Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File:                     PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier:          z2NTcl0ITHIx3aKTqQNWJlbzkxPJBLGCH6+FMgzFgjU=
Subject key identifier:   C5:A0:49:2B:3D:1B:5E:1F:37:32:E1:66:51:D0:40:F4:F8:44:04:8B
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer:       /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial:       019369D8B3D5AB63E46FD37BB6DF3A998F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number:          0AA4
Signing time:             Tue 26 Nov 2024 19:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:29 +0000
Files and hashes:         1: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: Zi2ZLhatik8efyV8JLs+KzOQL1T/GpzBt1MxpqZK3a0=)
                          2: l6G-2Fb5f-w65YWqMuY7cw5Sj-k.roa (hash: f+JLEUJfaRblQ+HSdtlX2l6J7EYvWGtAdssRfIzGpE8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:b3:d5:ab:63:e4:6f:d3:7b:b6:df:3a:99:8f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
        Validity
            Not Before: Nov 26 19:00:29 2024 GMT
            Not After : Nov 27 19:00:29 2024 GMT
        Subject: CN=c5a0492b3d1b5e1f3732e16651d040f4f844048b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0e:22:5a:ea:e9:78:7b:4b:52:03:08:f6:bb:
                    2b:18:32:4c:8e:8d:d2:cb:44:cf:09:dc:ee:88:a1:
                    08:4b:68:94:2e:33:9f:f8:c2:12:86:38:fb:4a:bc:
                    9b:bc:1e:91:86:95:5d:ff:c2:b3:21:91:45:c1:80:
                    35:c1:7a:cd:3c:ae:3f:64:1a:96:d1:b3:e4:82:fe:
                    ea:55:0d:fe:74:39:85:52:43:2c:3a:91:5f:2d:06:
                    f9:31:bb:cf:b2:21:f8:63:49:62:dc:95:05:55:b6:
                    2f:90:e1:1a:8f:71:78:8b:5b:3e:5d:21:46:d0:10:
                    64:f3:f7:e1:1d:71:c1:88:99:a8:c7:0c:be:89:ad:
                    06:47:0d:e4:c1:48:d8:0b:fc:6d:53:28:60:3c:b6:
                    ed:a4:ec:ce:ea:b3:39:d4:88:0b:88:08:f2:60:b4:
                    34:da:fc:3d:bc:14:ed:b1:be:33:45:14:09:59:03:
                    1f:1c:8b:f1:fd:b3:1c:86:e5:e0:7a:c3:df:6e:01:
                    11:88:92:1c:54:a6:6a:a2:cf:79:a0:55:a6:10:96:
                    97:99:b3:00:53:46:3e:17:e7:c2:a7:25:1a:8d:23:
                    c7:99:65:e5:1a:28:97:43:ad:4c:14:17:a9:cb:f2:
                    b2:92:8c:69:06:9e:cc:ef:34:60:73:95:aa:27:1d:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A0:49:2B:3D:1B:5E:1F:37:32:E1:66:51:D0:40:F4:F8:44:04:8B
            X509v3 Authority Key Identifier:
                keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:81:95:62:f6:aa:1e:d9:21:6e:77:40:d0:86:7e:8b:1f:81:
         3b:7d:58:11:fb:27:04:99:e4:9d:54:dd:86:0e:c8:16:ba:60:
         f7:d6:1e:aa:a8:ce:0f:55:df:f4:cc:44:af:94:d7:42:b3:90:
         39:99:ee:b0:f9:8f:87:bb:07:a0:fb:1d:9b:52:48:b4:f2:da:
         34:b0:43:50:68:3c:a1:73:14:d2:2c:9d:af:5f:96:30:d9:1f:
         81:56:3e:47:62:59:0d:3f:ab:64:c5:99:f0:f0:ab:31:15:24:
         b3:a7:6d:cb:85:66:68:f0:b1:8d:f3:de:d7:61:ff:11:82:32:
         11:07:60:98:15:36:84:64:af:b5:4c:e9:05:cc:a0:ff:26:4c:
         9c:9a:16:2e:bc:cc:60:e8:b6:7a:ec:ff:a0:7f:5f:2c:56:af:
         d9:82:b7:96:eb:bc:39:49:94:bf:cc:8e:2a:7f:27:00:18:58:
         e9:b8:a4:20:9e:44:ab:0c:f0:de:bb:4e:8e:0f:00:8f:25:2d:
         57:e4:1b:ea:ef:a9:63:8d:e6:16:04:ac:a3:80:54:b4:5d:b1:
         90:86:02:5c:61:f9:c0:c3:16:4b:28:8a:8e:9f:7c:ff:a7:87:
         4e:0c:13:1f:7e:54:60:fe:e3:c9:31:e0:d6:ef:29:e5:f2:40:
         d4:2f:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:22 2024 by rpki-client on console-ams.rpki-client.org