Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File:                     C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier:          Lg/LwLdBP3Q7h1csrhtaIB7OzK5VO2dvI6P6ZTWufW0=
Subject key identifier:   7E:2F:7F:BB:8E:8E:CB:79:12:52:E5:00:A9:DB:09:E5:EB:D2:6C:E8
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       01938F65D9FB902E8921555A14E6F4437562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number:          0B40
Signing time:             Wed 04 Dec 2024 02:00:36 +0000
Manifest this update:     Wed 04 Dec 2024 02:00:36 +0000
Manifest next update:     Thu 05 Dec 2024 02:00:36 +0000
Files and hashes:         1: 7gYKG5uJbvFGoEzmdJiqOWcNt-M.roa (hash: ddbkG6RatiCb1bAmSk3oanzvJH6usOisbK32bitkeWQ=)
                          2: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: R6K8gkthQTUBSZeK/IWemhxqL41Y90qnvIz2VCYlJXk=)
                          3: P74RoCejA-s4gw2ikx4z-JzbAX0.roa (hash: WH/JP5p+3AwKW4dILaxVaqN99P8yPNT4M/BOz21ltwE=)
                          4: ede_2vK0h5jVyAmSXjOdAP7XoQQ.roa (hash: HVXbwc3HiULwROCeNypdxzZQ8ul77bq9RS92VT2lGJo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Dec 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8f:65:d9:fb:90:2e:89:21:55:5a:14:e6:f4:43:75:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: Dec  4 02:00:36 2024 GMT
            Not After : Dec  5 02:00:36 2024 GMT
        Subject: CN=7e2f7fbb8e8ecb791252e500a9db09e5ebd26ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:eb:5e:06:b2:04:b5:b8:a8:f6:27:44:3c:
                    79:68:ea:8e:e3:3c:ae:01:ae:f7:57:8f:ea:d9:da:
                    93:e7:c9:9f:42:d5:0b:96:12:73:d3:de:b1:9f:30:
                    65:50:d1:90:33:4f:5b:30:ce:9b:04:58:b4:49:2f:
                    7e:81:a2:f1:52:6b:2b:4b:d2:9d:e3:89:4f:bd:fe:
                    98:d1:74:f4:ea:73:87:6f:84:93:96:9f:d9:78:21:
                    58:ed:84:8b:49:47:95:64:ee:3f:9f:38:21:bd:3f:
                    65:d2:de:ae:ef:86:91:bc:36:90:a4:5c:e0:e2:1a:
                    fa:9e:8b:1f:6f:bf:38:b2:31:06:92:f7:06:6d:5e:
                    53:3a:3e:69:ca:0f:90:93:be:42:20:58:1f:18:4d:
                    85:fa:83:77:a2:ac:f9:1d:dc:b0:f4:90:9d:a4:8f:
                    73:dd:47:55:a9:43:7a:32:a2:58:c0:67:c3:3a:53:
                    b9:e1:0c:a3:34:95:11:24:c3:8f:95:3e:d1:3d:6a:
                    c6:5d:b2:d8:a0:df:a2:0d:3b:1b:a1:d4:05:a0:35:
                    56:e2:72:82:b0:8f:52:37:dc:dd:4a:e8:1a:82:bf:
                    30:3f:34:ce:26:f4:fe:94:ae:a9:3f:0b:a3:a6:5c:
                    ca:40:7c:25:cb:05:fe:0d:25:5e:28:94:5a:93:f3:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:7F:BB:8E:8E:CB:79:12:52:E5:00:A9:DB:09:E5:EB:D2:6C:E8
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:83:1e:a1:a2:fd:3a:4f:fe:73:4b:8c:c9:7a:18:d9:21:
         4f:0d:f2:4e:f9:0d:79:0d:70:f5:1c:88:f6:59:d3:6b:3e:28:
         cc:76:9d:ac:f0:e3:ca:1d:7e:62:2b:e8:ab:6e:6b:66:f7:9e:
         f2:68:3f:93:60:d8:5e:ba:ab:6f:79:c7:78:da:df:7c:5b:7d:
         79:a2:06:aa:8b:ec:f6:81:6a:be:2b:ca:78:e6:5b:21:d8:e4:
         96:66:f3:1e:64:ef:b6:22:1b:d7:3a:4f:d2:d8:b5:1e:b7:5f:
         c9:2a:fc:3b:24:08:c1:1a:d8:00:81:bf:3d:69:e0:46:ca:bd:
         2b:86:49:3e:10:ad:6e:3b:ac:6f:1e:8d:cc:a0:96:21:6e:8b:
         be:f2:b0:c7:61:ca:ca:f0:48:af:64:28:8e:9f:fb:dc:09:1d:
         70:30:fc:d8:80:aa:81:11:28:08:9c:ca:bd:13:dc:b7:a3:71:
         f5:9c:33:45:d4:c2:1c:05:f5:5a:d5:5d:81:1d:f6:a6:72:5d:
         d2:ad:9a:00:db:a8:19:9b:65:fd:d2:d4:83:3b:53:ae:79:a6:
         28:f7:df:63:80:c5:79:dc:ff:db:5f:cf:3a:dd:6a:56:1d:a4:
         82:02:3e:59:9f:37:22:28:f6:b4:99:9f:68:e3:6f:cd:57:27:
         ac:b0:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 09:07:00 2024 by rpki-client on console-ams.rpki-client.org