Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          AqqhUB+1lOnGBsWov8QGZci2j6TbTd0W39GM8FeQMXs=
Subject key identifier:   38:43:9E:1E:A8:F8:90:CD:0C:11:60:D4:AA:2C:D1:F3:48:48:97:20
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       0193568AA85CD11732199BA2F27B38BC9AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          0AA4
Signing time:             Sat 23 Nov 2024 01:02:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:27 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: 25W9OVbESzXI2T2hYuBm5b+2+1f07xXPwRePsSqp5lM=)
                          2: hRuE6CyjU7nrCP6xo9mATidPVNs.roa (hash: SJIR9J9Vm7QY5bHaqezRK9Ngblys18PV/WNQGLUes+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:a8:5c:d1:17:32:19:9b:a2:f2:7b:38:bc:9a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Nov 23 01:02:27 2024 GMT
            Not After : Nov 24 01:02:27 2024 GMT
        Subject: CN=38439e1ea8f890cd0c1160d4aa2cd1f348489720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2d:e3:ae:a0:c3:7d:a3:c0:14:23:60:0d:0e:
                    bc:a3:61:4e:d1:56:57:4c:4e:3a:f1:5d:14:e0:da:
                    f6:cc:17:f6:ce:d6:36:10:81:26:b7:89:9e:d0:b0:
                    17:87:fe:13:ff:3f:a6:d0:1e:f7:70:d4:3a:d9:7c:
                    55:e2:75:da:50:50:9d:59:3c:77:55:ba:9a:80:3a:
                    c6:df:07:03:f4:bf:8b:3a:40:cb:29:94:95:5a:b5:
                    38:0f:80:e2:20:27:0d:6f:ed:87:29:37:06:fd:57:
                    fe:53:7b:bc:fb:df:79:e8:0f:53:b5:a0:d0:74:f1:
                    b1:6d:ee:e7:0f:41:ba:16:70:2e:63:95:28:3f:04:
                    30:c7:72:6e:8a:71:fa:3f:b4:6e:79:3d:69:f5:48:
                    76:82:d2:b9:92:c4:75:94:70:92:df:d0:02:b2:b7:
                    ea:b9:a4:c2:a9:9a:e3:de:11:a7:b1:76:16:97:ad:
                    9c:81:f7:4c:b7:dd:ac:f6:08:76:f5:59:bc:a0:9e:
                    04:df:35:8e:d0:11:7c:31:8f:dd:79:da:57:48:a9:
                    e4:18:04:58:01:c7:cd:f6:9a:eb:83:4a:df:9c:68:
                    db:20:63:e1:71:0b:be:71:0f:8d:37:82:8f:2f:ec:
                    ac:39:49:3d:e9:07:fe:34:da:30:ad:b1:53:25:5e:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:9E:1E:A8:F8:90:CD:0C:11:60:D4:AA:2C:D1:F3:48:48:97:20
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:6b:33:b5:d3:09:c7:e4:c2:56:5d:8e:ba:b5:02:2c:41:
         88:7e:db:a1:cd:14:97:4b:8f:ae:84:ca:86:2c:10:28:66:81:
         d9:de:93:be:99:ac:be:94:50:f3:d8:8a:a3:b9:ab:41:ba:4d:
         6d:bc:bd:35:53:49:0f:7c:1f:a3:7f:0c:4f:ab:7e:24:0f:c2:
         af:53:36:60:aa:14:83:cc:f9:1f:99:96:7d:5f:50:2d:ab:eb:
         f6:4c:45:a2:07:c3:05:74:ee:16:61:7c:13:01:c4:52:5c:01:
         23:28:f6:3a:17:0a:6c:e1:c8:d0:f9:41:03:11:a8:6d:f1:ee:
         02:39:70:be:6e:71:2b:64:7d:be:50:c3:6b:a7:87:b5:35:19:
         1e:29:f0:95:2e:e5:d0:8d:7c:98:8e:71:77:17:56:38:d9:00:
         8a:42:20:46:da:2d:dd:00:ca:1a:13:37:d4:43:0a:de:e8:a8:
         31:45:07:27:5f:d6:aa:f9:ef:60:8b:9e:43:23:77:33:9d:f9:
         df:8f:76:ca:79:b3:66:7f:00:14:ca:de:2b:ad:ac:18:cc:7b:
         a8:a6:38:5a:26:bd:92:46:7e:8c:27:35:64:4b:ed:71:1a:76:
         ae:45:4c:67:33:3e:10:f7:a0:7b:3d:08:93:c0:0f:61:a1:ed:
         21:99:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:38 2024 by rpki-client on console-ams.rpki-client.org