Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File:                     3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier:          Ome8EgMOovs2Il6bS2Gp5XD0soBI3eT5/Tc8B6ny7vM=
Subject key identifier:   5B:FF:67:34:71:16:B6:0A:B5:E7:44:B6:FF:1D:A7:8E:DA:21:F9:E1
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer:       /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial:       01938C9CA1151436935D57E521CC4C53C036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number:          138C
Signing time:             Tue 03 Dec 2024 13:01:35 +0000
Manifest this update:     Tue 03 Dec 2024 13:01:35 +0000
Manifest next update:     Wed 04 Dec 2024 13:01:35 +0000
Files and hashes:         1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: CeaAC09h4KI1fnQE9HCKdGW/VN6AIRLZ4nIB36XaXEs=)
                          2: j16ddSFth66sjwN_NWZapxaDSQk.roa (hash: AVzYlL/tdNS5TPdAnTXz9BXdvgrgTg6Quxk796pYuzc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9c:a1:15:14:36:93:5d:57:e5:21:cc:4c:53:c0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
        Validity
            Not Before: Dec  3 13:01:35 2024 GMT
            Not After : Dec  4 13:01:35 2024 GMT
        Subject: CN=5bff67347116b60ab5e744b6ff1da78eda21f9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:26:6d:1a:05:d4:be:8e:c5:37:91:5e:3b:
                    1e:9a:da:c1:03:b1:e9:b5:25:87:df:05:fd:9d:94:
                    6c:4b:ed:ff:2a:36:ee:e5:4c:2a:07:d4:9c:89:28:
                    88:e2:36:53:1b:68:75:c3:ba:1f:dc:72:a1:ce:66:
                    c4:0c:c1:fd:9b:ae:2f:c3:b3:d9:6e:cd:80:8f:06:
                    d4:0b:65:42:00:c2:a0:8b:85:8c:cb:c4:b5:55:4a:
                    86:86:49:56:c0:18:34:38:c7:67:07:18:28:ae:94:
                    85:47:38:1b:7e:89:23:cd:d6:d2:2d:0f:5a:c7:10:
                    77:f2:00:70:7f:35:56:84:9b:86:10:a6:57:eb:59:
                    02:66:24:1f:d8:a3:a2:c7:a5:b5:6f:01:6c:a1:4f:
                    96:85:f4:d0:53:0e:e4:8a:cb:ec:b3:7d:c2:9c:21:
                    32:cf:68:2a:04:ec:34:4d:c1:d5:7b:a6:da:83:17:
                    45:dc:01:78:1d:0d:7e:6b:59:ce:f0:19:30:3b:87:
                    2d:39:33:0f:09:c1:b0:b8:79:65:8d:c3:66:96:bd:
                    37:d5:90:4e:63:84:44:85:5f:3f:13:cb:dd:de:b6:
                    f3:17:20:a2:91:c8:04:cc:e0:50:b9:00:58:d4:83:
                    e4:46:36:3c:8d:79:ea:a2:14:05:53:11:db:28:80:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:67:34:71:16:B6:0A:B5:E7:44:B6:FF:1D:A7:8E:DA:21:F9:E1
            X509v3 Authority Key Identifier:
                keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:be:a1:73:c6:32:02:5b:22:9c:42:08:02:ec:1f:58:b0:3c:
         6b:44:03:ab:f8:9e:05:0e:eb:71:6c:16:d7:33:b1:05:f9:8a:
         d7:0b:73:ad:b4:3e:69:ff:d4:b4:a0:ea:db:75:e0:c0:54:a0:
         1d:90:a2:4d:3e:11:b0:be:5e:b8:8b:03:49:8d:19:4d:80:58:
         bc:5f:15:ae:e9:10:3e:6a:1b:43:e0:45:7d:f8:70:43:95:3a:
         88:84:01:e8:ed:66:a2:20:29:04:6b:72:b0:f4:0c:76:cb:ef:
         84:70:1c:49:1d:a5:5c:32:be:dc:5a:0e:00:e4:cd:a3:82:bb:
         d9:28:6b:3d:79:d9:0c:81:0b:f4:25:05:d8:c9:4b:8a:c1:f6:
         47:0d:ca:00:14:07:31:6f:ec:70:c9:75:f4:92:8a:7b:b4:1e:
         2f:76:bd:e8:dc:de:7a:e1:9d:79:5c:ee:dd:0c:55:bc:15:92:
         34:bb:29:76:77:40:dd:2f:4f:a4:b7:57:c0:91:c3:6d:d7:48:
         fe:0a:ae:5c:cc:7e:e8:15:b1:00:3c:d2:88:0d:3d:d1:1a:8b:
         dd:cc:1c:f8:57:a4:15:b5:47:d9:43:47:e2:a5:24:15:f4:b0:
         cb:e8:56:70:06:64:30:e0:c4:7a:a8:52:eb:ae:84:b1:15:16:
         7d:79:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:36:26 2024 by rpki-client on console-ams.rpki-client.org