Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          iITwDNRGM0Nk6o5BipWmJOzB+R5XRBSGMzzLIyAAZEo=
Subject key identifier:   F3:7C:BB:69:2D:87:2B:BC:A4:99:BB:B5:8A:79:23:88:AD:42:68:7F
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       019369A18474AFD8ECED18F551B3E39410AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          1382
Signing time:             Tue 26 Nov 2024 18:00:12 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:12 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:12 +0000
Files and hashes:         1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: qVNxttZsFeFIM3VN445IyYrZ7Dxpl7V3hpwMan4y8u4=)
                          2: ErspINL5TtkA87QSbtGmS6Z68cY.roa (hash: sR/YxaZ2QgH2JY1Ajh5JiYycSDTWkxNwnDRRa4N/rhE=)
                          3: YGussiopGkDmMfehNPQTSfEkn4A.roa (hash: m3dCfDE/HvnuvnMw6ehcZ870MsXguxpm+D6PDieSAwU=)
                          4: hU5hJnmXMqOuCMNi3CxC_NIUHPQ.roa (hash: KCJMxEPhIqamI11Klv71Us5CikENYeu1RSQG1psS1Jg=)
                          5: txnDyQhF88LkANhCYor51Gn5kks.roa (hash: iMyosyRhmbFHKQOMlFwfcJQ0XLkCRnCR1lX41CjQZvI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:84:74:af:d8:ec:ed:18:f5:51:b3:e3:94:10:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: Nov 26 18:00:12 2024 GMT
            Not After : Nov 27 18:00:12 2024 GMT
        Subject: CN=f37cbb692d872bbca499bbb58a792388ad42687f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:4d:c8:18:41:bc:37:91:74:4b:33:fa:4e:
                    94:fc:c0:b2:17:f4:e9:34:f3:ed:b9:9f:69:73:2c:
                    0c:1b:ab:ba:dd:7b:b6:14:e7:cf:8a:f5:d6:22:77:
                    79:0c:cd:c5:76:78:c2:bc:b0:f7:b5:36:ba:ce:2e:
                    ec:67:f5:2e:7c:2f:85:2d:13:15:3d:99:1c:0a:11:
                    71:d7:a9:a1:62:23:b9:67:7c:01:63:d6:67:df:98:
                    bc:67:c0:65:47:14:99:55:6c:c8:f0:06:51:9b:88:
                    5c:f8:5c:c3:97:9a:d5:0e:81:7a:b7:cc:9a:d1:b9:
                    34:73:db:26:6c:8c:fe:04:99:45:1d:a5:28:fa:bb:
                    21:b6:62:6c:97:d4:29:c7:10:e1:23:72:5b:bf:a3:
                    43:b0:47:0c:9e:c4:de:5c:1d:d0:c9:7d:a3:9d:1d:
                    d3:46:e2:70:92:f8:62:ef:f1:6e:22:09:8d:cd:53:
                    37:da:9b:b3:26:0a:d2:82:5d:cb:f9:7c:08:73:77:
                    08:71:b9:60:72:79:d7:7e:90:ba:5c:3a:f2:0d:a1:
                    be:4c:2e:cc:cf:ac:1a:3b:68:c6:21:8b:39:85:c9:
                    43:49:01:0c:2b:9a:1e:db:8f:0a:6c:ee:aa:d5:b6:
                    2d:27:99:d5:3a:3e:15:e9:47:2c:f7:45:ea:22:69:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7C:BB:69:2D:87:2B:BC:A4:99:BB:B5:8A:79:23:88:AD:42:68:7F
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4b:dc:cc:6c:e5:67:52:f1:98:68:81:2f:95:da:d9:5f:d2:
         00:67:87:c7:dd:d7:9b:69:07:a6:85:ce:8c:d1:64:92:d5:8a:
         ab:99:d0:c1:98:08:cc:aa:e8:36:a2:c2:be:63:d8:7a:85:b2:
         49:82:a0:38:1b:d1:d5:01:12:ba:a4:25:95:ee:25:6d:44:3f:
         60:17:ea:1f:da:c8:3f:6e:76:c9:ee:23:41:6b:1e:22:85:62:
         cf:2e:e7:01:59:97:cd:82:2b:9b:25:76:75:3d:ef:6b:10:13:
         2d:7b:5c:d1:81:fb:f6:e9:c4:6b:f7:5e:2a:ad:92:75:81:2d:
         34:54:db:eb:ab:d1:85:90:09:e6:72:da:f5:40:65:08:a5:12:
         4c:fb:73:e7:ac:8a:3e:71:7c:b5:16:b7:45:70:9a:f2:52:cb:
         0c:c0:c5:b6:ad:ed:11:da:68:67:f7:2f:a5:88:c2:e9:08:79:
         b2:b1:bf:4f:bd:63:a2:1d:ed:38:ce:34:b0:c3:6f:f1:e8:c2:
         94:19:88:7e:d2:0f:0b:34:75:c1:ab:fd:23:2a:17:fe:31:a2:
         bd:57:a4:9a:4c:ca:b5:68:28:9b:93:31:47:28:6d:99:e3:be:
         60:c6:2d:b7:4b:fc:7f:93:48:db:01:b1:fe:b7:af:75:65:70:
         5e:77:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:05 2024 by rpki-client on console-fra.rpki-client.org