Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File:                     3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier:          ZKgx3fUuu1KmG4Sv5jgKIdxEHOPOQOvFg6OC3UZ8WsU=
Subject key identifier:   7F:49:22:C9:D6:80:18:44:F3:D5:18:CE:92:CE:F7:55:3E:B6:5F:3F
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer:       /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial:       0193579B9B0F8A75531AE0969F3675724F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number:          0CAF
Signing time:             Sat 23 Nov 2024 06:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:35 +0000
Files and hashes:         1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: eHcktAviLKQlkxrs/P2jnt2q87/eW5fvIcETmLaI0+I=)
                          2: AE1kbmdzJgTzps3TsiCAm9zgQGE.roa (hash: RJSQOTFmKprnwwKku6Sas4nSS4Z+/y6y5tq4UVIHB4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:9b:0f:8a:75:53:1a:e0:96:9f:36:75:72:4f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
        Validity
            Not Before: Nov 23 06:00:35 2024 GMT
            Not After : Nov 24 06:00:35 2024 GMT
        Subject: CN=7f4922c9d6801844f3d518ce92cef7553eb65f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c9:f9:af:e1:0c:63:7b:68:75:e8:55:8b:9b:
                    bf:fd:ca:15:40:d1:55:d6:d3:98:24:89:09:0a:04:
                    a9:e2:30:36:6a:95:cf:26:b0:d3:15:55:2a:44:db:
                    2f:16:52:4e:0c:28:ac:fe:c0:b7:66:e3:52:be:02:
                    16:2e:dc:3e:a9:13:e5:51:7a:0d:69:f4:6c:c1:3a:
                    bf:38:da:df:93:27:27:34:1c:eb:6f:16:2b:75:34:
                    9c:a6:bf:52:69:84:6a:6f:b8:0c:63:cb:35:a4:5a:
                    ea:6a:46:8a:d5:ee:c8:6f:62:2c:36:e8:6a:12:b3:
                    33:bf:6f:53:cb:2d:9e:6f:19:57:d4:28:21:e4:97:
                    1f:37:59:6d:0c:24:b8:35:9e:01:12:7d:72:c3:dd:
                    bc:44:32:65:10:b5:4a:9b:a7:a6:be:10:ae:64:f8:
                    8a:cf:70:cf:32:f5:ba:66:9f:ff:2a:0e:6f:95:89:
                    76:ae:51:dd:53:06:15:3e:12:90:57:4e:c3:bc:32:
                    e9:50:5e:e3:67:84:64:3f:30:8f:1f:7a:63:1c:1b:
                    fe:7f:12:ad:27:05:cd:a6:49:7a:3f:94:82:97:fe:
                    01:5f:53:d7:0f:63:f5:01:3c:54:5b:f1:a6:4c:90:
                    dd:f8:15:51:71:04:d3:08:ea:70:e1:ce:00:e1:a3:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:22:C9:D6:80:18:44:F3:D5:18:CE:92:CE:F7:55:3E:B6:5F:3F
            X509v3 Authority Key Identifier:
                keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:d9:d6:64:d3:28:00:27:33:ba:87:7a:e6:01:88:2f:58:
         53:6e:8a:55:da:e2:13:8a:45:d4:0c:12:ad:fe:5a:0b:90:c4:
         ca:32:6a:28:75:7c:43:cd:32:3e:dc:5b:1a:42:5a:8f:c6:f6:
         45:59:c4:11:39:76:4d:01:6c:f7:8f:ce:9f:cf:dd:48:6c:6d:
         32:cb:a2:1d:d3:9f:41:fd:8c:fc:a6:65:be:39:21:c7:23:60:
         a2:10:3a:3c:4b:b2:c1:13:66:43:d2:6e:14:bb:c2:db:87:bc:
         0c:a1:3e:e0:69:3e:36:a1:53:04:1c:97:e7:e5:47:2d:a8:f1:
         39:a7:7a:57:24:0d:92:7a:8a:6e:c5:b3:db:f5:7b:7f:f8:f9:
         15:1f:fc:2b:00:4c:9c:e5:27:e6:fb:e7:91:ca:b8:e6:b3:bb:
         5d:a8:37:c6:05:09:aa:82:37:2d:b3:96:84:5e:bd:2d:27:9a:
         b5:1a:93:57:cf:2d:8f:e1:ef:2c:d9:63:99:79:e6:f6:24:f9:
         01:c9:fc:0e:93:e8:b2:a2:6f:14:c1:11:51:02:02:cd:21:07:
         37:50:27:d7:c6:07:24:d5:1c:b7:89:cd:d9:44:4e:88:16:f3:
         2c:24:dc:63:e9:73:7e:64:ac:10:15:a7:21:38:77:72:c2:c6:
         a7:7d:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:47 2024 by rpki-client on console-fra.rpki-client.org