Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File:                     3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier:          BEGmFMOse8bz3o2FkavHK2g3VKURLyajVIc5+G1VUsc=
Subject key identifier:   F2:35:06:DE:2A:34:3C:0B:BC:18:17:EF:30:D8:F0:95:BD:CB:82:BA
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer:       /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial:       019357D22694CB301CA836A0021046BEF707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 07:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:10 +0000
Files and hashes:         1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: BSFg3GGYwHNtJ+GHRQB7tLLeYXe6Fgm36msVFcCobuc=)
                          2: rxhcZOLbdZUxFqgAOk557E2CIKk.roa (hash: 9yNwpQwii/xKlQmk+xbc66Aa8krZDRk0EHJawZzo9vI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:26:94:cb:30:1c:a8:36:a0:02:10:46:be:f7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
        Validity
            Not Before: Nov 23 07:00:10 2024 GMT
            Not After : Nov 24 07:00:10 2024 GMT
        Subject: CN=f23506de2a343c0bbc1817ef30d8f095bdcb82ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:c8:18:bd:cc:0f:3b:34:3c:0d:7c:84:dd:
                    37:84:f8:98:dd:9d:48:e0:5a:47:63:b3:d8:0d:7a:
                    e2:fb:0e:5f:e2:5c:99:91:3e:1d:c8:b8:fd:6b:00:
                    82:34:4d:3e:9d:ae:42:48:56:08:8c:dc:7d:4a:74:
                    f8:40:7a:9c:da:84:12:6b:33:90:67:c3:f7:fa:57:
                    10:91:a4:9e:f0:57:49:49:37:cf:8e:7a:13:cd:09:
                    99:96:8f:b3:0b:9c:b2:85:44:53:39:18:01:90:0f:
                    10:7f:c0:5e:2e:99:b2:f4:5e:df:85:36:dc:0e:3c:
                    fa:0e:07:9c:36:7f:da:1c:5f:24:6b:e9:d0:d8:44:
                    4c:eb:cb:1c:53:8c:83:5e:f3:c5:09:72:0a:61:75:
                    8c:69:81:92:f5:95:00:4e:a3:b7:d5:c0:ac:11:ee:
                    06:43:ab:ac:17:a1:1a:28:a6:78:74:12:37:13:a3:
                    77:1d:06:26:be:c9:b0:dd:ed:5e:e9:be:d4:40:d5:
                    41:e2:fb:1b:72:df:9e:99:b4:59:4d:16:2e:5e:a0:
                    48:87:af:7a:10:2c:91:d3:1b:39:90:85:12:04:21:
                    bf:df:c6:65:ca:d6:2d:7f:02:94:c0:dd:bd:67:4e:
                    d2:c2:93:9d:1f:d2:34:1a:e5:d0:33:5b:65:56:d3:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:06:DE:2A:34:3C:0B:BC:18:17:EF:30:D8:F0:95:BD:CB:82:BA
            X509v3 Authority Key Identifier:
                keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:e8:40:d0:4d:c9:fd:f3:2a:81:c5:e7:ad:81:ab:36:85:
         b9:db:43:32:56:cb:ef:19:23:85:77:fd:7e:1d:00:a8:7e:e3:
         f2:4d:3c:4e:87:0e:6c:da:d4:18:45:23:6e:c7:09:de:5c:26:
         e1:77:16:e2:0b:00:be:0c:49:b7:c1:97:a4:f7:0e:c5:6b:35:
         31:67:ea:dc:df:90:90:30:fc:8e:d2:e8:03:3f:d7:f9:7e:1d:
         12:f5:f7:01:b1:32:b6:ab:09:63:c3:67:ce:fc:8f:a0:3c:65:
         a3:8b:07:e0:9f:b1:f0:fe:21:fc:3b:1a:9c:91:e9:b6:57:fe:
         5c:6b:aa:6e:59:ff:ae:6c:c4:60:5d:88:b9:54:45:d9:18:71:
         03:1e:8f:7a:cf:ac:16:51:98:3d:d0:eb:2d:44:eb:60:69:42:
         87:24:2a:00:86:26:33:00:bc:c6:a7:67:ea:1d:7d:be:66:db:
         e8:bc:ad:ac:1f:70:47:8e:eb:d3:ff:d5:3e:32:00:39:74:44:
         ca:3a:86:fb:64:86:f8:26:4e:6f:81:3f:39:9a:a1:e2:17:7f:
         b7:8c:b6:90:18:9d:37:f0:6d:9d:ad:3f:c9:7c:a2:ab:3d:c1:
         ec:1c:61:b2:5c:70:2c:7b:5a:29:7c:5a:81:60:97:06:bd:19:
         73:43:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:31 2024 by rpki-client on console-ams.rpki-client.org