Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File:                     mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier:          cAt9QJ7UqIDeUs/aJUCkteEUDXes5Q7zvfpF5OGkNvc=
Subject key identifier:   2C:0A:F9:CE:7C:47:B8:61:6C:72:04:3B:28:01:5D:4B:AE:AF:7C:5A
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer:       /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial:       0193640DA9D1156D63094D8FD75BF7B77FA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number:          036A
Signing time:             Mon 25 Nov 2024 16:00:37 +0000
Manifest this update:     Mon 25 Nov 2024 16:00:37 +0000
Manifest next update:     Tue 26 Nov 2024 16:00:37 +0000
Files and hashes:         1: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: DlhS5abZ30WJV51bU2FGH7HwnHNtVmGL2KxLQdtPZI4=)
                          2: ofnnnRS-0edAh-KbpUDjVq7Vt1I.roa (hash: QC0Y8Nchs9EDSB0QW13TkmfU2hGkNwHlOHjY8H+GtUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0d:a9:d1:15:6d:63:09:4d:8f:d7:5b:f7:b7:7f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab33743a654906143399f903704801682638e7c
        Validity
            Not Before: Nov 25 16:00:37 2024 GMT
            Not After : Nov 26 16:00:37 2024 GMT
        Subject: CN=2c0af9ce7c47b8616c72043b28015d4baeaf7c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:c1:30:44:98:d2:e8:61:24:fe:1d:d2:d9:
                    84:1e:e8:6c:06:29:03:f3:67:db:53:2e:08:70:e6:
                    55:21:d9:8e:5c:d8:b6:d4:dd:e7:20:27:3a:b9:fa:
                    bc:72:46:48:ac:ff:ab:e3:78:c1:8b:0e:e9:40:5c:
                    67:58:ba:cb:28:cf:0f:10:81:0c:31:56:d6:ef:6a:
                    49:ba:0a:25:b8:cc:91:5b:3b:42:02:ef:89:a8:7f:
                    55:f4:7d:b2:57:11:c8:ad:08:4a:f0:30:30:56:95:
                    dd:60:be:de:92:c1:2a:b8:ac:62:d6:29:c7:a5:df:
                    f0:33:23:0c:ed:c0:6c:64:d8:18:83:c4:b1:fe:f5:
                    f9:e4:4b:32:bc:f7:8e:5f:f3:6c:a8:d3:b6:b7:72:
                    84:c2:44:60:2d:41:03:56:94:46:dd:68:cc:67:92:
                    32:25:12:b9:1a:5a:4c:ae:57:df:d3:2f:fe:33:10:
                    88:ba:ba:85:b5:b3:26:27:6c:ad:48:65:2a:06:b0:
                    2b:fd:65:0e:bf:e4:38:83:aa:d7:58:26:91:fe:01:
                    b5:62:ff:1f:2a:98:af:f4:61:6b:6e:9a:a3:c8:c5:
                    57:bc:34:b8:61:72:47:22:37:10:90:e9:68:dd:91:
                    e0:8e:de:7e:a3:3a:5d:23:4e:29:b1:30:7c:6d:ef:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0A:F9:CE:7C:47:B8:61:6C:72:04:3B:28:01:5D:4B:AE:AF:7C:5A
            X509v3 Authority Key Identifier:
                keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:5d:32:ae:e7:9a:f2:08:ab:57:ff:20:97:10:75:38:3a:
         3a:81:ed:50:3d:8b:65:bc:1b:d9:db:b0:22:01:ed:7c:fc:8d:
         c7:c6:6e:e3:88:63:44:d0:97:7e:94:8c:8f:a4:aa:cd:36:be:
         ef:91:c5:9c:9b:50:e3:cb:6a:48:d7:67:34:89:68:2f:f0:ee:
         95:fd:22:83:d6:29:6d:33:fd:67:49:b8:e2:92:1f:7a:53:af:
         de:ee:9f:cd:c0:0f:2d:ae:29:31:98:95:dc:c4:72:76:54:a7:
         c7:53:1e:de:5f:9e:0c:2f:17:1e:3d:46:98:b3:72:a7:da:4c:
         e7:b7:f0:d5:f1:c6:75:6b:80:07:91:19:53:5e:f1:64:36:37:
         63:2b:45:3d:63:ca:ec:54:03:33:d5:da:04:84:8d:34:b3:3d:
         7a:4d:1f:6c:aa:dd:b3:dc:e4:b5:80:31:c7:ff:ca:5f:89:a2:
         93:f5:3e:0b:4d:6f:e6:3d:30:e3:1c:f2:a7:e5:00:cb:1b:b0:
         87:97:b0:70:2d:e0:64:7d:44:ea:25:7b:ca:9d:f2:1e:e8:68:
         c0:ee:36:8c:c1:36:da:d0:50:db:18:c1:f0:b1:41:d3:a4:01:
         2b:fd:9a:b0:09:ef:5c:17:61:8b:bd:95:48:a2:54:aa:6e:14:
         74:79:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:37:02 2024 by rpki-client on console-fra.rpki-client.org