Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File:                     A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier:          5d2sjRjVJ+fhqX04MVYMR5utIdD/lj15eILdMbioImQ=
Subject key identifier:   F0:02:C1:F6:BB:83:C3:76:DB:98:EE:64:C3:32:32:40:59:4F:72:F1
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer:       /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial:       01936520888B40223424DA5F4C9DA505A92B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number:          0E88
Signing time:             Mon 25 Nov 2024 21:00:50 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:50 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:50 +0000
Files and hashes:         1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: UpAkobE4rqcosSk5TFMS2hiwwbjWdxF2Ove1MBkMDJM=)
                          2: FsM6nUHF-s-eiNT8Qd-iu_KsbK4.roa (hash: 7EaGSvHioI3N6pEXFMkK+kL0oGJhmgnLoOuQLjCWSd4=)
                          3: GxHPba52dpXgTrk9hfd0S_vV3Xo.roa (hash: NpkT2JCbEx6ITk/YEBjP7eSZHlG7CWAFWrbIZ8y374U=)
                          4: GzyWkGoz3qSaRGnAf5ycYuIvpBU.roa (hash: POx+PJDdPS3CF2/E1rgI+iIa9XnJ3FXd3Qp6Qb4sKVI=)
                          5: HUS_JiWQPS6l8BfR4Rwo4X9fk1s.roa (hash: y/kMy6wcSz2Jb03BhBCkIUFg0bOLAMvZ2fcvO7bkfik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:88:8b:40:22:34:24:da:5f:4c:9d:a5:05:a9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
        Validity
            Not Before: Nov 25 21:00:50 2024 GMT
            Not After : Nov 26 21:00:50 2024 GMT
        Subject: CN=f002c1f6bb83c376db98ee64c3323240594f72f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:af:b4:7b:aa:2c:e3:b3:0e:0a:47:cd:35:
                    b1:32:1b:44:4f:be:44:ac:1e:c0:5a:03:7d:da:c4:
                    35:18:a5:18:d6:79:0b:3c:47:e9:d9:90:fa:39:7f:
                    4c:1b:c5:af:b9:17:29:1c:a9:1e:69:98:0d:e6:35:
                    77:ba:6d:e2:86:e9:75:81:b6:6b:ee:44:27:77:f4:
                    a2:b9:26:d2:b7:80:a5:a3:08:46:ce:3b:0c:48:e6:
                    df:87:a1:56:91:4c:89:00:29:68:fe:cc:e5:4e:c8:
                    ad:83:2b:b6:2a:4e:f8:84:f6:9f:15:ba:34:6a:79:
                    d0:a0:e5:0f:c8:de:50:3e:d8:1f:af:af:d1:07:a9:
                    f0:95:cc:a9:ad:09:af:d2:48:4a:48:b2:62:02:7f:
                    e6:75:c5:49:68:84:bc:7d:8f:3c:ef:76:5b:21:dd:
                    8b:20:d4:89:bb:bc:60:e8:01:06:da:ae:be:70:e9:
                    e4:25:41:7d:55:e5:cd:85:93:07:64:fb:47:24:eb:
                    c4:06:04:86:d5:0a:b1:3c:f1:57:88:5b:bf:82:1b:
                    90:44:9a:60:5e:69:a8:9e:6a:98:c2:e3:6e:95:c4:
                    83:e1:7d:fc:3e:c5:84:f2:18:96:55:ca:6a:4d:59:
                    ca:10:d8:bd:21:d3:55:df:25:4f:c7:33:83:de:eb:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:C1:F6:BB:83:C3:76:DB:98:EE:64:C3:32:32:40:59:4F:72:F1
            X509v3 Authority Key Identifier:
                keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:4c:8b:2c:9c:bb:61:81:a1:f3:ce:b2:e4:2a:c8:e1:bc:
         89:e9:a1:89:13:4a:78:00:12:39:ac:2d:7c:d8:ec:72:39:79:
         e1:0a:48:21:0b:8a:32:c4:55:a0:ea:80:45:d5:f5:22:27:4f:
         01:7e:1f:0f:41:01:cc:1c:df:84:b5:8d:d4:12:5f:0a:36:b0:
         45:2f:0b:4b:d2:72:c4:29:d9:9c:12:26:1a:ab:de:3a:6c:95:
         72:08:e6:8f:1a:64:ee:c8:ff:7d:fc:77:da:f5:4f:e2:de:e6:
         00:e6:ea:27:7d:d2:76:cf:9b:f1:e5:b6:f8:67:f6:32:26:13:
         aa:ee:cf:79:fb:fd:60:34:15:a5:c5:7d:af:58:ac:e3:6e:41:
         2c:a2:c6:0b:1f:42:b3:c5:bf:cc:c9:e2:41:9d:13:b0:7d:09:
         ba:25:9a:13:a0:06:47:20:fb:23:1a:ec:c3:a7:69:98:7d:e8:
         fd:ee:3a:d5:c2:9e:b4:06:ef:88:a0:7f:6e:c1:d5:5e:ed:37:
         d7:5a:e1:59:24:cb:0e:4b:c7:6b:f9:38:08:5e:91:3c:c4:ca:
         00:af:fb:51:e7:ec:f8:e3:65:65:99:7a:df:4a:92:54:61:fe:
         fe:8b:21:c7:2b:cd:ff:8f:60:71:35:05:32:e3:1f:a9:63:28:
         d5:da:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:52:48 2024 by rpki-client on console-ams.rpki-client.org