Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File:                     Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier:          BTCuJxKCigZncy4/P2fE2E+1Bnln0StVivIS0Pbpy88=
Subject key identifier:   D6:AE:E6:87:C8:1D:9E:6C:6A:29:7B:82:6E:F4:C8:5F:CC:F9:A9:A3
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer:       /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial:       019352ABF99381000A57D11D581D00FEB4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number:          0886
Signing time:             Fri 22 Nov 2024 07:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:22 +0000
Files and hashes:         1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: iTYmVPQwC0EktAv1PvmLbh/3YTSbItCcD66PgQOm5ZE=)
                          2: VgvRuYlkcOJyI5OW4pKCbei36_c.roa (hash: 0FQ1wVYmm7kAk5dcHIU0y46Mxb6tq4TOxSUT42xsSAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ab:f9:93:81:00:0a:57:d1:1d:58:1d:00:fe:b4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
        Validity
            Not Before: Nov 22 07:00:22 2024 GMT
            Not After : Nov 23 07:00:22 2024 GMT
        Subject: CN=d6aee687c81d9e6c6a297b826ef4c85fccf9a9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:82:cb:84:68:5e:92:f3:0c:71:75:f4:39:
                    38:0d:bb:ab:c2:c5:c4:47:57:0e:7c:22:d8:55:4e:
                    01:99:94:c9:43:ab:df:86:e7:c7:91:9d:67:92:71:
                    0f:c5:bf:7c:3f:b7:43:2d:2d:47:02:55:db:d4:27:
                    22:23:b7:ad:37:03:b8:7e:42:b1:42:34:e2:b2:6d:
                    49:8b:91:62:47:11:e2:29:f2:8e:4f:d0:d0:0c:43:
                    da:73:9c:fb:37:07:1b:6c:e6:8b:03:d5:d6:32:8a:
                    49:cc:5e:2a:0a:ae:71:bc:a0:73:98:74:11:80:11:
                    13:1a:1b:4b:00:4b:72:8f:2c:5c:0b:ff:0a:6c:47:
                    58:96:f1:8c:24:92:d7:61:d2:cb:f1:57:44:71:c2:
                    04:cb:e1:7e:fb:71:43:6d:4c:25:61:fb:00:0a:07:
                    9e:d9:84:bc:6c:e3:e0:2b:66:e1:cc:97:d0:73:43:
                    0c:da:5b:83:9b:72:80:8f:42:da:f6:be:b0:da:6a:
                    6b:7e:bd:db:0d:da:d8:c3:a4:cb:75:b5:91:d9:bb:
                    02:d8:d4:2d:8a:be:21:68:10:cb:4b:88:01:53:2a:
                    f0:45:09:dd:b8:9d:df:7f:57:6e:7d:eb:d6:a5:86:
                    73:08:a8:ff:1a:7d:75:b2:95:11:20:8f:45:34:f1:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AE:E6:87:C8:1D:9E:6C:6A:29:7B:82:6E:F4:C8:5F:CC:F9:A9:A3
            X509v3 Authority Key Identifier:
                keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ab:d2:8e:45:5b:cd:a0:6d:8e:b7:dc:e7:89:aa:61:5a:07:
         dd:3d:80:a3:07:a8:2c:cb:8a:4b:6b:98:68:94:98:1f:2a:63:
         a2:f1:b9:ea:ff:9f:e5:a5:7f:67:f7:94:f6:6f:03:3e:16:a0:
         38:88:bb:84:90:88:f6:97:ec:b6:85:69:5d:30:46:a3:94:b8:
         c3:ac:0b:1f:21:97:76:2d:39:01:d7:10:83:a8:da:03:5f:d8:
         8c:21:f3:56:4d:d5:c4:d7:81:67:b5:e5:a5:d2:cd:da:c4:16:
         a1:e8:8a:52:c9:01:a5:75:5b:44:ed:59:62:aa:40:9d:65:69:
         d7:17:0b:f5:6a:a3:c0:61:c3:00:20:45:a9:1d:8f:2f:9e:74:
         db:93:70:53:85:cb:23:11:7c:d5:55:73:fe:5f:84:bc:21:31:
         ab:43:2b:86:12:a9:df:da:c9:1d:2e:1c:10:32:ef:9f:a8:1e:
         0a:51:64:2e:3b:fe:bc:25:41:43:b9:c7:72:8a:5b:45:32:39:
         95:21:3a:c5:1e:6b:a9:ba:3f:b5:7d:9d:6f:1e:db:1e:4e:cc:
         6d:69:7a:ae:7f:c7:6c:f0:43:42:79:03:98:b1:ab:c9:98:4d:
         23:63:0e:f8:a4:c2:d8:eb:f9:21:4d:1c:a5:a8:49:75:54:e6:
         5b:47:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:17:42 2024 by rpki-client on console-fra.rpki-client.org