Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File:                     3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier:          aoh/XdH6ac0Oo6OD8ZevWVFMFzPH1PX2M9RDwkPIJGA=
Subject key identifier:   20:BD:D3:4D:A8:C1:3F:29:DE:EA:5E:D9:A0:9F:2A:99:1E:93:90:91
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       019352AC237373555171CB7D517F54030E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 07:00:33 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:33 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:33 +0000
Files and hashes:         1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: g5h5in7/Imya67GP1LhdqHbTBxcRm/ciN9VuZ8nVFYw=)
                          2: BGnHHDcE3cf_4KtVFfypiexwh_E.roa (hash: tZPqzF2TOaBC0Ot+nkYNYdq66KrVbKjoxjiLIX4lVBk=)
                          3: W0odQOAtf480M02akoyyOScXws8.roa (hash: 3QtVfQ1LHw8Ch/IJcN71/y3546Uo70qwR8eFnf8YPhI=)
                          4: vAkeyziU-y50DmYp7L9Fgeck7C4.roa (hash: 24oVnN+cImUKKdg+UezdYs4KPLYFYm9yjj19CVeVV7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:23:73:73:55:51:71:cb:7d:51:7f:54:03:0e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Nov 22 07:00:33 2024 GMT
            Not After : Nov 23 07:00:33 2024 GMT
        Subject: CN=20bdd34da8c13f29deea5ed9a09f2a991e939091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:5c:57:5d:7e:c7:ab:d8:af:4d:04:2e:cb:
                    1e:11:ac:38:73:dd:38:bf:ac:d1:ee:7d:ad:26:58:
                    99:74:e6:4b:bd:4c:c4:77:ca:95:15:e6:01:83:27:
                    a7:fb:3d:45:ee:cd:05:71:5d:ba:03:4c:ed:c0:35:
                    f0:63:df:d7:ce:12:95:80:e2:c0:ae:1e:34:fe:83:
                    c0:de:a5:3f:59:e8:51:6a:87:bc:bb:ea:7b:71:7a:
                    79:5f:18:0f:64:77:d0:72:d5:7a:a5:f4:82:17:d7:
                    45:20:96:c4:dd:6f:60:94:f3:7b:ec:07:3a:94:3d:
                    3e:a5:74:55:be:35:5c:39:de:5c:d9:b4:2b:a6:18:
                    0c:ae:ca:b7:a5:e3:d0:72:6e:78:b6:fc:ab:51:64:
                    5c:1f:7d:24:2d:72:31:ac:c3:00:77:06:16:ed:67:
                    fb:5d:1e:5c:60:be:ce:10:16:87:59:3a:df:5e:c0:
                    69:b0:d8:50:cb:0e:a6:3e:79:40:ad:5d:9c:d6:e8:
                    1e:c0:64:e9:10:16:2e:4a:42:77:8e:a7:b2:5f:3d:
                    3f:e2:33:fd:09:d8:13:0f:e1:51:e3:b0:de:8f:cf:
                    65:89:1e:a2:ae:80:7b:11:a2:b5:7a:d5:79:4f:ef:
                    5c:34:3f:0c:ac:c5:19:e5:db:c8:2a:de:a9:85:1e:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:D3:4D:A8:C1:3F:29:DE:EA:5E:D9:A0:9F:2A:99:1E:93:90:91
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:ed:68:69:40:9c:a5:dd:46:f0:43:67:66:b5:98:e3:bd:
         7b:a3:e4:b5:2b:dc:96:c5:8f:d2:8d:52:f1:d0:2f:87:b5:de:
         10:e1:37:58:3b:56:b8:c0:4b:d8:4f:97:1f:8c:0d:97:a0:72:
         2a:85:aa:ac:ed:2a:57:bc:88:e3:15:1b:4a:33:12:ff:21:02:
         23:f0:b2:ca:12:d4:26:67:17:95:3e:4b:a3:86:03:06:db:92:
         00:4a:ef:00:94:b9:3a:aa:96:b2:0a:2b:b0:ba:81:9d:47:20:
         d6:77:72:60:b7:be:1e:54:65:e1:83:c7:77:9f:81:7a:ee:89:
         88:bd:c1:c9:a6:73:a4:48:66:ac:77:ad:df:c3:f5:5a:81:12:
         31:25:a9:3b:c7:ed:54:9e:5c:1a:b0:11:a4:70:09:06:c7:bf:
         de:d2:fd:56:7d:8c:31:90:8a:31:7b:91:33:a9:a6:7f:ac:5f:
         eb:b8:c8:b9:55:b3:e4:3e:44:6e:0f:de:18:5f:20:ca:b3:b2:
         95:be:f5:a9:bd:38:0c:1b:07:b2:5d:9d:44:77:2b:07:14:c5:
         c7:d5:13:3a:93:17:29:90:b5:6a:20:97:1f:83:a1:47:c0:f1:
         e4:7c:1d:2b:33:3b:fe:c7:71:7e:33:d9:a7:a8:a6:64:65:9c:
         79:e4:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:12:27 2024 by rpki-client on console-ams.rpki-client.org