Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File:                     3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier:          0ua55SkJbAaZ0jiroi4lIUiIeDaeZBFwuo2P2l+n89Q=
Subject key identifier:   4E:CF:FC:C0:F6:32:3D:A0:8F:7A:03:76:2E:F9:48:2E:4D:7E:9C:0C
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer:       /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial:       01935651C0FE6F51627C2D99C685F9BFDF38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number:          62
Signing time:             Sat 23 Nov 2024 00:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:18 +0000
Files and hashes:         1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: 9Eia2JxymrTWsRRjNUGRfOxiTFJb8OhA/i85S+dUaKA=)
                          2: PDtZnEbEMjuPedGoIAcT4Ehz8do.roa (hash: 2twmoSDMxrQpu5OG+PHy1A6WciQbbIpY8P07WJ2ehAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:c0:fe:6f:51:62:7c:2d:99:c6:85:f9:bf:df:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
        Validity
            Not Before: Nov 23 00:00:18 2024 GMT
            Not After : Nov 24 00:00:18 2024 GMT
        Subject: CN=4ecffcc0f6323da08f7a03762ef9482e4d7e9c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:79:d6:90:06:21:00:3e:da:0f:57:13:b8:
                    a2:6c:a7:25:9a:70:21:21:cf:5c:05:4b:ac:ff:69:
                    e7:b5:6a:2f:da:2f:5a:f7:81:c9:de:ff:69:1b:00:
                    13:57:5d:7f:48:5e:ae:78:fd:b9:de:9e:ea:6f:28:
                    a0:98:b3:5e:b9:e5:ca:ed:32:ec:fa:d6:14:55:2a:
                    ac:a7:d5:c8:e0:89:37:af:99:9d:ab:ce:da:52:f6:
                    44:fb:b3:6e:e3:59:10:c3:71:1b:ee:25:58:d2:47:
                    ac:fd:08:c3:ca:39:33:70:66:2a:6d:1d:34:18:74:
                    4b:e1:d1:d9:11:b2:0f:98:28:cb:c4:9f:ad:11:1b:
                    e8:c0:13:c9:68:35:eb:8f:b8:1d:a4:14:c8:d6:d8:
                    bc:ee:b6:e1:66:87:5d:b6:bf:e3:6a:e0:23:fb:12:
                    ce:49:97:d5:74:71:78:d0:cf:38:e1:79:7a:09:56:
                    4c:d4:4f:cd:da:91:38:15:29:95:95:a8:5a:2a:02:
                    5e:7d:00:87:bd:38:31:79:2c:8a:0d:88:5a:2c:7f:
                    ae:42:d1:f3:d3:f3:99:4f:d7:bc:06:b8:27:1d:d5:
                    16:76:f5:c9:a9:9b:10:90:77:e2:2b:4f:dd:6e:4f:
                    d1:3b:68:29:aa:fe:3b:96:a1:47:96:4b:71:71:f4:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CF:FC:C0:F6:32:3D:A0:8F:7A:03:76:2E:F9:48:2E:4D:7E:9C:0C
            X509v3 Authority Key Identifier:
                keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2b:90:ad:59:59:d1:8f:e5:3e:0a:69:47:1c:b7:d4:57:27:
         11:07:fd:7e:49:89:79:ae:8e:d6:ed:38:1b:1d:ad:44:8c:e8:
         7e:99:fc:a2:15:20:f8:70:23:db:31:5a:ed:02:83:79:0f:e8:
         1e:26:59:7c:90:5f:b6:83:ae:2c:86:03:52:46:89:56:09:c9:
         aa:e4:3a:d1:16:df:79:ab:97:53:5d:ff:35:66:c1:33:3b:66:
         00:5a:73:a1:e8:2c:65:e7:25:6c:dd:b9:95:95:44:75:27:22:
         18:f6:40:ee:1a:07:37:67:4a:a6:5a:89:d8:f7:76:59:45:2c:
         27:00:1d:24:96:38:74:fa:63:d8:ed:dc:26:cd:66:45:38:d4:
         4d:12:85:7a:ce:a4:e2:52:2e:9f:ca:6c:70:a4:45:d1:8d:33:
         f6:8e:fb:80:c0:b3:28:c2:3f:fd:9e:29:cf:d1:47:3a:5d:6d:
         78:86:35:37:51:cb:c6:0a:83:b6:03:22:23:48:8f:94:bc:9c:
         25:15:42:d8:b0:bd:7b:72:09:4d:09:7b:4e:ba:35:e2:c1:6b:
         3c:92:12:80:5c:ae:87:3a:e4:ba:b9:b8:b9:c8:f1:04:dd:a4:
         00:f7:a5:19:90:92:24:02:23:05:9a:42:2b:f4:55:84:48:2d:
         ce:7e:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:18:29 2024 by rpki-client on console-ams.rpki-client.org