Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File:                     x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier:          lW6WWTf07vC7XGQpt2ze0Uas9jJjbtp5uqOdbCtlgYQ=
Subject key identifier:   65:76:4C:9A:B2:3E:41:93:30:4E:18:63:9C:F0:4C:99:48:3B:96:CA
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer:       /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial:       01935689A5482DF77BC1D4C7287140AF15BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:21 +0000
Files and hashes:         1: HTmvRW_zV4w090FgOybkUBFNRqw.roa (hash: 3MKuF40770Y8ap3+0Aj5gKYQSehLHx0XhGARpiokR2U=)
                          2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: rD2x1Qjzns9GZ0y9F8Hhv9IKvTCqR/9IKYxa9lWIusU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a5:48:2d:f7:7b:c1:d4:c7:28:71:40:af:15:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
        Validity
            Not Before: Nov 23 01:01:21 2024 GMT
            Not After : Nov 24 01:01:21 2024 GMT
        Subject: CN=65764c9ab23e4193304e18639cf04c99483b96ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:4e:cd:5b:1f:df:03:bc:16:7c:e6:90:c8:
                    ba:06:97:69:4c:02:d9:47:49:d2:36:ce:84:7b:a6:
                    b1:1e:4f:03:e5:d4:7f:3a:6f:b7:ab:2c:1b:ea:24:
                    9c:7a:f2:ed:5b:07:e6:a3:16:f3:56:84:20:40:83:
                    46:e7:01:8b:82:a8:84:b9:6a:ad:1b:9f:08:f6:6d:
                    8e:dc:96:41:ad:8e:c8:4b:a2:76:86:51:32:41:f2:
                    fe:e9:34:4e:bc:14:6a:b2:fd:c1:ba:45:3b:eb:de:
                    b8:4b:62:50:02:d8:79:a2:e2:03:5d:f1:a5:a4:27:
                    3f:0a:63:ba:f8:51:b9:e0:06:4a:ce:6f:55:42:79:
                    3a:95:20:83:44:e3:b5:fb:79:4f:8f:9a:9f:e8:55:
                    f7:5c:ca:33:27:cf:cf:b3:b8:84:9a:ee:8d:00:ce:
                    ac:53:e5:02:69:20:f9:06:0b:96:de:92:16:ec:88:
                    5b:28:39:fc:58:07:2e:be:51:03:f5:94:35:f5:b5:
                    b9:50:91:ca:c5:25:53:b7:26:da:f4:4e:d1:e9:bd:
                    6d:07:34:eb:ab:e9:88:59:e6:c6:14:db:d0:13:25:
                    d7:d7:7b:c7:37:77:e9:d3:d7:7f:ac:d0:28:cc:18:
                    1c:20:f2:f2:31:d3:bc:94:24:34:c5:e6:4f:c3:bd:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:76:4C:9A:B2:3E:41:93:30:4E:18:63:9C:F0:4C:99:48:3B:96:CA
            X509v3 Authority Key Identifier:
                keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:b6:98:09:5c:63:96:ed:a1:37:0f:02:ca:1f:b6:85:8e:
         c1:98:cf:b7:1f:04:03:f2:e0:24:89:8f:12:e1:f2:d1:c2:6f:
         2d:69:e2:d5:1e:2c:3a:ec:cd:0c:b4:9b:2c:2c:f1:84:3b:31:
         e3:8a:a8:9e:e0:45:40:ca:9b:07:84:82:d5:61:16:af:fb:5a:
         c6:fa:ac:e6:45:36:84:65:c9:b7:93:55:1e:98:d7:7a:85:b4:
         61:1c:40:2f:43:51:1d:bc:08:72:b6:ed:09:56:4a:3f:1a:82:
         5e:f7:6f:ff:bf:e6:b6:8a:94:0c:d2:03:1e:bf:e5:ab:bc:3a:
         11:60:34:36:f5:ea:e0:00:53:9a:5a:80:e1:1e:9a:69:b0:94:
         c8:96:34:a3:71:19:6b:50:c8:94:e0:ef:b1:db:db:56:52:4d:
         18:d2:78:7a:51:4f:91:94:c2:de:61:85:ce:a4:54:e2:49:a2:
         16:f6:c4:65:44:1b:df:0d:31:65:13:77:6b:6a:dc:c8:85:4a:
         9a:bf:18:a2:45:66:bc:cd:a2:af:7f:ab:96:ba:02:49:62:8b:
         b7:c3:d7:a7:b2:2b:2f:11:04:98:6b:fb:58:ed:8e:a1:78:97:
         9a:3d:74:a8:de:8f:ed:fe:58:d8:3a:a8:ed:4a:a5:2f:1d:e7:
         77:46:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:03 2024 by rpki-client on console-ams.rpki-client.org