Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
File:                     Po3UOSjt-xIA77xixEH5zSkEhYU.mft (raw, json)
Hash identifier:          4UZW+uqEXwyDu5XKqDfL5SIKklZgG0LMOuYfkJBqFPY=
Subject key identifier:   3B:E8:42:99:FD:D5:BA:BB:72:54:BB:F7:B9:FC:8E:AE:CB:CF:B2:03
Authority key identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
Certificate issuer:       /CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Certificate serial:       01936A7DDC27C1F5480CEAE69A51AFBAD86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 22:00:53 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:53 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:53 +0000
Files and hashes:         1: Po3UOSjt-xIA77xixEH5zSkEhYU.crl (hash: BusYDmmru+oyt2y+eWqI/D5fItemTIc0q2wXo7WhK60=)
                          2: hV8KEcpRE5_qhKhu_0Y-CM1F67I.roa (hash: fDQbGBohxB1iQdnYQCwXfl705tqi66ggTApdWp7E4Ac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:dc:27:c1:f5:48:0c:ea:e6:9a:51:af:ba:d8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e8dd43928edfb1200efbc62c441f9cd29048585
        Validity
            Not Before: Nov 26 22:00:53 2024 GMT
            Not After : Nov 27 22:00:53 2024 GMT
        Subject: CN=3be84299fdd5babb7254bbf7b9fc8eaecbcfb203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:cd:2d:a8:4d:cd:49:df:6f:32:ac:42:af:
                    fa:38:c7:5b:db:bb:b9:3a:ee:68:f4:f0:04:07:df:
                    8c:c7:3d:13:5a:25:9a:5d:fd:3c:0c:75:fd:25:0c:
                    44:a7:aa:a0:e6:ab:d6:b0:31:b0:1f:c0:f0:e6:98:
                    e5:04:9c:73:8d:ac:63:63:1e:7c:b9:41:44:da:a8:
                    a0:09:66:8f:06:f0:54:5a:87:08:ab:c8:cc:f2:36:
                    95:a3:da:da:0d:5f:57:44:d9:d6:24:71:15:ab:16:
                    33:2e:8d:87:a5:aa:ac:ad:2f:54:7e:20:48:1c:73:
                    68:aa:d3:e6:c6:03:33:13:22:48:1e:d7:78:56:dc:
                    f2:b2:01:b8:0e:dd:25:fe:89:2f:9f:62:7f:fd:b4:
                    65:a0:60:bd:61:58:d9:7d:c8:f4:7f:6d:89:5f:01:
                    24:d6:9e:15:b3:3d:7f:ff:9d:e0:cc:7d:be:c0:7a:
                    1d:f1:56:2c:56:f8:a1:81:23:ee:66:fc:93:8d:07:
                    7f:d5:0d:70:d3:65:9f:92:dc:73:dd:84:e2:99:ba:
                    b2:07:1e:0c:2f:d9:23:b0:38:7d:08:58:6d:67:ed:
                    82:cf:e6:2d:a0:f3:4f:c8:ff:86:2d:60:bb:5d:f6:
                    2e:bf:8d:8b:3c:5a:43:c1:8b:12:34:ca:42:70:a6:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E8:42:99:FD:D5:BA:BB:72:54:BB:F7:B9:FC:8E:AE:CB:CF:B2:03
            X509v3 Authority Key Identifier:
                keyid:3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:42:c0:3e:9b:f2:48:cf:f3:16:f1:63:4e:38:ab:06:60:
         b7:66:76:2f:a4:d5:27:f4:13:c5:c7:eb:67:e7:bb:ec:69:e3:
         54:c9:ab:e3:b6:91:b2:ef:26:3c:a8:9d:7c:7e:28:e8:f5:32:
         21:d2:73:6a:ae:8d:df:bd:8c:61:83:fd:0c:aa:54:19:cf:fe:
         30:74:84:48:49:79:2d:15:39:28:9e:2f:05:96:09:78:dd:32:
         91:51:9f:3f:68:49:f5:4b:60:6c:01:a1:62:86:24:08:de:68:
         9e:1d:e7:04:1a:3f:ce:e5:6f:d4:8d:74:7d:f6:32:93:e8:4b:
         44:e2:2e:81:cc:26:a7:58:86:41:1e:14:ba:24:9a:53:64:81:
         fb:25:63:fd:a2:d8:5f:a5:74:f1:97:92:90:f0:57:7c:cb:f6:
         c0:d2:3b:59:a4:13:49:1d:1e:b3:60:9d:5a:a2:b7:5d:4f:21:
         a4:f2:09:7b:04:76:8f:3c:c4:71:ab:0d:ca:be:73:82:7c:25:
         97:61:41:e8:32:29:e4:26:51:1a:51:0f:70:a7:8c:b0:c2:ba:
         0a:62:ba:95:bc:db:45:16:ec:41:01:43:77:49:95:23:50:3a:
         b8:fd:61:9d:e7:02:f5:43:24:96:8a:90:ca:1a:ef:b7:a0:50:
         75:85:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:02 2024 by rpki-client on console-fra.rpki-client.org