Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File:                     0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier:          rFVx1CtvJr/hmZEEltJV2phcTkZRVq0u4N5L23qj+X8=
Subject key identifier:   23:CB:93:44:8F:84:16:CD:23:9D:9A:97:61:54:40:51:7A:CE:28:CE
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer:       /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial:       0193557613ED50FF08AFD3B3933E8B77232B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number:          0603
Signing time:             Fri 22 Nov 2024 20:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:21 +0000
Files and hashes:         1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: hdeSSOJj54gqxHKoo3jcaJF4bGM+w1pEhZS1DsIpiE4=)
                          2: HrUWwjLaIvz32L4D4yEP41y7k9k.roa (hash: mjb/KGnwpgbTT+oD8LY9FGBEj7Ro1mY/Dd5z8NA8K9c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:13:ed:50:ff:08:af:d3:b3:93:3e:8b:77:23:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
        Validity
            Not Before: Nov 22 20:00:21 2024 GMT
            Not After : Nov 23 20:00:21 2024 GMT
        Subject: CN=23cb93448f8416cd239d9a97615440517ace28ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b8:eb:47:18:92:ea:38:b1:76:15:dc:97:ba:
                    3b:ba:8e:90:c6:82:ee:45:de:7f:44:f1:fd:31:2d:
                    d8:aa:8a:59:91:8c:1c:91:12:71:e5:59:26:d4:0f:
                    3c:a7:09:af:0b:c3:7b:46:2b:62:dc:cf:45:9f:81:
                    dc:dd:b9:01:9e:40:7f:6e:dd:6d:eb:ad:75:05:05:
                    81:31:ee:cf:7c:92:46:40:9c:ea:1e:dd:bc:bb:01:
                    d1:47:6f:c4:41:a3:fd:2a:11:88:23:c0:2b:6b:73:
                    59:ee:61:ba:e5:bf:5d:e1:38:7e:21:42:23:e1:20:
                    38:ac:f6:d4:39:9d:72:7e:c6:be:0c:8d:d6:bb:ab:
                    4a:48:80:14:f6:f4:9c:cc:94:dc:d7:c1:cb:d3:ef:
                    ec:48:2d:0b:e9:5c:df:ba:54:94:d4:76:72:d8:60:
                    53:75:85:dd:90:b9:e2:5e:00:87:01:07:c0:34:3b:
                    d6:c5:58:37:d9:05:00:9c:6d:47:a2:6b:8e:92:05:
                    7c:13:32:c1:5e:9b:4e:18:21:af:37:90:6d:2a:2b:
                    cc:bc:97:77:ad:cc:59:0c:11:b8:f2:ef:b5:ff:24:
                    9e:ec:f1:3e:ca:17:25:4a:20:0f:3b:54:58:f3:33:
                    f7:f3:88:26:3c:e0:d8:8d:e0:17:b6:7d:b8:44:42:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CB:93:44:8F:84:16:CD:23:9D:9A:97:61:54:40:51:7A:CE:28:CE
            X509v3 Authority Key Identifier:
                keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b8:73:5e:98:c1:4e:df:e8:16:fc:19:20:a4:b1:f7:14:19:
         65:e0:63:fd:eb:4f:d2:c9:e7:4e:c6:44:3e:c7:84:ae:ad:78:
         fe:74:f4:c5:05:88:f8:a8:b4:56:18:84:6a:83:18:88:2f:9f:
         7b:33:77:21:2d:9f:4c:fc:70:81:eb:8c:40:c2:01:95:c8:3d:
         2c:98:e4:c5:ac:f2:00:e1:5f:55:6a:0c:a0:1b:75:f9:11:df:
         8b:e2:5f:2c:c7:5a:95:7f:53:48:83:0b:19:25:8d:c2:23:95:
         2a:9e:73:0e:e0:3c:ba:92:b7:f9:43:be:dc:50:c0:5b:3b:48:
         aa:eb:b8:b4:3d:08:9b:70:53:7d:04:fe:84:a6:25:57:45:56:
         69:f7:03:4c:eb:69:bc:15:0d:e8:4a:54:91:bf:fa:86:ea:a8:
         e5:46:f4:b8:51:33:01:a0:5f:74:cb:2b:56:e7:63:02:67:be:
         7c:e3:e9:2d:e6:5d:15:98:69:86:61:b5:fb:d3:cf:49:c4:10:
         49:96:ed:08:1a:97:37:6a:69:3d:7e:bc:d1:09:8c:f2:16:3b:
         16:28:ff:b6:cc:b5:2c:57:b0:82:58:7b:82:f3:e0:3e:2f:4f:
         f2:bb:ad:58:d3:75:be:d0:9d:af:ab:b2:d1:70:ec:f3:48:47:
         ad:32:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:32 2024 by rpki-client on console-ams.rpki-client.org