Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
File:                     B3NNjbW2txqCyQHr304M7EKZ6VY.mft (raw, json)
Hash identifier:          ttdgNcou8yc+knDc8Hl6oilf6806GmASsrZudbN8h7o=
Subject key identifier:   36:55:6B:95:DB:66:BE:90:C0:BC:FD:04:D4:D8:88:22:FF:C1:05:D1
Authority key identifier: 07:73:4D:8D:B5:B6:B7:1A:82:C9:01:EB:DF:4E:0C:EC:42:99:E9:56
Certificate issuer:       /CN=07734d8db5b6b71a82c901ebdf4e0cec4299e956
Certificate serial:       01936AB4CE53E1E32805BA7C56A0FEF9E1B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
Manifest number:          0313
Signing time:             Tue 26 Nov 2024 23:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:54 +0000
Files and hashes:         1: B3NNjbW2txqCyQHr304M7EKZ6VY.crl (hash: Lp+sjoropqrEpXVZMrvhANGm7FJIR38OC02Oy5xroD0=)
                          2: TkOkmurtkcqJLYhrU7Aou10KSeA.roa (hash: ourIAKcAXMk6R+tQfeBogZgpaZXAEfw+r1BnBPigRwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:ce:53:e1:e3:28:05:ba:7c:56:a0:fe:f9:e1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07734d8db5b6b71a82c901ebdf4e0cec4299e956
        Validity
            Not Before: Nov 26 23:00:54 2024 GMT
            Not After : Nov 27 23:00:54 2024 GMT
        Subject: CN=36556b95db66be90c0bcfd04d4d88822ffc105d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:65:c5:12:6d:df:2c:40:4b:22:91:16:12:0f:
                    21:dc:e1:09:af:b6:17:4a:59:5c:6d:22:4a:8d:7d:
                    19:52:44:34:e8:10:d1:a5:57:cf:e3:98:68:2b:5b:
                    ef:40:29:5b:3a:51:77:52:34:cb:80:a0:3d:47:32:
                    d4:e2:24:a0:02:b3:45:ea:a7:4e:47:9c:bf:a0:61:
                    32:ee:1c:c4:b9:4d:03:02:5b:3c:00:61:c1:43:b2:
                    f6:a1:44:32:aa:51:13:bd:95:23:5e:99:67:46:fe:
                    fd:8c:de:9b:36:62:f0:3d:ad:68:65:d8:c3:7a:8a:
                    5f:a9:f2:ec:ae:16:be:bc:5e:71:69:05:0b:68:c5:
                    a6:44:3b:6c:05:ca:da:c4:6f:94:96:58:fb:78:db:
                    fb:d3:18:50:f8:39:e9:a4:b9:70:49:36:df:a3:d1:
                    be:06:79:95:83:dc:fa:8d:7b:52:46:7a:7d:a7:5a:
                    49:66:94:1d:c9:3e:62:f2:34:60:aa:bc:f2:0e:eb:
                    a8:b3:21:76:6d:5d:48:f1:c1:7d:64:76:48:c1:16:
                    9a:f2:d9:e1:a6:8f:41:1c:d1:e7:ce:f7:e2:6d:a2:
                    9d:2e:37:f8:40:f8:4d:fd:6a:88:24:2d:cb:11:27:
                    67:34:11:a3:a4:33:76:6e:e8:96:6e:3a:e6:07:88:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:55:6B:95:DB:66:BE:90:C0:BC:FD:04:D4:D8:88:22:FF:C1:05:D1
            X509v3 Authority Key Identifier:
                keyid:07:73:4D:8D:B5:B6:B7:1A:82:C9:01:EB:DF:4E:0C:EC:42:99:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:84:d9:f2:f5:00:f3:dd:b0:4a:83:d7:62:02:d4:a6:16:c6:
         da:0b:30:90:3b:94:f8:d0:4a:fe:bd:d0:de:47:11:e7:88:5a:
         2b:c0:b2:0a:9c:33:84:9a:5a:83:3c:e4:ad:a1:42:67:23:06:
         4d:0b:48:64:a4:29:b2:09:ce:bd:59:95:a8:df:76:d3:f2:36:
         78:d0:b6:aa:00:c1:d2:e3:09:70:52:5f:f4:2c:8f:e7:7b:98:
         32:de:49:d9:12:de:87:08:eb:f1:97:05:42:d3:14:50:86:d3:
         f2:26:aa:04:d5:df:82:58:50:f0:0f:87:34:fe:34:fd:60:ef:
         cf:79:7b:62:6e:b2:fb:2e:9f:36:14:f9:e7:18:f4:19:4b:13:
         28:b0:a0:78:2c:ff:b8:08:74:fc:26:78:07:37:74:39:cc:d9:
         35:f0:e5:10:69:9f:3b:de:00:f7:2a:27:be:cf:65:1c:25:09:
         ed:3e:d3:09:9f:2a:c5:be:43:73:85:ea:75:49:e6:5c:a1:1e:
         7d:63:be:39:d5:0e:05:31:62:00:b1:94:9c:08:e3:1e:5d:4b:
         28:57:de:41:52:a1:72:57:6b:03:5b:13:ad:53:8c:c1:65:93:
         a2:79:0a:d6:13:0d:af:8b:a7:74:31:3a:46:37:33:af:67:2e:
         f7:1e:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:25 2024 by rpki-client on console-fra.rpki-client.org