:26:c8:b0:2e:a3:3e:2c:28:cb:d1:71:
         a4:eb:4b:41:6b:64:54:9b:da:3b:31:c7:57:3f:d0:b5:7e:4c:
         c2:5d:6d:f4:1e:87:3b:1e:c0:10:b6:fd:60:7c:15:96:bf:6e:
         a7:54:06:b4:3a:47:43:d7:d9:a1:89:4b:1b:af:c6:da:34:d5:
         75:eb:82:99:7b:07:46:d2:3f:87:56:1c:2e:75:03:77:b6:a4:
         dd:45:1d:79:b9:5a:bc:a4:89:2d:f0:17:a1:3a:67:14:c8:85:
         bf:4e:b0:f3:8c:00:cc:94:ca:92:fd:46:2f:39:5a:c7:e4:ee:
         86:b7:03:33:6b:38:cd:6e:de:8d:d0:db:66:4e:e3:e8:9e:fc:
         ac:58:58:16:1c:70:68:d1:49:9f:39:cc:32:67:cf:59:ed:4e:
         89:f2:9e:84:8b:ba:3f:45:25:fe:1e:d9:71:f4:fb:56:ee:07:
         89:cc:53:e6:ca:46:41:c2:5a:7d:26:22:4b:a3:8d:ac:33:5b:
         11:d0:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:20 2024 by rpki-client on console-fra.rpki-client.org