Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          y5zmUKVCcekoShA8VoSMvVXucrw84RjSdgPAvcmF/9o=
Subject key identifier:   F9:94:D0:7F:57:51:D4:E0:52:70:3F:63:E3:45:D0:09:26:50:69:92
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       01935688F2EA167CCFA28645EAA409DB6591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:35 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: n4+RNYtzXQ7fWl/hZZlqoCIqYP14MTEXCwwvBoabvKw=)
                          2: 3kQC79oK5drKiHasO9N75rQZ6HQ.roa (hash: VqcT84IWYpfs0F1ArLByyl+kvVEtaR8MPikD3p7I1Mc=)
                          3: X5h9i-fuLAtcbwW30MufOHDVKpI.roa (hash: ohKLfC15c8NH5Ug1/wi+0U1CLl4qd32qrXiFvrNh/fw=)
                          4: _jssjDMfaq7YPxhmzpvDAwE3Zn8.roa (hash: dn3/ss/qHAL5rJigm6003vxBIglkWiU/h1lwjaLpW6k=)
                          5: dP1rqd0EzJrUlu0AvutGb1LbNug.roa (hash: 0jKkoFJSBFdCAFgcMeEvcyDh92DqDT5TPI3bcv932XM=)
                          6: yjiDu4cN4MjyoOq6KxXRsbIdLVM.roa (hash: PLqraeBhB6rZMoferjTwmuCy6RnRl/BVYni4+KcbtnA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:f2:ea:16:7c:cf:a2:86:45:ea:a4:09:db:65:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Nov 23 01:00:35 2024 GMT
            Not After : Nov 24 01:00:35 2024 GMT
        Subject: CN=f994d07f5751d4e052703f63e345d00926506992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:6c:6c:6c:8d:55:35:e1:80:cc:fb:76:a9:
                    73:b4:6b:17:ee:fc:21:9a:1d:cf:7f:c4:c1:cb:e6:
                    05:66:48:52:57:da:0e:75:14:a5:07:0a:ff:c5:12:
                    8f:8e:29:3d:69:6f:9d:b1:68:3b:c4:61:3d:71:d0:
                    83:fa:bc:4f:e5:ea:8b:06:fb:99:16:c2:ee:c8:0a:
                    2f:8c:9e:28:6c:54:55:f5:bb:21:62:19:56:d2:6e:
                    6d:f6:dc:f3:7c:72:b7:00:27:17:98:2e:38:47:87:
                    97:3e:06:c0:dd:1e:28:61:0e:77:48:01:22:bc:8d:
                    cf:e1:be:c8:65:4d:f2:1f:1a:81:44:c7:77:9c:f6:
                    38:54:c0:a5:8b:cd:c2:59:21:13:82:21:ea:c0:06:
                    94:18:19:30:a0:6c:b9:4c:39:51:41:cc:73:61:bb:
                    13:63:ab:c1:b1:cc:e7:c0:ca:b3:04:4d:e2:7c:5b:
                    32:60:d3:86:8a:9b:a9:8d:57:47:32:2f:22:c8:70:
                    b6:8f:8e:53:f1:c3:69:a5:29:9d:79:1f:31:54:f7:
                    a8:7e:a2:de:dc:f2:77:fe:2b:c8:ca:22:d1:e7:85:
                    59:a3:07:35:36:f6:3e:63:95:f6:b2:76:4c:99:7a:
                    ea:f7:ad:17:96:9e:ce:8b:41:0d:3f:98:56:b1:3a:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:D0:7F:57:51:D4:E0:52:70:3F:63:E3:45:D0:09:26:50:69:92
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:35:0f:52:a7:2a:74:e4:2d:f9:df:da:43:a1:ce:b7:8c:6c:
         78:be:47:47:0f:7b:17:03:a2:a6:5d:e7:08:57:4d:92:19:31:
         7f:c9:b2:45:5e:21:99:0b:54:b4:4d:31:36:86:72:32:e0:37:
         4b:d1:c3:02:73:c4:dc:1a:df:da:06:0c:44:0f:aa:25:fc:21:
         5c:ec:0b:7a:ae:a8:e1:db:66:8a:f4:64:28:15:4c:71:9c:35:
         b0:c5:6b:ca:ee:5e:e2:2b:09:bc:9b:a1:1b:78:c6:9e:44:81:
         d9:cd:58:18:97:93:f5:84:0b:2e:70:d6:11:cb:b3:76:a1:74:
         73:b1:99:ae:e9:b2:ee:71:1c:e9:f8:75:41:fd:23:bc:0f:de:
         65:70:b2:e4:3a:bc:72:cc:f7:54:4f:32:4c:69:b7:cd:69:dd:
         12:4a:18:78:0c:9e:5e:4a:84:12:dd:fb:d4:b8:55:dd:cf:be:
         55:5d:60:7d:ea:83:f3:68:db:91:92:9d:7c:ed:c6:4e:a3:58:
         5a:57:61:7c:16:4a:b7:67:f7:05:b8:f4:3f:ae:c0:89:62:db:
         f9:5f:a8:6a:20:49:cc:ce:9c:80:1f:1a:d0:3a:51:be:8d:c0:
         f4:72:3d:2e:76:07:ca:b8:dc:b9:33:df:85:c2:22:e7:75:b6:
         7a:98:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:11 2024 by rpki-client on console-fra.rpki-client.org