Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          gSlTlEaDEtl5lvGq2Gk8NIrETybcL+9G8j3AhSAPyzg=
Subject key identifier:   4E:15:26:24:75:BB:86:33:8A:3A:C9:14:ED:F4:DB:5A:B0:18:18:3A
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       01935878D8CD9CD5F78E4B3CC59BC961FA36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          109B
Signing time:             Sat 23 Nov 2024 10:02:14 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:14 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:14 +0000
Files and hashes:         1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: KAHVUU3wIiylB7BGTdoqvTkGxet1MWlOISb/miOamjA=)
                          2: oLW-609I3Khtnvap7_JOvzS8Dh8.roa (hash: GI/K2R5uwKu2CJW1QernmTXeDLBsXY3zPyYVecZRek0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:d8:cd:9c:d5:f7:8e:4b:3c:c5:9b:c9:61:fa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: Nov 23 10:02:14 2024 GMT
            Not After : Nov 24 10:02:14 2024 GMT
        Subject: CN=4e15262475bb86338a3ac914edf4db5ab018183a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:be:c0:c1:ed:c6:66:ed:b4:91:b4:7f:5c:
                    1d:b6:96:33:64:5d:66:e5:16:ce:85:f9:4e:98:f6:
                    d4:47:e0:a6:d7:47:d2:e4:e1:f2:a2:3b:af:79:67:
                    e4:1d:41:bc:3a:fb:1e:3d:ef:6c:80:47:d2:07:a7:
                    28:fe:66:6c:3c:b9:26:e4:75:10:c9:cd:78:99:8f:
                    f2:d5:dc:a5:58:97:3d:78:f8:60:82:25:4d:50:3a:
                    0d:73:82:e1:ae:3f:1b:4d:60:75:97:d7:52:38:0b:
                    91:71:93:69:e1:8d:2d:d4:d4:52:6b:dd:3a:81:1b:
                    b9:a0:a4:25:11:58:17:d8:16:72:0e:7d:5b:2c:58:
                    2f:94:65:84:65:bf:fe:00:a1:76:dc:71:e8:0d:84:
                    c5:05:1e:80:8f:71:d2:a6:16:92:50:8b:e8:b3:31:
                    9a:c0:0c:66:f8:c6:83:3e:94:66:eb:cc:61:6f:10:
                    2f:69:2d:bc:0d:1c:ae:99:81:fc:39:74:4f:1c:e5:
                    e7:6e:17:09:b6:d9:5c:46:28:2d:1a:1f:b0:a9:80:
                    e6:0c:37:be:42:95:45:c0:a5:89:ee:33:0a:63:73:
                    69:09:c2:b2:da:7c:87:ed:e9:5f:5e:c0:79:ab:c9:
                    23:f3:8b:f7:40:6d:34:f5:c5:c8:70:58:bb:83:9b:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:26:24:75:BB:86:33:8A:3A:C9:14:ED:F4:DB:5A:B0:18:18:3A
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:96:98:ed:88:07:52:21:49:3b:06:71:e7:6e:fd:68:cf:4b:
         d9:55:38:62:b8:e3:cc:0d:b4:a6:a0:a0:ea:a5:1b:fc:5c:cd:
         79:ff:3e:79:7b:db:f7:9e:2f:67:bd:7f:32:63:2e:5d:37:2f:
         03:31:7f:76:47:fb:7c:58:7e:38:2d:d1:95:e2:40:b0:c8:bf:
         4b:72:ec:85:b0:23:7e:cc:00:5d:cc:57:5d:f2:f5:a8:4a:45:
         da:20:5e:b8:73:12:b1:38:21:df:c2:3a:a8:04:a0:bf:87:da:
         8b:74:63:a8:97:45:47:7d:4a:83:f8:eb:72:47:0b:bb:c6:73:
         19:5b:7d:25:d3:70:e9:1d:8b:9f:2a:c3:18:62:c7:79:7b:d2:
         7c:c4:47:56:df:b3:2e:d1:84:eb:c5:03:57:20:8f:b8:33:ef:
         36:7b:1b:f8:40:30:13:e5:26:fd:02:45:be:f4:62:37:87:46:
         05:77:bf:45:97:14:e2:7c:60:c5:84:f9:9c:13:d9:47:8d:0e:
         04:35:5a:15:11:76:cd:8b:4f:b5:00:b8:c9:4d:35:88:59:8a:
         fc:b4:f7:bb:aa:3f:34:84:c1:f8:10:d2:24:da:e5:c3:07:b3:
         61:2e:e8:1c:39:ae:43:d3:1a:45:f3:43:8f:3c:78:a6:ed:33:
         7c:a2:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:54 2024 by rpki-client on console-fra.rpki-client.org