Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File:                     3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier:          m7qAt7Jz6anmVk3sXk6z1ncoItCUHf8VvFjIXeerhj8=
Subject key identifier:   FE:BB:45:4B:32:54:3A:1F:8D:03:52:E1:B0:E5:AC:67:7B:AC:AF:C2
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer:       /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial:       01936A7D6E03C016FE9E4FBEFAFC63AF09E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number:          0C02
Signing time:             Tue 26 Nov 2024 22:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:25 +0000
Files and hashes:         1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: FAsq/aSmdnhLXwiNIE92eRVtANeNZCeULLt/Rx1ceTU=)
                          2: 74qxwp7yPix8vW0XwQ6NzuEWwO8.roa (hash: HJ8QWXEt9lgRBvpnBskDj5dQPXKGK4alplc4YMq/O2M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:6e:03:c0:16:fe:9e:4f:be:fa:fc:63:af:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
        Validity
            Not Before: Nov 26 22:00:25 2024 GMT
            Not After : Nov 27 22:00:25 2024 GMT
        Subject: CN=febb454b32543a1f8d0352e1b0e5ac677bacafc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9c:71:0a:6f:8b:36:e3:d0:f7:9c:48:cd:28:
                    df:d0:58:df:75:08:54:fd:7b:71:45:07:6c:67:81:
                    0d:82:49:ce:f0:c9:bf:41:71:fe:5c:1d:50:7f:82:
                    58:33:01:1f:7f:4e:21:53:94:c7:07:44:fe:95:97:
                    42:d9:62:e4:77:a7:1d:87:4b:0d:2a:f8:dd:4d:f2:
                    8e:0b:ab:82:5b:20:fe:0f:9b:93:f4:1a:d2:db:59:
                    74:92:c0:31:fd:a4:22:ef:6b:4d:14:65:61:29:4c:
                    a5:8d:00:b6:96:74:fc:b6:bd:dd:74:9a:c3:7a:b9:
                    17:7e:78:08:83:72:f1:57:55:f8:6d:69:b5:f7:64:
                    94:36:fa:78:dd:e6:6b:0f:f3:ad:80:f9:d0:b5:da:
                    f5:93:a1:9e:e4:9b:d0:df:6f:41:6c:d9:80:b5:7d:
                    98:53:44:28:ed:1b:1b:60:fe:61:ff:7c:b0:27:7b:
                    eb:66:ed:a2:80:a0:29:dd:8b:8c:16:95:16:67:8b:
                    9c:35:d4:be:ac:92:57:30:36:b1:e4:48:fa:a5:3b:
                    77:9b:99:d2:51:ab:59:8c:ff:bd:f4:ed:f8:6a:84:
                    b0:08:d4:f1:8b:9c:30:0e:d9:76:1c:6d:de:c6:74:
                    1c:f9:5d:f2:f2:47:78:03:2f:e4:f8:16:eb:29:70:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BB:45:4B:32:54:3A:1F:8D:03:52:E1:B0:E5:AC:67:7B:AC:AF:C2
            X509v3 Authority Key Identifier:
                keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cf:51:d4:b9:8c:39:93:42:99:d8:2b:f3:fe:cc:83:9c:d9:
         35:ee:70:75:a7:4b:37:9e:9e:3b:89:b7:a5:e2:48:0e:27:08:
         5d:97:97:e3:83:06:7b:a5:6b:82:b4:73:8e:80:4f:8e:50:b6:
         01:1d:7a:f1:ea:94:fa:fe:fa:ac:5d:d0:20:c5:be:61:cc:33:
         08:1f:b7:14:b2:13:92:81:ac:78:a4:93:c2:99:dc:89:46:5e:
         90:b3:7b:c8:14:f5:76:d9:ed:7a:ef:bf:5f:af:72:e8:27:f8:
         79:11:dd:4d:0e:bb:14:7b:4b:98:22:45:20:c3:d0:37:4b:ee:
         41:4e:5e:c5:be:0c:51:18:e2:5c:53:de:79:53:2a:e4:b8:70:
         39:cc:02:49:4e:aa:4c:cf:68:07:d1:30:5e:71:ae:32:00:ef:
         9a:03:c1:d8:f3:f7:02:01:5a:be:6c:0c:47:e9:78:ed:82:d8:
         cf:aa:e5:66:dd:25:a9:4a:c6:b9:e8:47:6e:c4:db:c2:03:cb:
         d6:aa:9c:12:80:48:25:83:eb:91:73:6d:78:a6:b4:28:99:59:
         1f:27:d0:a0:69:14:eb:95:f8:be:7b:43:2d:2d:04:97:fc:85:
         2c:e9:55:c8:1b:76:4a:8e:26:ed:c5:01:ee:c0:46:76:36:98:
         72:c9:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:50 2024 by rpki-client on console-ams.rpki-client.org