Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File:                     3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier:          HEiOBKt8aCFtzDfwMWXntC6tvGjF0+JYdCuytSKq8UA=
Subject key identifier:   07:82:4C:57:30:B9:BE:58:A1:A6:14:05:32:A4:7B:C0:99:4E:35:02
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer:       /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial:       0193670EBED3B898EE3ED0FEB87F9D7E7B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number:          07E2
Signing time:             Tue 26 Nov 2024 06:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 06:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 06:00:39 +0000
Files and hashes:         1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: 68QlcPsajX3+rRAu2gSsRTB4ECTFQGGJYc1Yost53IU=)
                          2: fM02RadjW_Nm8Z6j5sjLod_slkQ.roa (hash: ICe15VjAma3vBziaK6Btam0vtXK9QenGFFZ1NlTxP58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:0e:be:d3:b8:98:ee:3e:d0:fe:b8:7f:9d:7e:7b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
        Validity
            Not Before: Nov 26 06:00:39 2024 GMT
            Not After : Nov 27 06:00:39 2024 GMT
        Subject: CN=07824c5730b9be58a1a6140532a47bc0994e3502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:9d:b0:59:46:4f:58:df:ba:28:f1:19:7e:
                    f2:12:da:cc:2f:ce:4e:91:eb:e2:fb:4b:a3:34:02:
                    cd:f3:59:79:58:92:ed:39:77:b4:35:93:d3:a4:40:
                    81:a8:57:76:39:cd:70:bf:8b:ce:b0:e6:15:b3:1f:
                    9e:1b:c9:56:fa:84:ae:c1:39:71:59:43:a3:d1:46:
                    08:48:f5:22:2f:a7:4b:1f:a3:25:40:20:fc:ce:41:
                    29:f1:79:26:62:7f:e0:bb:cf:8f:5e:0f:1e:06:58:
                    87:34:11:1e:77:27:2b:e0:04:f2:2c:19:50:c0:67:
                    a2:68:35:f4:2c:f8:db:5a:8f:b8:cb:62:f1:68:21:
                    eb:2a:07:57:55:32:ae:26:fd:bc:07:9b:5e:31:a4:
                    a3:6d:65:e1:af:74:db:fc:6f:a2:b6:95:82:36:19:
                    25:44:5b:af:9d:fb:15:6a:f4:59:e1:e7:7c:59:d9:
                    b3:e5:e0:b0:04:fc:0b:8d:f2:df:df:76:ea:dd:fc:
                    e7:c0:c9:f5:a8:74:a1:2b:92:1c:f9:05:53:4b:c4:
                    a4:0b:33:26:5f:75:8e:72:07:30:2f:8c:4e:d6:be:
                    4f:ef:4d:66:16:a9:2d:21:78:bb:33:84:42:6a:94:
                    57:7e:31:fc:60:9a:5c:ed:21:97:e7:88:9d:ba:db:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:82:4C:57:30:B9:BE:58:A1:A6:14:05:32:A4:7B:C0:99:4E:35:02
            X509v3 Authority Key Identifier:
                keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:44:68:72:ae:84:67:83:57:76:4c:46:fe:fd:02:73:6c:
         7f:8e:53:f3:cf:bf:ab:43:9f:7a:87:12:31:e8:64:65:41:68:
         cd:4a:69:f2:96:f8:e3:4e:f9:db:66:69:cb:7a:08:4f:52:0a:
         4c:5f:48:19:7c:89:55:f8:d9:69:a9:d1:c5:24:72:e8:dc:cd:
         cd:df:61:93:50:63:6b:d0:32:92:07:86:17:d6:47:38:32:cb:
         96:a6:bf:52:59:f0:b1:9e:76:f5:46:13:7a:f2:73:e1:0e:fd:
         f2:47:b0:16:86:24:c1:e4:bc:84:76:14:dd:38:5f:68:4b:70:
         38:68:a6:b2:f6:7e:02:47:42:2e:89:2b:a1:d2:83:a2:c4:30:
         7f:a9:01:79:f7:e3:ea:ea:4d:e6:cf:b5:4e:93:81:0a:23:76:
         81:46:37:c1:11:30:35:1f:fd:d8:bd:e3:c0:1b:d1:57:e8:c5:
         a5:24:c8:da:e2:44:3d:7d:d4:80:ce:06:65:b3:17:a1:1b:06:
         22:a3:f0:c3:7d:17:76:4f:3e:5d:d5:88:d0:9e:0d:1c:9e:55:
         53:41:73:c3:c5:4b:af:e6:9f:b9:1c:ac:d6:9d:f5:47:b2:a4:
         54:52:65:58:ed:91:9e:73:e0:54:a6:5f:39:e9:01:1d:1f:ea:
         6f:1d:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:15:10 2024 by rpki-client on console-ams.rpki-client.org