Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          ycT3ok7qetYEnvyXhablD2VeZpkiqXXFl3EDturRc7A=
Subject key identifier:   E7:B2:55:E6:AB:DB:A4:51:3F:C1:00:D9:1A:67:71:3E:1B:BC:CC:1F
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       01935877457C9CD722D979B0144C3D0369D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 10:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:31 +0000
Files and hashes:         1: JkBuuwuZebi9sIkm47Se-yv2GYQ.roa (hash: NGybg51dqrrC6oz0JgeoyEITpl9TtiyH6Ov7zC8hNW8=)
                          2: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: TDYZiBQ71kzQRSPKaaF5diMsP+2GUAyT9WjmI4n8rQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:45:7c:9c:d7:22:d9:79:b0:14:4c:3d:03:69:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Nov 23 10:00:31 2024 GMT
            Not After : Nov 24 10:00:31 2024 GMT
        Subject: CN=e7b255e6abdba4513fc100d91a67713e1bbccc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:a7:cd:f8:55:cb:69:d9:45:e8:d2:84:91:
                    ba:54:96:e3:e2:d1:88:87:02:8f:65:4e:2a:62:d6:
                    0a:d8:74:be:2c:58:c3:a6:a9:f7:97:f9:de:f2:ed:
                    a6:38:a1:87:b0:aa:8d:91:94:c4:0d:70:10:22:46:
                    92:7f:27:e2:02:b0:7d:96:4c:f5:2d:37:df:7e:a6:
                    d7:e2:ea:4c:ff:4c:49:d4:cd:72:3a:87:c3:e2:66:
                    87:c4:73:99:41:e0:5e:db:e6:15:72:53:e3:fe:4b:
                    59:fb:af:ef:b9:f7:ad:e8:2f:dd:95:d2:78:16:5a:
                    f9:2e:3a:93:81:a9:57:eb:79:a8:78:9b:1f:c2:2f:
                    fa:3d:ef:07:71:c2:82:1e:cc:d6:d9:04:d4:cc:26:
                    94:55:91:41:4d:e2:a7:03:f8:9b:17:90:87:c5:1d:
                    38:58:33:e6:af:ec:15:09:8e:67:15:79:aa:55:a4:
                    d3:65:7d:a7:86:7c:60:6d:b3:50:f3:2e:d9:47:39:
                    fa:73:ce:bb:32:f7:ef:75:e6:9c:af:33:1a:0a:0f:
                    39:3f:54:24:18:6b:b8:24:d8:ad:ec:14:2a:7b:ca:
                    b6:30:ca:92:36:6b:cf:70:26:ea:4e:a2:db:c4:54:
                    cf:fb:69:89:ff:15:3e:49:44:b9:e8:58:03:b6:56:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B2:55:E6:AB:DB:A4:51:3F:C1:00:D9:1A:67:71:3E:1B:BC:CC:1F
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:af:3c:70:de:a4:27:d2:4a:2e:1c:34:ee:84:bb:46:c9:d2:
         fc:1f:58:1d:22:ef:98:98:ba:b1:05:1a:3e:11:95:b9:75:63:
         dc:2a:96:ee:6d:2b:90:42:77:a7:ff:7b:3b:fb:b1:90:e1:d4:
         b4:75:39:30:04:9b:3d:42:19:52:01:58:c9:97:c5:92:9a:6d:
         f6:a2:57:7a:fd:c6:e7:1a:5e:74:12:25:33:e9:da:b2:20:e2:
         c5:12:e7:8b:41:6b:f3:5a:cc:17:af:7e:97:da:e5:b4:5f:3d:
         7c:a4:53:29:70:91:a2:22:20:e6:04:6c:da:a5:63:4e:b4:dc:
         07:a3:dc:85:d6:38:74:8b:96:c0:62:2f:14:73:be:bb:f5:a8:
         0f:52:9f:c7:96:a4:7a:ad:9b:b0:1d:3a:94:d1:07:1c:6c:b6:
         d7:aa:fd:6a:de:b5:b8:da:65:c1:2f:5b:28:3b:5b:ba:eb:11:
         de:b9:27:46:d0:d9:32:3f:b2:01:c1:7b:63:3f:c2:87:19:ba:
         07:bd:65:76:5a:bf:ef:b9:50:54:a4:88:75:ef:5c:93:9c:e7:
         e7:a0:dd:22:e8:52:47:fa:d3:46:91:d7:74:0c:b0:a7:69:dc:
         d8:2a:ea:79:8c:f6:04:ed:da:6e:59:b6:af:e0:f1:ce:2b:2a:
         d1:9e:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:42 2024 by rpki-client on console-ams.rpki-client.org