Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File:                     Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier:          5BK09cLHJvhaAx5s6TpF8J9Qw48htqo+bOFY+quWxoU=
Subject key identifier:   69:84:99:61:8E:A4:19:EC:90:AC:0E:B4:31:EB:F0:A6:16:67:21:A6
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer:       /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial:       01936220265787EE3675A51576A0F2E1CDF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number:          0A5B
Signing time:             Mon 25 Nov 2024 07:01:34 +0000
Manifest this update:     Mon 25 Nov 2024 07:01:34 +0000
Manifest next update:     Tue 26 Nov 2024 07:01:34 +0000
Files and hashes:         1: 6MM6shg_NR6F8IzqiDVgWZE-RMU.roa (hash: uQ/ZWJnTTCe4OoxogYTybphRvlhnhrnv7oSPi8jPWzw=)
                          2: A4B3Gat5Sjdw-5ubYlh54nFg6xk.roa (hash: U0LdAT8PUSrBxmChams4mwdfBaxu7hlnT0blRbjhyxc=)
                          3: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: 3jGS4SM6FClHsQu6hv9nU8Mfle71oP1ySMPHOuaTpVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:20:26:57:87:ee:36:75:a5:15:76:a0:f2:e1:cd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
        Validity
            Not Before: Nov 25 07:01:34 2024 GMT
            Not After : Nov 26 07:01:34 2024 GMT
        Subject: CN=698499618ea419ec90ac0eb431ebf0a6166721a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4c:47:df:17:15:f2:1f:da:8a:bc:5d:13:5a:
                    03:a8:86:4d:2a:c4:fd:74:81:9d:14:05:25:2a:54:
                    b8:f0:aa:29:31:49:f1:89:ae:17:48:7a:4f:10:55:
                    31:0b:6e:71:e2:41:f5:5e:76:0c:18:d3:07:f2:ef:
                    dd:8a:0b:21:22:5d:41:ac:a3:a8:4c:48:1d:39:a7:
                    02:50:b3:38:b7:df:29:f5:0e:b8:0b:fc:6b:28:d6:
                    04:08:79:23:14:5a:39:50:34:8b:f3:0e:b1:3c:0e:
                    95:67:d4:32:10:a6:13:7e:15:54:be:cf:03:de:85:
                    e9:48:26:09:b4:8e:4f:69:53:ce:a6:a6:46:20:27:
                    11:c4:75:67:92:0e:ad:bd:64:5c:ff:39:a6:00:2f:
                    0a:d9:be:c6:86:06:b2:4d:02:c1:f6:07:7d:f3:9a:
                    0d:a3:19:8d:ea:63:51:06:0d:6e:f4:06:dc:fb:4e:
                    4d:1e:8a:0c:b3:e4:37:47:e2:80:89:35:6d:f9:8f:
                    c0:78:2c:d5:cd:18:04:52:5d:f6:10:43:2a:ca:69:
                    1f:99:61:98:50:af:c0:95:3d:22:d9:a5:e3:59:25:
                    87:25:cd:f9:1b:da:93:0b:48:d5:04:22:2a:a9:62:
                    c4:0a:ca:44:92:b4:81:fd:dd:4d:fd:ff:f5:24:21:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:99:61:8E:A4:19:EC:90:AC:0E:B4:31:EB:F0:A6:16:67:21:A6
            X509v3 Authority Key Identifier:
                keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c3:b4:e9:8a:a2:10:24:81:c6:b2:68:3a:11:1b:41:1b:87:
         3d:df:80:23:db:63:ed:f4:36:5c:2e:45:56:f7:31:22:fc:ad:
         9f:4e:0d:3a:42:fe:cf:11:0a:14:a2:9a:cc:06:e6:48:48:b4:
         5d:1a:1a:a1:14:d5:74:d2:4a:c7:d8:8c:6f:15:da:47:61:e1:
         c6:25:0b:72:c2:9d:87:7f:86:86:94:7a:24:71:34:88:11:60:
         47:6b:3c:c2:d5:c4:c0:4d:2b:9b:e5:bd:4b:39:71:6e:62:48:
         5b:27:c4:9e:c8:06:48:35:5c:82:5a:9c:c9:4f:ae:d6:06:1b:
         2a:bb:1f:1c:92:01:c1:a8:cd:27:92:bc:fb:15:93:95:b8:64:
         f9:f6:39:48:9c:33:b0:50:d5:d1:74:47:e7:d7:87:7e:ea:f5:
         c2:00:50:4e:68:bd:13:d5:c7:3a:15:a1:cc:06:bc:61:94:8a:
         6f:f7:f3:d6:9f:2b:27:02:03:44:c8:03:99:a0:ee:47:6c:01:
         9a:61:a8:8c:a6:20:bd:24:b6:47:6f:26:ce:e0:62:2d:13:a3:
         2b:24:9a:8d:83:c7:0a:1f:90:21:d9:d1:12:ef:1b:ff:72:1d:
         47:cc:fc:66:a9:00:01:27:27:3a:15:9b:10:47:96:48:b0:dc:
         1d:5b:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:09:39 2024 by rpki-client on console-fra.rpki-client.org