Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
File:                     p2t7n3_WaUOSfGDc8SEt3AffBSM.mft (raw, json)
Hash identifier:          Ux4dDk3enRLLZHGEuokRoEZ54vLk0r574drLq0RP5HU=
Subject key identifier:   40:C7:C2:D5:44:B2:17:CB:55:7D:3C:28:52:D7:64:73:E6:EA:77:C5
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Certificate issuer:       /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial:       019352E2CC8258CBDFCFA112DF04352A103E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
Manifest number:          0BC3
Signing time:             Fri 22 Nov 2024 08:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:15 +0000
Files and hashes:         1: p2t7n3_WaUOSfGDc8SEt3AffBSM.crl (hash: FkDX3o9FWkuXgf0avO/MdH7v12jxbGV5U9pVwINbcxw=)
                          2: uYOMtSA-0ZVyzDuIHfDemlembZk.roa (hash: otAbd0YTdBCJXFv9VgYbH9JvTpFtFh1xaxZ6ZR6kuKg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:cc:82:58:cb:df:cf:a1:12:df:04:35:2a:10:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
        Validity
            Not Before: Nov 22 08:00:15 2024 GMT
            Not After : Nov 23 08:00:15 2024 GMT
        Subject: CN=40c7c2d544b217cb557d3c2852d76473e6ea77c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:1d:9f:83:e5:30:43:32:cb:70:34:ef:16:
                    fe:6e:6d:f2:a1:62:cf:9d:00:b5:b8:b2:98:c6:dd:
                    f0:78:61:56:4a:63:fb:60:f4:9c:5f:75:2a:dd:b5:
                    63:36:75:1d:58:2a:f7:25:cf:d8:89:75:5a:47:fb:
                    10:cb:88:a2:67:61:1a:6d:05:2e:98:38:d9:5e:b4:
                    62:d7:2b:70:f1:ce:5d:95:51:be:d1:6d:5e:23:5f:
                    a1:af:d9:7b:32:04:15:07:c1:87:25:f2:fc:c7:24:
                    59:ea:a5:24:c7:c8:fd:7c:48:35:da:3e:9c:c4:75:
                    a2:87:f7:ee:54:3d:46:03:00:39:80:62:49:50:34:
                    a9:bd:7b:5f:0c:5a:28:36:24:4d:53:ec:98:e5:66:
                    ce:17:e6:23:5a:2e:cc:44:d3:a3:9a:2a:95:eb:a9:
                    ac:33:7e:5f:4b:82:e3:45:7b:40:1c:3b:52:78:43:
                    08:ce:c9:fc:a8:4f:47:04:8f:95:58:02:4a:ac:2b:
                    7c:e6:60:ff:d9:4e:02:51:03:15:40:87:2e:9e:6a:
                    09:cf:f2:2e:68:e3:63:ca:21:89:04:03:b0:b1:18:
                    23:0b:47:b4:b5:d7:f0:ee:53:b2:3c:3b:6f:61:81:
                    05:bb:70:83:99:3a:0a:1e:1e:3c:35:68:8f:e9:bd:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:C2:D5:44:B2:17:CB:55:7D:3C:28:52:D7:64:73:E6:EA:77:C5
            X509v3 Authority Key Identifier:
                keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:f5:ce:b9:63:fb:35:8b:ab:6d:b8:14:28:61:c5:9b:54:
         f2:8b:a8:a5:9f:2c:84:ba:72:b6:10:b5:5b:a3:2d:d0:b0:57:
         be:e4:4c:85:52:d5:0b:87:64:c8:48:0b:1b:48:ae:10:3e:88:
         9b:c5:f1:03:c5:55:d0:cf:fd:6b:33:1e:8d:fa:5e:7b:ba:eb:
         7f:db:40:0d:3a:7a:d8:6d:87:c8:40:73:6b:f2:24:29:fa:83:
         5e:60:a7:0a:6e:65:67:d6:4e:7d:46:c0:81:62:b8:f0:d9:e5:
         3c:52:2f:7b:b8:16:7a:c6:95:ff:2a:75:dc:85:b4:ec:c3:24:
         eb:e1:aa:8d:65:67:b6:98:f7:5d:62:10:fb:29:40:b6:19:37:
         a7:5f:c0:b2:36:94:65:0b:4b:1f:d9:98:1e:0b:b2:33:a7:09:
         64:ab:3b:f5:26:6a:05:a2:ff:ac:2c:2b:67:a5:e7:d5:8c:18:
         f9:76:9f:79:69:42:44:d1:6e:7c:82:90:c9:a7:19:96:50:16:
         7c:17:b7:ae:32:0f:19:ea:1c:a7:0a:84:c5:1d:52:ef:9d:0d:
         e5:02:ca:28:ba:fe:f8:fc:1f:7a:f6:bf:89:da:34:25:ff:7b:
         db:a6:11:2f:21:14:dc:65:58:54:3a:27:cf:43:8d:b5:e3:0f:
         1c:29:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:48 2024 by rpki-client on console-fra.rpki-client.org