Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File:                     3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier:          7LbJQSVxu2U4LC1x9xjUL/oYSzVI0mvYD5479DPLJKg=
Subject key identifier:   8E:B3:45:23:FB:A9:50:45:E8:CD:89:8D:12:A6:99:0D:3A:62:C8:4B
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer:       /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial:       0193579BA0A535E89AAAA3A5645EC20111E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 06:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:37 +0000
Files and hashes:         1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: cR9hBrmpLo28pVNp0VOFSGAIzW1zG4iopqbMDxxQYlo=)
                          2: 7Z5kCjgCcaomSLnVNRwT01Iu31o.roa (hash: 177flGseI8VFQylmvg7OaHD7DXedQeWfSl2kZCJcjOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:a0:a5:35:e8:9a:aa:a3:a5:64:5e:c2:01:11:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
        Validity
            Not Before: Nov 23 06:00:37 2024 GMT
            Not After : Nov 24 06:00:37 2024 GMT
        Subject: CN=8eb34523fba95045e8cd898d12a6990d3a62c84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:9f:40:ce:f5:3a:0d:ec:38:63:36:c8:59:
                    82:dc:74:8c:d9:72:36:0f:ae:bf:c4:e0:27:55:6a:
                    30:b0:2e:9e:a1:db:4b:c9:ab:36:62:b7:60:c3:16:
                    fa:ec:7b:a1:e1:3f:7e:79:83:10:75:87:3f:be:6f:
                    7f:8e:4c:ac:9f:0c:5b:8e:da:0e:12:1c:cb:ed:b6:
                    fa:b6:d9:79:45:7e:8c:fc:86:d2:57:68:23:16:14:
                    4e:76:fa:ff:26:51:08:64:4f:39:80:19:88:00:20:
                    dd:01:ec:52:84:56:b6:f9:ce:58:fb:2b:2b:6f:db:
                    0a:50:b2:1a:16:e3:94:59:db:20:c8:78:04:08:c6:
                    e3:cf:54:e2:06:07:9c:a2:cb:de:2b:7e:89:09:a4:
                    2b:69:3d:89:72:eb:5a:35:a6:5a:16:16:94:40:81:
                    94:37:5b:70:21:08:91:39:b0:5b:2a:d5:0b:e0:8c:
                    5c:ff:50:3a:7b:8f:1d:ed:82:f7:90:9b:dc:65:a1:
                    4a:7c:d2:e9:bd:ba:63:cb:78:e6:60:42:4d:d3:b4:
                    c3:56:c3:c8:ab:c4:18:44:e6:18:55:78:cd:b6:d1:
                    4c:5e:41:44:3f:28:a4:f6:58:40:92:51:e9:8b:28:
                    ef:ac:fa:b5:eb:a3:0e:0e:34:2c:2c:72:7a:59:b4:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B3:45:23:FB:A9:50:45:E8:CD:89:8D:12:A6:99:0D:3A:62:C8:4B
            X509v3 Authority Key Identifier:
                keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:68:53:2a:b1:99:a8:c8:b2:f9:3b:62:44:48:3c:5e:d2:
         0b:65:04:f3:2d:9d:6e:08:53:6d:e5:ae:2a:9e:92:09:7b:78:
         95:b1:97:2e:ab:a9:2f:cd:ab:c0:0b:74:48:9c:0b:03:60:a7:
         8d:74:64:b0:5f:c6:22:67:f3:45:52:48:dc:b2:ee:9e:07:84:
         43:d4:03:a1:3a:35:09:4d:17:69:13:65:04:1d:9a:92:60:3c:
         89:0e:2f:ea:b3:b0:07:f3:ed:81:d2:8f:2d:0b:81:f3:6d:66:
         f4:93:f7:04:9f:3f:67:dd:4d:51:4a:e4:8f:d6:f2:79:d4:1e:
         3a:85:9b:2f:a7:57:f7:4e:ab:0a:d8:b1:3b:95:84:64:36:ec:
         d8:ab:d4:0a:3f:d0:e8:22:52:d5:88:3b:cb:55:cc:b6:3c:ad:
         91:8f:3d:61:bf:76:de:c3:ee:18:e4:29:d8:ca:cc:77:92:1a:
         13:48:55:50:34:89:b7:ce:b2:80:43:68:77:ba:e7:25:e2:45:
         1d:1e:2a:18:b9:8b:1b:b8:64:b6:f5:06:e1:95:21:2a:f6:ff:
         e6:ae:b6:39:03:90:8c:8a:f7:15:82:23:1e:d6:b5:eb:e7:1e:
         e1:4a:8d:7b:37:61:13:9e:86:18:64:9c:15:d8:6a:75:b4:72:
         de:88:f7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:17 2024 by rpki-client on console-fra.rpki-client.org