Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File:                     3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier:          EDLvWA6FKMXi6ep1n1/YGW7XpWN3TSC2eBeebyJz6rk=
Subject key identifier:   7A:E9:0C:33:F0:3A:04:F7:CC:1A:B5:2B:37:2F:B2:8C:AA:21:5F:D2
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer:       /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial:       019368FCBE9CBF3D9B2EBD7CFD8F6E7C1E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 15:00:14 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:14 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:14 +0000
Files and hashes:         1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: iaYvwiTPuZQe8OAF1P2uawG0iSImIuWyMT1MNt+hWk4=)
                          2: e_Ed3LwhkDHRwMKUQb_N5zvaQIc.roa (hash: h3l+N0HtWZqmqwC/wqbbMS4p79kBL6l9EF4xQzVAW14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fc:be:9c:bf:3d:9b:2e:bd:7c:fd:8f:6e:7c:1e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
        Validity
            Not Before: Nov 26 15:00:14 2024 GMT
            Not After : Nov 27 15:00:14 2024 GMT
        Subject: CN=7ae90c33f03a04f7cc1ab52b372fb28caa215fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:3d:11:ea:bb:2d:f6:9e:60:5b:f2:ac:2b:
                    7b:7c:e3:4b:51:fe:a3:31:bf:31:98:dc:35:97:48:
                    5d:a5:dd:25:de:6a:0b:27:7c:93:f4:1a:2f:db:d9:
                    6b:34:a0:fe:c0:cb:19:24:8a:2a:09:c9:71:3d:2b:
                    e3:f5:38:ce:af:15:d2:1c:3e:57:0f:e3:98:95:95:
                    ae:06:e3:ac:55:d9:15:f6:d8:0c:59:00:55:e7:0a:
                    fd:4b:2c:7f:08:fd:68:c9:69:08:39:dd:74:3f:2d:
                    ff:3c:dc:a4:92:d2:38:66:43:15:e0:f4:6d:d0:36:
                    e9:f8:50:c1:dd:2b:4a:88:49:07:20:15:28:9f:87:
                    1d:6e:03:0f:00:73:89:34:e5:e9:ba:6d:ed:ed:97:
                    3a:fc:43:b7:89:c6:6b:8b:8d:5e:9d:48:69:5a:38:
                    9c:7b:78:80:b1:98:25:db:4a:21:0e:ef:05:57:18:
                    6f:32:19:59:87:ae:6c:ba:b8:1b:e6:0b:c1:63:4f:
                    8b:d0:a9:5b:b6:d2:85:7e:fd:f4:cd:ce:a3:b8:91:
                    0b:fb:e9:95:7f:f3:b0:c2:7b:8f:59:55:79:c3:67:
                    25:56:81:e2:9b:a4:0f:2a:24:a2:84:d8:27:41:38:
                    91:c5:e9:22:10:4a:8f:43:92:8a:1d:58:a3:3e:ac:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:0C:33:F0:3A:04:F7:CC:1A:B5:2B:37:2F:B2:8C:AA:21:5F:D2
            X509v3 Authority Key Identifier:
                keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:a2:06:09:5c:39:c8:3d:8e:05:be:11:85:82:ff:b3:9d:
         1d:a9:cd:10:23:22:0a:dc:15:0f:95:52:45:ee:20:5c:c1:b3:
         d4:f0:7d:b6:b9:de:87:31:a1:2e:ad:9e:df:46:08:b4:6f:fd:
         71:86:7e:31:6d:b5:d4:36:e3:47:37:13:7a:eb:31:46:6c:a1:
         8c:1f:03:a9:6c:0a:1a:8d:ad:23:0a:e6:33:42:c2:d6:87:2c:
         58:a3:e3:06:86:ae:fe:8a:cc:df:0f:72:41:74:df:72:3e:5c:
         9d:3f:4f:51:20:f0:04:34:d9:bf:d2:e7:98:73:cf:3d:77:87:
         1b:5e:5d:96:59:e8:3e:0c:c2:ae:69:2e:29:9a:ce:59:78:b6:
         68:d1:f4:10:01:0c:c2:c4:ad:69:5c:6e:bc:b5:1a:58:9b:a7:
         75:14:0e:b8:c4:b8:36:e0:fc:88:62:a1:61:1a:33:60:c7:f8:
         7e:33:61:20:79:f2:2b:ff:ca:2e:3a:1c:ee:f8:ab:b8:14:01:
         b6:13:31:cf:54:39:ea:0d:64:e3:7e:40:e0:35:58:d2:fd:75:
         df:2e:19:34:f8:83:12:a6:53:86:23:ca:ea:8d:41:34:7c:b3:
         d6:e6:fc:6d:1e:3b:87:c2:01:60:88:47:8c:66:c4:f2:26:24:
         47:3e:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:50 2024 by rpki-client on console-fra.rpki-client.org