Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File:                     PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier:          dOary03l7MIMmNWVAIkEEfeCdp3WNO9AKO3HSqojnVg=
Subject key identifier:   3F:81:E5:10:47:F6:F4:43:F4:23:A2:93:0F:59:A0:D8:6A:7E:DC:74
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer:       /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial:       0193584062579DCC21F7FAFA11E5D0B84F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number:          012D
Signing time:             Sat 23 Nov 2024 09:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:34 +0000
Files and hashes:         1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: LFCnuX9lqC4s9tfGip2hfKMROd9sFxb2fQHxezQk5Oo=)
                          2: SVJ-kHrpHJj-4FjjeM2s2uG2Hn4.roa (hash: +UtG00QwKjROB3k1GMys/+R/4iZQ0w47BFdGQgPejd0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:62:57:9d:cc:21:f7:fa:fa:11:e5:d0:b8:4f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
        Validity
            Not Before: Nov 23 09:00:34 2024 GMT
            Not After : Nov 24 09:00:34 2024 GMT
        Subject: CN=3f81e51047f6f443f423a2930f59a0d86a7edc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:5d:25:d2:d9:19:fa:6e:c2:87:5e:4a:55:
                    1c:69:43:2e:c5:8c:32:76:b6:bc:46:a8:94:70:9f:
                    43:4e:a0:88:22:59:ea:c2:db:ed:6e:f8:39:7e:02:
                    77:0f:af:d0:7d:0c:0e:1c:c2:20:cf:4c:56:ec:a6:
                    ae:d6:da:5f:9e:92:9b:d4:c2:ce:f1:58:7b:57:99:
                    06:a7:7c:6f:4b:42:13:64:57:63:36:f4:e4:8c:47:
                    75:ab:62:9c:98:ef:b1:53:ee:be:0c:ac:f9:0f:a3:
                    84:62:1a:f3:9c:bd:3b:4f:81:e5:db:b2:ff:a3:43:
                    ff:7d:be:b8:12:95:9e:de:c4:0c:8a:8b:6b:fe:4b:
                    9c:e4:e9:2e:a6:41:89:f9:fd:f5:a1:81:3d:93:5a:
                    93:3f:5f:52:2e:62:85:e2:6a:e8:0a:91:2b:ac:5f:
                    2e:fe:1e:3f:91:46:cb:0c:54:b9:61:00:7e:90:d6:
                    a1:17:96:6c:fb:2c:db:23:fb:56:d6:b3:ff:06:79:
                    86:f5:cb:76:b8:58:26:53:55:61:b5:13:47:2d:73:
                    98:64:15:64:a3:51:e5:25:33:57:e4:57:9f:34:59:
                    31:da:a1:5b:ad:7e:ec:d0:f6:62:74:1b:21:44:92:
                    0f:4d:1b:47:9e:66:7b:06:6a:04:8f:af:67:e8:78:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:81:E5:10:47:F6:F4:43:F4:23:A2:93:0F:59:A0:D8:6A:7E:DC:74
            X509v3 Authority Key Identifier:
                keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:98:9b:d6:62:f3:6c:98:12:f6:68:25:06:63:e2:28:1b:55:
         4e:e0:55:18:66:f3:99:2f:71:a9:48:f3:36:03:c5:a3:36:af:
         c2:61:a0:f7:e5:f2:98:5f:53:54:ae:21:25:49:59:de:dc:4d:
         93:8d:1b:5a:36:5e:04:fd:69:c1:8d:43:ff:0b:9d:90:49:8f:
         c6:85:12:99:bf:53:c8:46:8e:26:31:a6:a4:99:6c:d9:42:7a:
         e3:22:7b:7e:20:9d:97:2c:6b:19:52:47:2c:0f:5b:d9:a3:1a:
         95:30:d3:c6:d1:cd:e5:d6:4c:f1:f1:ef:f4:81:d8:36:c3:a5:
         2d:93:8a:a0:2e:f4:5c:58:e2:07:52:11:45:0b:ca:21:f3:59:
         2d:0e:65:f9:c1:1f:37:27:64:f6:b0:50:52:fe:09:a2:6e:a4:
         26:f8:8e:30:a4:c9:7a:61:1c:eb:44:46:70:e3:5a:07:79:08:
         5a:ce:6e:d6:60:db:67:07:1a:13:83:f7:c4:8c:f7:b9:a0:a7:
         34:e2:48:d7:a5:e6:3a:c9:56:e4:2b:28:b2:21:62:a1:94:63:
         88:4f:0a:51:d4:91:86:dc:03:cb:50:ab:e2:fb:20:98:06:8d:
         4b:f9:9e:de:1c:0b:8d:d8:0a:1a:1b:bc:32:94:08:34:08:0b:
         c8:9b:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:50 2024 by rpki-client on console-fra.rpki-client.org