Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File:                     3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier:          6AmT3PIATu3EgdIu5D9h/dHlhcT243NELosHieZdjuQ=
Subject key identifier:   33:5F:8E:33:31:09:0C:63:EB:5B:50:6F:93:11:0D:85:9E:F9:77:6B
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer:       /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial:       019359532C950968C39227BA73B8117F8DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number:          1306
Signing time:             Sat 23 Nov 2024 14:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:43 +0000
Files and hashes:         1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: wOK6X6tNBz+vx3VTfTUN3VUKohRU6tvgg77va2MCSac=)
                          2: CvntyOVXUKEBl1Zu80dW2Uftzh8.roa (hash: +NRqjnF17ajEiN9nb35QjfECkmSKcqC+ualzDKHWW+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:2c:95:09:68:c3:92:27:ba:73:b8:11:7f:8d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
        Validity
            Not Before: Nov 23 14:00:43 2024 GMT
            Not After : Nov 24 14:00:43 2024 GMT
        Subject: CN=335f8e3331090c63eb5b506f93110d859ef9776b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:62:7d:ed:e2:62:07:74:55:9a:2e:bc:d2:
                    8c:0f:bb:f0:96:f1:0c:83:9e:6d:21:1f:c6:82:7f:
                    7f:fe:17:1c:0c:43:41:b7:95:a4:4c:92:94:f8:6a:
                    8c:17:a2:02:7d:43:e6:9b:7e:ca:db:3a:46:0e:cb:
                    99:4f:df:b1:76:d9:e0:2a:c8:7f:5e:a9:f5:bb:b9:
                    a7:91:da:1b:69:ae:f2:3f:a7:4b:1a:43:ed:f3:e4:
                    1c:de:30:57:ea:e2:39:dc:8b:1b:84:fa:06:39:c5:
                    bf:af:50:16:c8:e6:44:09:56:1e:c4:91:2a:3d:21:
                    d8:22:b8:37:3c:1e:e7:3d:50:f8:63:2d:1b:f1:d4:
                    41:e4:4b:89:1a:7c:c2:aa:7d:80:60:b7:cd:c4:6e:
                    a1:19:8f:84:7f:f1:8e:c8:1a:86:61:67:8d:01:58:
                    55:1c:df:33:cd:5c:e0:1b:c0:66:d6:15:95:af:45:
                    fb:e8:6f:86:a4:0f:0f:91:6e:50:eb:c2:44:41:ed:
                    a2:ca:85:3e:83:b7:b2:d6:73:db:27:e8:49:14:f7:
                    df:1e:c2:28:61:cc:8e:07:28:04:79:cf:02:69:6e:
                    98:49:55:5f:2c:be:e3:6a:18:ca:80:5c:d5:17:c1:
                    c3:9c:a8:df:92:c9:52:41:ac:4a:49:30:ed:c6:0f:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:8E:33:31:09:0C:63:EB:5B:50:6F:93:11:0D:85:9E:F9:77:6B
            X509v3 Authority Key Identifier:
                keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:8d:81:ac:14:2f:cc:3d:f5:6e:ad:46:75:fe:f1:fb:c6:
         73:2f:b0:0a:d3:a6:e6:0b:2d:7d:0c:fe:cb:93:15:22:59:1b:
         e1:00:b3:2c:99:8a:a7:42:54:20:dc:22:b3:ce:09:c3:3f:a4:
         e6:f3:f9:68:88:11:fc:c2:3f:f1:13:a1:62:c8:51:06:2f:0b:
         14:4b:db:92:16:8f:7f:94:87:5d:e0:f3:16:d4:79:64:4c:83:
         f8:f8:3c:54:24:ce:97:ce:6f:d8:0f:a1:8b:e3:a7:6b:3e:bb:
         de:71:2a:de:56:1b:90:35:cd:c9:5b:71:8e:c3:d3:80:75:80:
         1d:1a:d8:37:f7:8c:12:51:a3:c0:06:91:05:c9:78:65:91:22:
         f6:cb:66:f3:38:64:cd:60:40:10:c2:95:b9:fd:01:5c:65:31:
         07:46:4b:83:d2:65:21:ce:4a:ad:c9:33:12:2f:97:31:2b:94:
         c9:c6:ce:07:a1:c8:01:42:42:5b:9e:0c:c9:aa:01:9a:a7:e6:
         29:79:7a:ae:df:be:c8:13:f2:8e:2d:78:00:76:46:c2:7a:18:
         00:4f:d1:4b:68:a8:cd:9c:90:ef:83:ba:cc:e5:d6:4e:93:25:
         28:4e:6f:4a:0b:ef:cc:59:61:f7:db:d6:27:8e:91:b7:71:ab:
         1f:70:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:18 2024 by rpki-client on console-fra.rpki-client.org