Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File:                     3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier:          020gqJOej+XjGJeuAg8YfHsRs1ZkOuaxc/YtcxqERFU=
Subject key identifier:   8F:84:F4:79:D6:37:09:90:86:A1:10:E3:FE:A2:1E:98:D4:C4:B8:95
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer:       /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial:       019367B321D60729838EE0133ABA39BF008B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number:          A1
Signing time:             Tue 26 Nov 2024 09:00:12 +0000
Manifest this update:     Tue 26 Nov 2024 09:00:12 +0000
Manifest next update:     Wed 27 Nov 2024 09:00:12 +0000
Files and hashes:         1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: o5zoKRYqof7Zt9AOTTXF90KOVduCOhFnoU9TC8tXD/k=)
                          2: oTj5l5Y1vWqIQ80kU_q_poFbouw.roa (hash: 7heNHBJoX+vLRAsZq6NuJb/lFlFSquBA+/QrqoFIcB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:b3:21:d6:07:29:83:8e:e0:13:3a:ba:39:bf:00:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
        Validity
            Not Before: Nov 26 09:00:12 2024 GMT
            Not After : Nov 27 09:00:12 2024 GMT
        Subject: CN=8f84f479d637099086a110e3fea21e98d4c4b895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:cd:6c:4c:ed:a5:20:d9:c0:0b:c8:b0:ca:
                    cb:04:4a:11:60:74:b5:29:70:a5:4c:f3:f4:91:7c:
                    11:dc:a2:9e:db:c8:c5:5d:7e:1b:fc:c4:05:27:6f:
                    ea:0f:62:00:e1:1f:9b:82:e1:9d:70:1a:98:68:25:
                    89:cd:ba:ba:59:5c:8d:7a:36:f3:39:ea:11:1f:f9:
                    4e:71:c5:59:30:f4:3f:02:2f:35:26:1b:f6:a0:6c:
                    3c:49:0a:24:24:f7:17:12:3c:90:1a:37:d0:94:e7:
                    b7:66:e6:6e:b4:cb:89:f4:c9:31:58:cc:16:9e:fa:
                    1b:89:2b:bf:ca:49:2b:df:fa:bb:4c:f0:8c:b8:fe:
                    3a:8b:2e:8e:5f:27:63:da:a4:66:17:59:8f:3a:d4:
                    30:9a:ba:28:7c:24:b9:7b:2e:25:f2:0a:31:c8:dd:
                    3a:43:35:c6:74:51:ec:63:b2:8e:88:fb:43:1b:28:
                    f4:7b:ac:b7:0f:36:2d:ad:7a:93:60:fb:7e:4c:79:
                    2e:c3:4b:73:a3:8b:39:76:53:a2:f5:dd:d5:ff:c2:
                    6d:96:fd:d8:e6:8a:5e:11:90:de:8f:cc:3f:e6:87:
                    dd:25:be:66:77:29:aa:a2:22:0c:ae:0c:2c:7d:98:
                    fb:22:44:92:ee:c7:7e:7b:a3:59:a1:f7:51:8c:2a:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:84:F4:79:D6:37:09:90:86:A1:10:E3:FE:A2:1E:98:D4:C4:B8:95
            X509v3 Authority Key Identifier:
                keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4b:63:3a:dc:be:ec:84:c8:1a:c5:91:c9:49:84:59:64:33:
         dd:12:9c:28:fb:38:4e:e9:f1:5c:6e:6b:e5:10:c6:7c:5d:6b:
         1b:12:d6:83:57:61:a0:90:fb:35:56:26:fe:67:bd:ff:77:16:
         67:47:87:d3:ea:10:bf:49:55:d0:8c:f0:8d:0a:77:e6:dc:cc:
         73:7e:77:25:2b:0c:f0:94:58:07:e4:11:6c:6b:26:13:43:ba:
         fa:07:aa:4b:21:8f:ab:a3:e3:8a:fd:d6:2d:a5:39:95:42:68:
         11:a1:41:18:dc:a2:df:22:80:25:c2:b3:d6:28:29:64:95:76:
         8b:9b:b0:38:97:49:51:d8:30:e6:64:da:b2:23:90:18:cf:ec:
         4a:7e:2e:56:3e:36:83:8a:2b:10:8a:21:8d:16:cb:df:fa:c2:
         57:47:5d:ac:b4:de:33:50:78:39:da:dd:d6:f6:8d:3e:81:da:
         d0:a3:d3:cb:23:4a:b3:c9:44:89:3b:b7:8b:d0:72:9f:eb:44:
         32:fd:e4:97:de:39:fd:8f:7d:09:87:a0:c1:42:24:0a:c6:95:
         e0:16:28:a1:91:42:da:13:16:ee:3b:63:c1:b8:81:e4:66:5a:
         b6:d5:23:51:54:2d:5f:3d:3f:3d:b9:92:e7:a0:3d:06:8d:bf:
         50:f7:15:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:55 2024 by rpki-client on console-ams.rpki-client.org