Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File:                     3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier:          QZdA5ZE+yQ4YDXdSRyEu8z/aOhMLL/7MQkDFuJw85ms=
Subject key identifier:   D8:14:7C:98:64:61:24:9D:1A:3C:BD:0E:30:45:22:01:4B:44:C4:FF
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer:       /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial:       019239942462507A26EDE79DDE0CE0B71613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number:          0165
Signing time:             Sat 28 Sep 2024 17:01:02 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:02 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:02 +0000
Files and hashes:         1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: Ff/QGTbGTsH8nDQSUiIXR2M2c3VAK7CMPkAHiVsFxso=)
                          2: Cmemwho5LQToP7xlvAzCInUQwnc.roa (hash: UeNrtWVRq+jsxf1Aimank/xElaVy+xdzgiFs+GsoZqg=)
                          3: fxuSU7_Dl7d3UBfvTamm5kxSfJA.roa (hash: ZLlmcw1g0eOQYx4Be9061L3iCCDQ49ttv4MlK+LQCGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:24:62:50:7a:26:ed:e7:9d:de:0c:e0:b7:16:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
        Validity
            Not Before: Sep 28 17:01:02 2024 GMT
            Not After : Sep 29 17:01:02 2024 GMT
        Subject: CN=d8147c986461249d1a3cbd0e304522014b44c4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:35:5c:87:74:da:91:9d:dc:ce:03:5d:91:
                    d0:14:72:86:ad:22:aa:27:f9:6b:ae:fd:62:75:a2:
                    2d:d4:e0:a8:c5:06:9d:55:43:3a:72:58:ae:4e:d6:
                    e5:79:b5:2a:82:38:b1:6d:fd:c4:35:b0:c9:f3:f5:
                    60:82:02:87:38:2f:75:7e:88:2b:b3:65:dd:bc:84:
                    46:00:a7:4d:19:da:00:2d:58:fe:3f:9a:1d:d8:eb:
                    bb:de:27:0e:c5:2e:fe:0d:dc:3c:2a:f5:f6:3b:f5:
                    5c:5c:50:5f:98:05:30:20:c3:87:ae:2c:23:62:0e:
                    d3:0a:72:fa:bd:70:0c:e5:19:d4:a0:c4:21:a1:2a:
                    c3:77:d7:5a:dd:ba:28:2f:69:eb:f6:77:c0:96:ac:
                    bb:a5:7e:a5:75:66:cc:e5:d3:0f:96:29:81:76:84:
                    0e:3c:ed:94:a1:6a:9c:04:a5:79:ab:df:1a:07:15:
                    5d:ea:1f:bd:f5:52:2d:08:12:41:ef:0a:99:25:31:
                    9c:cf:d1:2d:1b:d9:0a:9a:36:7f:d1:9b:d7:86:75:
                    c2:49:2d:70:ff:40:06:0b:b5:73:75:0d:76:d7:83:
                    7e:fc:ec:9a:96:1b:8e:05:cc:5b:71:69:b5:8e:e2:
                    0a:95:b8:98:7b:90:7a:81:72:4b:f2:08:e1:87:fc:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:14:7C:98:64:61:24:9D:1A:3C:BD:0E:30:45:22:01:4B:44:C4:FF
            X509v3 Authority Key Identifier:
                keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:db:4d:16:79:21:27:19:9d:9d:6a:cc:f5:5d:88:c8:6a:dc:
         2d:37:bf:a4:fb:04:bc:4c:c0:42:86:fb:e7:01:fc:35:7a:81:
         10:6e:4d:aa:3b:91:92:f0:65:b3:00:58:cc:1b:25:97:00:d3:
         be:c8:f2:52:73:80:fb:a7:d4:73:3d:84:e0:fa:eb:60:24:0e:
         72:c6:c1:fe:50:cd:fc:b2:d0:6e:a9:29:01:72:fa:f4:3a:33:
         b6:3f:a9:e7:81:bd:aa:1e:a4:78:a8:13:73:34:fb:72:4d:9b:
         94:05:f5:3f:27:75:ed:ef:d6:b5:8d:ac:b7:78:e0:85:74:96:
         f6:28:dd:08:83:90:13:3d:10:f3:4d:08:ad:18:2e:4e:d4:89:
         31:65:c2:39:36:56:05:66:d1:a4:8d:53:dd:96:0d:3e:16:94:
         16:6c:4b:61:81:86:31:12:80:bc:b4:bc:74:53:c0:e8:eb:34:
         5b:88:48:3c:92:7b:13:a2:4a:2d:9e:8b:43:90:fc:81:e4:0d:
         d3:71:25:94:77:50:17:f9:17:ce:94:c5:7b:a9:b9:1b:27:43:
         32:ba:34:fc:39:c9:5b:a6:81:22:92:16:ab:ef:ff:d9:33:78:
         40:51:b5:b6:9b:e6:a4:c4:14:5c:30:fe:ce:8d:80:39:5c:4e:
         a5:c0:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:22:05 2024 by rpki-client on console-ams.rpki-client.org