Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          THfKwO/75EM8yiKbs+QEoJjox5yk+qkA6rjCJIrm0zI=
Subject key identifier:   B6:EE:34:8F:69:2A:6D:D6:14:ED:BE:65:DE:A0:B2:7F:AE:96:16:BA
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       019239262717D468318109CF59E075632FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          04B2
Signing time:             Sat 28 Sep 2024 15:00:54 +0000
Manifest this update:     Sat 28 Sep 2024 15:00:54 +0000
Manifest next update:     Sun 29 Sep 2024 15:00:54 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: ocKL6Nbxm97WRD2qf76koQnWysRcYxEOxeLqxpLO/6c=)
                          2: i1bripdMq5lhuDC3-sv4aFxcovY.roa (hash: GpIENZq0Ytb5RlhOKxgLqjCxqJcs7eD+6TsqrjLH8Ok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:26:27:17:d4:68:31:81:09:cf:59:e0:75:63:2f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Sep 28 15:00:54 2024 GMT
            Not After : Sep 29 15:00:54 2024 GMT
        Subject: CN=b6ee348f692a6dd614edbe65dea0b27fae9616ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:f2:55:f9:36:11:be:7e:51:e2:c6:f6:f9:
                    58:ce:83:b8:e7:3d:08:e7:ba:c9:74:b8:49:b7:5c:
                    ad:1c:15:a2:e0:d7:91:29:39:3d:93:e3:49:75:a1:
                    0e:e6:e0:a0:8b:e7:09:2a:be:ac:25:2b:b0:f3:30:
                    06:7d:96:9e:61:a6:62:5e:e8:e7:f4:38:48:8b:d2:
                    99:26:27:60:24:0c:fd:0f:f7:ad:6e:e6:6b:18:61:
                    b6:e2:9a:29:b0:dd:47:f2:86:d6:02:ea:e0:c0:91:
                    c2:46:da:2f:df:09:4f:a2:a5:04:59:e6:98:35:f1:
                    d4:fc:fc:f4:bf:fb:ae:0b:fa:2b:4c:87:37:6c:08:
                    16:a3:72:35:3e:8d:33:a3:18:5a:a1:df:00:eb:1d:
                    de:04:1d:f3:8a:8b:6b:b6:cb:01:9f:0b:4e:7a:ea:
                    61:c2:b6:17:db:b1:e2:71:a2:9b:a4:e4:cf:ae:02:
                    59:f9:7b:21:3e:9a:75:14:4b:c6:ab:e9:38:56:f7:
                    68:80:7c:64:60:cf:00:57:fd:69:28:03:f0:2c:54:
                    4f:fb:94:c0:1a:c3:6e:24:58:e8:39:63:d2:b7:1e:
                    b4:1e:59:78:15:51:4a:83:55:03:ce:6c:84:b3:dc:
                    2c:d2:c9:97:e7:c7:ed:23:87:57:2f:67:f3:02:a8:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EE:34:8F:69:2A:6D:D6:14:ED:BE:65:DE:A0:B2:7F:AE:96:16:BA
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:50:a3:da:b5:df:25:c6:5c:4c:e1:e8:d7:b0:06:6a:51:f9:
         9a:ee:5b:1a:a4:df:4c:06:56:82:e8:35:c0:20:33:db:d0:bc:
         57:5a:34:62:42:94:ed:e7:e7:9a:c9:9c:7d:76:6d:e4:c1:ae:
         89:ab:b1:9a:d7:22:c6:83:2f:ae:58:58:f6:13:c3:30:15:0a:
         15:01:03:9f:f2:4f:21:31:59:d1:02:fc:a8:2a:88:7c:02:59:
         3f:b7:cf:08:77:53:0e:12:73:9a:95:85:1b:4a:6a:f9:c3:56:
         46:38:95:85:ad:1b:1d:0d:2e:3a:56:5f:ce:8f:ea:b7:f9:4f:
         cd:ae:bb:b0:b7:d5:ca:de:13:b3:db:4a:d2:85:90:fa:5c:d8:
         40:40:c3:b8:e2:80:0f:6c:02:89:d3:ac:68:55:af:ea:6a:14:
         96:37:37:8a:07:2a:0e:7a:49:67:19:6f:97:c6:cf:87:42:4b:
         33:65:0a:d0:bf:9b:53:49:d8:a8:aa:a8:b7:8f:10:e8:dd:c6:
         73:af:8e:3f:ae:d0:ee:73:aa:8b:b8:48:32:65:95:14:d6:12:
         55:64:8f:f0:14:d9:0b:ee:a2:34:f8:e9:83:1c:a5:12:a2:c8:
         9f:cf:29:15:74:e3:16:e7:fc:74:94:7c:94:50:cc:fa:61:e5:
         06:00:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:34:40 2024 by rpki-client on console-fra.rpki-client.org