Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File:                     Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier:          Iz5Sng03AJ8JKRDFqt35CXEoaaKmXBqkSkEJAChLy1c=
Subject key identifier:   03:26:1D:A9:5D:01:11:30:E8:44:AE:71:82:84:3F:15:52:43:14:CC
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer:       /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial:       019356F71415C25DF8E0E38B1699AB10810C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number:          0EFF
Signing time:             Sat 23 Nov 2024 03:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:53 +0000
Files and hashes:         1: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: Ot4rgBr4JAynF3YseIVzD7fmZWI8a9EAozCwmX2Weiw=)
                          2: ObCjhj0_47AE4tfHAzh7r7UDeZ4.roa (hash: kaV/7nJSoKK/KibrPrXeIoLbRzZSPIa/pWVFMOVJ3Sw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:14:15:c2:5d:f8:e0:e3:8b:16:99:ab:10:81:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
        Validity
            Not Before: Nov 23 03:00:53 2024 GMT
            Not After : Nov 24 03:00:53 2024 GMT
        Subject: CN=03261da95d011130e844ae7182843f15524314cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:27:91:db:9c:cd:07:35:a8:1b:40:ba:fa:
                    90:45:3f:c9:19:be:6b:a8:74:80:44:45:c5:7e:76:
                    cd:3b:3b:89:d8:46:1d:fc:82:96:43:c9:b3:eb:0c:
                    65:84:bb:06:07:bd:72:f5:d8:50:38:4a:5f:03:56:
                    b8:93:05:ec:66:02:19:ee:ca:31:a1:80:bb:9c:95:
                    d1:7c:d6:f8:e3:ee:4f:13:f6:c9:1d:0f:79:1e:00:
                    a7:fd:33:91:9d:78:ba:af:05:84:eb:f0:21:0b:56:
                    5d:b4:6a:f8:8e:4f:9c:69:8d:65:d0:54:bf:6d:50:
                    97:de:ec:09:c7:44:bb:a0:a8:4b:59:a9:69:40:a4:
                    49:6d:5a:e2:52:fa:78:f5:c5:a9:25:68:35:ba:0e:
                    00:50:81:1a:8e:7b:22:ba:91:a9:3c:ce:25:8d:db:
                    fd:80:e6:62:fc:bb:fe:76:20:dd:8d:0c:7d:7c:37:
                    ad:f1:95:e1:de:25:f6:f3:22:51:dd:1d:01:50:25:
                    06:c3:13:40:f8:37:cc:b2:c3:ed:aa:9a:cc:33:9b:
                    01:ea:13:cf:28:7d:68:de:45:8c:07:e2:be:b6:e9:
                    57:c7:9b:e9:af:ae:9c:41:50:2e:af:5e:24:fc:18:
                    21:33:1e:21:9f:d2:de:a7:33:62:81:ea:1b:09:9d:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:26:1D:A9:5D:01:11:30:E8:44:AE:71:82:84:3F:15:52:43:14:CC
            X509v3 Authority Key Identifier:
                keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:97:04:3a:e7:a8:a6:9d:e7:ec:ae:ee:5d:12:3e:d1:8d:
         d8:17:57:51:47:9c:7a:eb:56:f2:62:73:6e:2a:37:c7:9e:fd:
         8d:5b:71:ac:5c:08:68:3c:26:aa:79:1f:06:96:ff:d7:99:03:
         be:85:64:06:70:88:f2:05:f7:2d:a5:ee:f7:fe:84:ec:0f:d2:
         ae:eb:71:d3:fb:61:cf:fc:fa:0b:ed:a4:2c:41:e4:13:c8:cf:
         26:02:fa:06:ee:ad:9e:d5:1c:61:2d:e5:7b:3e:a6:f8:c7:85:
         11:e3:1d:c7:34:54:05:17:91:55:cb:38:ac:c6:7c:d8:93:48:
         ce:7b:9e:7e:b6:63:ab:77:40:ce:1e:8f:2f:87:5a:4b:79:bc:
         13:8b:15:0e:3a:0d:e9:71:ed:78:98:21:5b:aa:42:ab:a4:8e:
         50:fd:2f:26:b8:28:99:02:8a:17:98:9e:36:55:77:15:6d:70:
         de:e6:0c:35:7e:b5:b5:ad:e9:8f:3c:7a:2c:02:09:29:35:7b:
         6e:f6:3d:5b:af:23:3f:6a:f7:43:ee:34:87:31:75:69:e1:c4:
         46:ca:d1:e8:93:e9:2f:18:a6:73:c1:6f:d1:cd:eb:a1:ec:82:
         2f:76:95:93:a3:a3:22:31:fe:d1:c2:73:95:ba:93:7c:aa:f8:
         6e:2c:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:48 2024 by rpki-client on console-ams.rpki-client.org