Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File:                     3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier:          vERzl34zsfLE8KWrvYL/YA5HXh+8ksAmbrmveQ/qV6w=
Subject key identifier:   A9:E6:9F:B5:A1:39:A2:90:F5:6C:25:13:07:16:9F:55:58:EF:E4:A8
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer:       /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial:       0193542C765DCEBDEDD985AE42623DD121A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number:          0A33
Signing time:             Fri 22 Nov 2024 14:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:20 +0000
Files and hashes:         1: 23Zqqvtz_N5UnJhfjtMbufFadJ8.roa (hash: jll9yaHv7BSzQuq0SGRQhTaiZQcnA8trFKRVEPRwcco=)
                          2: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: Ra+rBnxJEHhWHTs8uFWp6+mlBHSvI+XzyYvydnu3ROw=)
                          3: 6FOTHgnqqdYuZaZjvYZmWMxKwOQ.roa (hash: nhpkk4X9x4ifdENDQGkoSBKIoluafqQAmAYspX3KAzM=)
                          4: 6IR6lpjbITf9IUwjy2h0XoVLpQw.roa (hash: ojCJ6/CVrPyQd418uRnR2XRdtHWiFolm5dez6Q6Uqt0=)
                          5: T0TpL1gt1OffZImZKTejT91WlcA.roa (hash: Cjer86EE7lGtPUJ1Q1sqvQdfIGVPP8jt97xmXpJlx9Y=)
                          6: TaDIb5jPq8Dfqw55WrdPa_wRYfE.roa (hash: A834pYY3kBdbNJUhONCqDbuG0AgCoR0qzqyb3wFZ6GY=)
                          7: mGe8yBFW9lxB-AAnuz1KThZTk9E.roa (hash: ESAJQGIFy+MNW2NVcmwe3jeYqyn2gSey09o0h+ViFUU=)
                          8: xE0MAKU9Y3-EjIwfJeUqTkj1JAo.roa (hash: F//KKoAXpZv03HXbyN3qpWDIl7+V99huqWCNxnvbbd0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:76:5d:ce:bd:ed:d9:85:ae:42:62:3d:d1:21:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
        Validity
            Not Before: Nov 22 14:00:20 2024 GMT
            Not After : Nov 23 14:00:20 2024 GMT
        Subject: CN=a9e69fb5a139a290f56c251307169f5558efe4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:be:47:5a:18:15:bc:8d:6e:f1:1c:91:af:
                    da:68:ce:87:b4:a3:f7:08:80:72:b9:1f:4a:2b:05:
                    16:99:d6:53:60:a2:cd:81:9f:90:4d:44:59:58:3f:
                    47:e9:d1:3f:27:74:8b:3c:6b:64:79:84:a6:51:9a:
                    72:1a:50:b6:8a:b5:f5:2b:99:61:97:d9:2f:ae:bf:
                    e6:c1:16:e1:a7:e8:d2:94:3b:ff:bc:32:c8:25:ef:
                    8c:53:24:37:5c:41:09:4e:53:6d:55:ce:d8:d4:c1:
                    86:ff:5e:95:01:cb:a5:15:24:6c:6a:bd:89:dd:91:
                    1f:b5:2c:11:e0:53:7c:12:9a:db:36:4d:8c:c2:99:
                    33:55:02:48:9a:76:bc:de:71:29:cb:62:48:6c:c0:
                    31:d2:01:a0:ef:b8:cd:74:2f:72:ea:bb:b3:2c:9b:
                    b2:b5:cf:18:d2:dd:c2:9f:fa:00:bf:0f:34:4a:af:
                    08:7b:10:77:a0:6c:f8:2c:ed:12:cf:9f:48:d3:9b:
                    83:d3:85:57:c9:90:7c:20:34:58:87:0b:98:c8:96:
                    0b:05:d9:c0:00:56:ac:16:ec:f0:2c:8f:b0:42:c8:
                    ff:9a:df:02:19:73:36:68:4b:49:f6:15:fb:53:aa:
                    e3:8a:d3:f6:1f:f4:42:ee:62:65:cc:45:58:c0:59:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E6:9F:B5:A1:39:A2:90:F5:6C:25:13:07:16:9F:55:58:EF:E4:A8
            X509v3 Authority Key Identifier:
                keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:22:8d:ac:d9:10:29:59:04:17:eb:72:04:b7:e3:02:07:14:
         70:8f:4f:ce:11:b1:f2:b2:20:41:63:c4:d3:c2:58:8a:4f:e9:
         5b:c3:56:75:e3:a9:98:1c:2c:e2:e8:80:db:6a:30:b3:49:93:
         0a:ff:0d:a0:7c:70:f3:e3:ae:44:6c:9e:6a:24:22:80:d3:8d:
         bd:e3:f2:1f:2e:02:b8:0a:ff:01:e6:44:48:fa:f1:ee:bb:cf:
         4f:29:57:14:6d:7a:dc:bc:b6:87:12:66:b6:8c:49:44:40:49:
         5e:ac:58:1f:66:93:fc:12:2a:e6:be:6b:33:be:5a:1d:77:7b:
         47:24:7d:be:75:ad:22:d0:1a:d9:3b:b9:d6:72:cd:97:cf:00:
         ff:b5:43:1b:86:1b:74:3d:b9:c3:5b:4e:f9:fd:15:42:04:25:
         d4:8e:aa:69:9a:06:1e:29:9e:44:5b:5b:a2:8c:25:14:65:b0:
         ed:b8:8a:40:b3:36:47:bb:31:af:06:3e:55:11:e7:91:9a:5e:
         13:9b:e8:c6:87:5e:89:49:35:94:83:a3:14:14:fb:f2:1a:92:
         95:18:b3:9f:96:cb:87:f6:32:72:d8:ed:7e:38:bf:e2:ca:2a:
         d0:79:c0:ce:f3:5b:e3:ab:da:92:7d:ee:9c:62:7c:4f:67:36:
         36:21:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:23 2024 by rpki-client on console-fra.rpki-client.org