Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          kTN6gu67mAEY9kMYkt+K93tU8JeYbfnhsn3JhC62CSw=
Subject key identifier:   3D:06:24:B0:88:D5:23:F2:E3:9D:E8:15:F5:B9:06:4D:FF:32:2D:D1
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       0193523E027A9BD68A5D25157FC203EF8316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          0BF6
Signing time:             Fri 22 Nov 2024 05:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:15 +0000
Files and hashes:         1: 04bqLsnrZQouW_STiAE_a-XMkdE.roa (hash: 9QleosLdwwLcfDjpD334UzFtZkErw+JHnKq87iHgDaA=)
                          2: FpLDIpDE-3wK79PeXiPqBlLS3Fk.roa (hash: HlNIPckpo4ZlIvBNz+mqLcFU57maq/GT6mIxiZhP5S4=)
                          3: K2y-kRLY5GEuKtDdUL8MSb9bcEE.roa (hash: 0GV82oNiMJWnGJvX9Iir6QWcyUperkwEB9WvqySi+DM=)
                          4: MEYU6Z39_vjE5BthGBCjxLiZpmY.roa (hash: Mwi4ph1gdM0brxLdSYsmCWL1z+DyP6+IF6ArNuWQMaA=)
                          5: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: QHmswKJj9DNjackrkciRR0c6McvvcizYh1LNKD+O7eI=)
                          6: V6w96IE7wBfa5pWKX9LFFVwOlNQ.roa (hash: h8gDw9/nI+WW3b/5NP6d6uOxg5h+QCwuyBn6ay/LICA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:02:7a:9b:d6:8a:5d:25:15:7f:c2:03:ef:83:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Nov 22 05:00:15 2024 GMT
            Not After : Nov 23 05:00:15 2024 GMT
        Subject: CN=3d0624b088d523f2e39de815f5b9064dff322dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:bf:c4:c4:48:48:f9:fc:55:1b:13:9d:11:
                    59:6b:72:89:4a:5d:ee:c9:e1:17:79:a6:4a:18:ba:
                    cd:ad:28:6a:e2:a9:cf:76:76:f9:89:80:1f:b0:bd:
                    19:5c:39:9a:8e:80:bc:c9:6e:4a:93:d3:5d:2e:56:
                    34:1c:3d:c8:ab:e9:92:dd:63:f3:d4:23:38:0a:96:
                    40:1e:8c:db:e6:08:aa:45:9f:a4:39:66:64:aa:1d:
                    f1:ee:3b:ae:b8:0e:98:5c:f7:87:9f:8c:7f:ed:61:
                    2d:30:63:f0:ce:53:56:86:4c:21:82:5a:34:bf:3d:
                    55:a9:de:57:fa:f9:4c:42:e5:49:3b:d7:3a:c1:1c:
                    5c:fc:02:4c:90:52:c1:77:d0:d3:22:3e:d0:08:8e:
                    5f:1a:61:1a:23:78:4f:88:7b:f2:95:49:ae:b4:d6:
                    1c:a7:2a:8d:df:e2:4d:56:c1:58:ee:f3:d4:60:25:
                    b0:6e:94:ad:63:02:08:41:68:e1:5f:7c:63:bf:d7:
                    5d:a7:d0:1f:95:8e:af:a0:af:86:98:74:dd:af:96:
                    01:3d:06:44:5e:e0:42:29:59:39:47:35:41:6f:e8:
                    21:36:ee:87:3a:a4:1b:84:30:9b:7c:fa:66:68:3e:
                    68:94:2f:d9:6b:61:61:ef:85:2d:2a:e1:4f:93:2b:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:06:24:B0:88:D5:23:F2:E3:9D:E8:15:F5:B9:06:4D:FF:32:2D:D1
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:04:5e:43:d8:cb:58:b1:56:61:f8:e6:bc:2f:8f:e3:4a:38:
         0e:55:65:7e:2a:e0:37:0b:68:26:44:37:29:7d:44:ea:3a:1e:
         03:25:64:ab:a1:e6:c5:c1:a7:7e:3d:52:aa:f3:3f:74:d1:69:
         35:14:db:59:c8:df:fe:53:36:59:68:5e:ae:98:52:47:8c:80:
         d1:60:09:80:c3:1c:f8:00:01:1e:4f:b7:cd:bd:88:18:51:72:
         d6:74:f7:10:4f:40:73:c2:50:bc:55:e2:8c:3d:bd:c0:16:43:
         a5:ea:b4:5e:08:15:c6:f2:9a:1d:d3:54:f5:28:88:e1:46:90:
         02:95:68:6d:ac:f2:ab:18:ae:6c:07:21:d8:56:1b:e0:0d:2e:
         44:86:78:39:1e:2d:08:5c:79:21:11:ad:c7:8c:35:ca:d3:81:
         f3:98:dc:71:d3:8a:4d:fb:eb:31:29:d0:bf:10:f2:6a:c1:2c:
         49:be:5b:ae:b2:f8:1e:dd:ae:58:ef:fb:b0:a9:e4:ed:02:04:
         0f:7d:67:06:20:5d:d0:3c:b4:18:b2:5b:84:50:37:48:00:8b:
         5f:ca:61:ba:eb:25:80:9e:92:c8:e7:66:2f:14:2b:73:37:de:
         1c:f5:8c:67:7a:9e:9e:ed:3e:2e:1b:27:bb:4f:11:a5:41:f5:
         27:30:9c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:38 2024 by rpki-client on console-ams.rpki-client.org