Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File:                     3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier:          INrKvne3o5Ws8ZUBCUURnPmqJSmy5zsuLTNaNSGk8Rw=
Subject key identifier:   04:B8:2C:63:3F:F9:3B:4C:24:E7:AA:AD:DD:56:2D:A3:51:FF:70:48
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer:       /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial:       01938C9D435CE1CBE79E2A83306FEE2C6623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number:          03E3
Signing time:             Tue 03 Dec 2024 13:02:16 +0000
Manifest this update:     Tue 03 Dec 2024 13:02:16 +0000
Manifest next update:     Wed 04 Dec 2024 13:02:16 +0000
Files and hashes:         1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: ean/nnn7GXj7XqzNAnUVs0A1XNlpOIU9xnpwwg2Dl5M=)
                          2: _Bum54a-s9YDXjwYlyoOh_BdHsE.roa (hash: p0OugWy8oYDszv3kSJL2BzIJfMuxmDd8yFA82nWkbds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9d:43:5c:e1:cb:e7:9e:2a:83:30:6f:ee:2c:66:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
        Validity
            Not Before: Dec  3 13:02:16 2024 GMT
            Not After : Dec  4 13:02:16 2024 GMT
        Subject: CN=04b82c633ff93b4c24e7aaaddd562da351ff7048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:3c:35:a0:50:17:d7:21:e4:eb:fb:26:c3:
                    a8:2f:f6:58:f4:2f:bf:de:c9:e6:90:a5:19:9b:24:
                    82:93:81:49:88:d4:70:bc:7e:e4:4d:01:2a:81:21:
                    f1:09:d2:f4:8b:32:39:c3:e3:1d:c0:7b:26:32:cf:
                    13:18:fb:31:7d:49:b7:01:0e:19:88:68:a9:4d:e0:
                    b2:f5:6e:b2:c5:9d:5b:f6:06:db:f6:9e:0f:3b:f0:
                    2d:42:04:f6:d3:9e:34:ad:6b:df:b1:0b:80:d5:3c:
                    65:53:58:fe:b9:9b:5c:0f:93:7e:b0:16:13:99:5f:
                    13:68:b7:2e:8f:81:1c:f5:8a:5a:d5:7b:49:c4:64:
                    33:a8:d5:13:d7:98:04:2a:40:71:56:4a:8e:b1:e6:
                    3b:30:9c:6e:1f:f1:3e:d3:20:e7:0e:68:a5:09:3e:
                    94:e8:79:49:66:a2:c4:4d:6c:71:fc:a3:99:c9:d7:
                    a9:cc:21:67:73:72:2e:d5:73:bf:c5:a3:5b:ed:6d:
                    c2:25:65:5c:12:fd:8b:50:d4:2b:77:5a:3e:e7:4d:
                    bb:16:bd:6c:8e:d0:42:ad:e2:0f:7a:b5:80:4c:d4:
                    81:7d:9b:fe:1d:56:e3:b4:2f:01:4c:15:05:54:f9:
                    f1:32:10:65:77:55:4c:24:4a:d4:c8:72:79:a1:c6:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B8:2C:63:3F:F9:3B:4C:24:E7:AA:AD:DD:56:2D:A3:51:FF:70:48
            X509v3 Authority Key Identifier:
                keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:22:c5:77:d7:81:5d:3c:b0:c0:55:87:9e:ff:5d:5c:3b:6f:
         68:43:56:92:4c:d8:df:2f:85:45:13:5f:da:45:be:22:9f:79:
         77:16:94:21:0b:e2:be:db:76:26:62:6a:30:b4:90:5b:33:c2:
         b8:d1:b9:ae:b6:4a:9d:cb:ac:95:f4:aa:05:8f:5e:83:ee:26:
         5c:f5:20:df:d0:9c:e8:1c:b0:07:e7:0b:29:85:4e:df:42:ee:
         ca:39:f9:2a:3f:69:ad:1a:37:8a:30:98:09:6c:54:4a:30:93:
         db:33:97:06:fb:db:87:e9:23:4f:7d:92:aa:f6:57:8b:31:95:
         7e:25:df:ff:61:2e:52:a0:b2:aa:d3:c8:0a:2f:d3:9b:ca:47:
         42:94:c9:43:fc:28:9e:ee:84:b6:4d:ca:cf:65:35:d3:61:7a:
         e4:c8:0a:8f:85:b6:6d:83:2e:a9:a9:5f:e8:99:ac:9d:5d:c3:
         da:84:ae:b4:1c:c8:6e:16:f5:cc:4b:ef:8b:e1:16:52:11:e2:
         6e:9d:b7:83:47:d9:02:1f:45:29:61:d7:54:b2:be:1c:65:c2:
         7d:43:1e:0c:9b:83:69:c9:54:ad:15:ea:0c:41:97:a9:f6:b2:
         45:b7:14:62:6c:a7:b1:96:d6:81:4c:d0:9a:18:1f:76:5a:3d:
         5b:52:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:35:15 2024 by rpki-client on console-ams.rpki-client.org