Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File:                     3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier:          UrIQg13eAQ/Wpc0EofDkqlzEcKbbFmr9CoGnNvWuPp0=
Subject key identifier:   0A:BC:CF:70:EF:86:A6:61:12:5C:4C:AD:93:CA:A6:CA:9C:D2:46:B8
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer:       /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial:       0193639F89C08BAB743663CC3174BCBAB45B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number:          0F41
Signing time:             Mon 25 Nov 2024 14:00:19 +0000
Manifest this update:     Mon 25 Nov 2024 14:00:19 +0000
Manifest next update:     Tue 26 Nov 2024 14:00:19 +0000
Files and hashes:         1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: 2aVJ5UJ+zrWV8pI0ITKg4JBDB+K8Ql3yMkjaPdL2Y5U=)
                          2: E1G9scYZRT0jwW4owvldhEnRWUU.roa (hash: 22rfbzqktmOcbWhBOCJPxDilrJN6g5TcCI1p5aMDVW4=)
                          3: kaG5xdAZOkKGR3RN7B4QYembAdk.roa (hash: 6M3uGa+uTMgXy1MVbBzOlXXM/YguWaDzZlPmxK2Npxw=)
                          4: tcrvNu39gX3sVfrChcm1I0NFVIs.roa (hash: BworvLra1p1jjWtOIrexEE5ZSxXJT2bIDLnHKNZus+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:9f:89:c0:8b:ab:74:36:63:cc:31:74:bc:ba:b4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
        Validity
            Not Before: Nov 25 14:00:19 2024 GMT
            Not After : Nov 26 14:00:19 2024 GMT
        Subject: CN=0abccf70ef86a661125c4cad93caa6ca9cd246b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:42:03:d4:24:c0:1a:71:d1:e8:09:7a:8c:
                    1e:34:03:fa:f7:d3:2a:96:58:34:ca:db:19:49:0f:
                    59:5b:76:27:4d:12:80:19:ad:74:eb:03:2b:bf:de:
                    ba:70:5d:cc:3e:19:fb:3c:fe:3c:fc:b6:65:02:1f:
                    74:17:5b:15:71:17:54:36:44:af:4d:11:65:db:85:
                    9d:1b:d6:bb:77:a7:88:11:ba:1a:05:3e:0d:a6:a7:
                    6c:1c:12:24:9f:77:2c:e9:d0:46:79:d8:dc:dc:18:
                    90:88:ee:5a:2d:03:1d:43:70:8c:93:13:a3:47:b4:
                    e4:da:60:da:a9:c4:f5:03:7f:9b:27:a9:a2:0d:4b:
                    37:d0:7d:46:38:6a:4a:73:7e:a1:4b:fa:28:53:c4:
                    c3:a9:d1:a9:33:d7:1c:2a:de:88:1a:bd:73:07:af:
                    f0:20:62:e2:83:59:4f:a1:d7:b9:6d:23:9a:85:ed:
                    88:f2:f4:71:0f:14:3e:e3:89:8b:7f:b4:87:46:d6:
                    d1:60:c7:10:d3:08:a8:54:0f:53:1c:17:7d:d5:6a:
                    a0:97:e0:53:35:51:c6:02:3e:93:3a:88:93:53:4d:
                    c7:f1:99:e3:69:db:f8:fd:9e:32:41:30:d0:d1:06:
                    6d:66:bb:29:9c:a7:20:af:94:6e:48:c0:b2:95:c3:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BC:CF:70:EF:86:A6:61:12:5C:4C:AD:93:CA:A6:CA:9C:D2:46:B8
            X509v3 Authority Key Identifier:
                keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:db:4c:19:ac:60:25:10:f1:c4:d2:bb:30:ce:6c:db:81:27:
         05:22:30:95:6b:75:a7:85:15:57:53:60:d7:3e:8d:8f:ad:be:
         dc:e1:87:ed:3b:53:1e:1b:e4:17:48:fd:d1:b8:d4:da:fd:52:
         ff:4b:e6:1b:d4:a9:f9:a0:b6:6b:c1:cf:bc:a1:1a:7e:38:98:
         49:49:28:73:80:bf:88:97:4d:bd:76:83:3b:84:1c:02:85:87:
         aa:15:89:62:fd:07:e7:7b:ef:36:74:cb:83:dd:1c:f5:d1:fc:
         70:54:e2:2e:b5:36:41:d5:48:d2:73:74:f1:33:e9:c1:19:07:
         87:57:82:13:9e:63:65:ae:0c:e1:02:13:8d:45:dc:94:1c:54:
         e1:12:59:a0:07:a0:78:1b:c5:e8:c9:7c:ff:8e:72:04:a1:6f:
         df:31:d2:ce:53:f7:ed:73:37:56:50:5f:f0:d4:5b:9e:25:8b:
         9e:2e:e9:b2:b3:2c:91:b4:42:3e:8d:bd:a1:8b:5c:32:68:74:
         7a:da:01:e3:c5:c5:79:75:94:21:6e:07:66:c5:22:40:8c:3d:
         f9:6e:13:3c:fe:65:78:29:d2:77:96:64:db:fd:03:51:7a:0a:
         e8:fc:ad:ab:fa:e1:5e:a9:96:d8:e5:6e:31:31:82:51:88:9d:
         9a:c5:b5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNjn4nAi6t0NmPMMXS8urRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjQxMTI1MTQwMDE5WhcNMjQxMTI2MTQwMDE5WjAzMTEwLwYDVQQD
EygwYWJjY2Y3MGVmODZhNjYxMTI1YzRjYWQ5M2NhYTZjYTljZDI0NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRZCA9QkwBpx0egJeoweNAP699Mq
llg0ytsZSQ9ZW3YnTRKAGa106wMrv966cF3MPhn7PP48/LZlAh90F1sVcRdUNkSv
TRFl24WdG9a7d6eIEboaBT4NpqdsHBIkn3cs6dBGedjc3BiQiO5aLQMdQ3CMkxOj
R7Tk2mDaqcT1A3+bJ6miDUs30H1GOGpKc36hS/ooU8TDqdGpM9ccKt6IGr1zB6/w
IGLig1lPode5bSOahe2I8vRxDxQ+44mLf7SHRtbRYMcQ0wioVA9THBd91Wqgl+BT
NVHGAj6TOoiTU03H8Znjadv4/Z4yQTDQ0QZtZrspnKcgr5RuSMCylcOq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq8z3DvhqZhElxMrZPKpsqc0ka4MB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdtMGaxg
JRDxxNK7MM5s24EnBSIwlWt1p4UVV1Ng1z6Nj62+3OGH7TtTHhvkF0j90bjU2v1S
/0vmG9Sp+aC2a8HPvKEafjiYSUkoc4C/iJdNvXaDO4QcAoWHqhWJYv0H53vvNnTL
g90c9dH8cFTiLrU2QdVI0nN08TPpwRkHh1eCE55jZa4M4QITjUXclBxU4RJZoAeg
eBvF6Ml8/45yBKFv3zHSzlP37XM3VlBf8NRbniWLni7psrMskbRCPo29oYtcMmh0
etoB48XFeXWUIW4HZsUiQIw9+W4TPP5leCnSd5Zk2/0DUXoK6Pytq/rhXqmW2OVu
MTGCUYidmsW1hQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:00 2024 by rpki-client on console-ams.rpki-client.org