Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          DAiV0jjskP2ZsjvVn9Bc2ZQNBseqypfjwCytwF4TENM=
Subject key identifier:   3D:63:CF:D2:6F:8F:7C:44:CC:F0:38:8C:EB:BC:6D:18:CB:4B:54:D0
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       01936933D78E0B52BA147F57B9901B00BA1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          0F61
Signing time:             Tue 26 Nov 2024 16:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:25 +0000
Files and hashes:         1: 5mwY5bVf9jsXec1e8QF-QmhVGi8.roa (hash: tNUsn27to4ihAImB+Y03sLqLLgQCEI417lSGL+r9BHU=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: 9TumgkAvVt+OvTJpy0m/pBPJANFdwdG09BVJLxdDOHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:d7:8e:0b:52:ba:14:7f:57:b9:90:1b:00:ba:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: Nov 26 16:00:25 2024 GMT
            Not After : Nov 27 16:00:25 2024 GMT
        Subject: CN=3d63cfd26f8f7c44ccf0388cebbc6d18cb4b54d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:c2:a8:94:ff:2b:0a:2d:ff:23:94:de:56:
                    d7:05:82:d2:76:b9:9e:70:41:c9:75:66:3f:e7:60:
                    74:62:98:16:49:11:92:e3:4f:43:85:8f:db:ab:7b:
                    0a:e1:2d:49:8b:85:e8:88:f9:f2:02:ce:91:4e:48:
                    20:74:c5:87:7e:3e:db:42:c4:be:1e:e4:c3:7b:9d:
                    fd:21:4d:0a:1d:69:d0:a7:f0:77:5f:2a:75:4b:d4:
                    a1:13:5d:99:57:c8:f8:aa:93:f1:32:ac:f7:7d:a9:
                    69:38:22:74:3a:9f:8a:28:e6:27:69:1d:aa:01:d1:
                    7a:bc:18:46:58:0b:1f:72:2b:10:46:b3:2b:76:44:
                    99:8e:64:35:d7:1d:3c:9a:c1:9d:7f:df:08:3c:9f:
                    2e:68:45:1a:6e:91:5e:95:19:15:90:9d:9c:b1:4d:
                    aa:93:aa:32:a2:ff:cd:0a:ae:5b:25:d5:fb:ae:b8:
                    a2:56:e9:51:6c:c7:a8:e5:99:53:dc:e6:2c:1f:93:
                    94:6f:ef:ca:0b:ce:37:64:da:ba:42:26:e8:ff:7c:
                    31:31:cb:49:99:12:8f:5b:3f:bf:03:36:25:93:bd:
                    43:da:e6:4f:2f:c0:bc:45:d1:02:d5:67:2e:5b:24:
                    3b:c1:17:db:d2:7f:32:4e:db:1d:46:26:4a:b1:f3:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:CF:D2:6F:8F:7C:44:CC:F0:38:8C:EB:BC:6D:18:CB:4B:54:D0
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:c1:d5:e5:7b:a1:ef:2c:f0:d8:06:17:0d:8f:32:20:78:
         40:42:13:41:81:8d:63:25:0a:45:fd:ad:e5:91:78:8a:71:8c:
         11:5d:3b:f2:f1:1b:3d:0b:8f:d4:c6:49:59:18:b6:12:1b:2e:
         d3:82:a6:3d:dc:3f:83:a7:0e:08:37:03:88:22:de:ef:a6:b0:
         67:69:c7:cd:84:04:ab:a4:35:98:a6:5e:0f:1c:78:b3:fd:15:
         84:2b:9d:a9:bc:11:31:1c:48:be:25:87:52:9c:4a:b7:1d:61:
         0c:28:b8:2b:6b:da:33:a9:ab:85:64:77:fd:00:3e:2c:a6:14:
         af:9c:34:37:22:b4:05:5a:71:68:d4:cb:e4:1a:db:3c:ce:51:
         41:e5:8d:36:aa:65:05:ae:de:d3:25:38:61:0e:89:35:27:2d:
         b9:aa:4c:6a:d6:6e:82:d7:6f:01:61:0b:25:b0:66:07:a4:b0:
         3e:86:4e:ff:97:e1:77:e9:7b:2a:15:ac:12:5a:bb:fb:d8:7a:
         68:42:68:cc:58:af:16:d8:69:5d:b4:e5:0c:e9:b0:9d:44:79:
         1e:4d:41:67:e8:f5:dd:2d:6e:50:e7:4e:2e:38:3f:fc:9b:43:
         a1:dc:7a:a4:b1:f0:98:f6:81:d8:82:4e:10:ae:29:27:26:3a:
         b3:63:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:27:37 2024 by rpki-client on console-fra.rpki-client.org