Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          0FBqR1oQe/JoeRZwSTSSAWtZbNzky/RTcsJv+xcF3Y0=
Subject key identifier:   0F:A7:A4:61:A8:E1:19:E2:85:6E:F4:6B:CA:61:41:5C:0E:A5:03:DB
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       01936AEB7A00790134F97A15B78B49DB65A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          0C06
Signing time:             Wed 27 Nov 2024 00:00:37 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:37 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:37 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: TrfU0L5raHqIyn0y3QOr4egtzd1uLfFfcwQhugTPqaI=)
                          2: r6Tv3NlDNO32NCw862-3vRseH_I.roa (hash: IvQnLNto+EjKwOgQwI/X0TM/QI5x1dwBo5aobOHMQT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:7a:00:79:01:34:f9:7a:15:b7:8b:49:db:65:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Nov 27 00:00:37 2024 GMT
            Not After : Nov 28 00:00:37 2024 GMT
        Subject: CN=0fa7a461a8e119e2856ef46bca61415c0ea503db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:70:77:4d:5c:bd:e9:a4:08:45:58:d0:98:
                    e7:61:8a:d1:0a:3e:29:fb:66:3e:8b:7d:94:d4:e8:
                    a7:8d:9e:5e:6e:ed:e5:33:89:10:c3:6b:cf:fd:8b:
                    db:e8:36:7d:ce:d6:fb:7b:d6:ff:e8:c7:18:60:e2:
                    a5:5f:3c:e2:f6:f7:81:01:07:01:7c:7b:3d:cd:5d:
                    29:b0:29:5f:f2:97:92:54:e7:19:f2:30:cb:95:3c:
                    c2:6e:80:6e:fe:ca:d0:2d:0c:03:ba:dc:91:09:78:
                    3e:a5:38:8d:28:96:33:ce:0b:e0:85:53:8e:a6:a4:
                    0b:bf:00:aa:ef:e1:05:5b:46:2f:3f:c2:bd:c7:20:
                    4e:08:47:48:d0:84:0d:4a:5c:b9:e5:6d:9d:41:1a:
                    49:ac:d8:50:e4:37:f8:42:b0:0e:01:10:07:a6:7e:
                    83:d6:86:e1:c4:66:20:4d:71:fa:4e:92:e8:2b:d0:
                    99:1d:be:e5:4a:de:8b:db:07:18:81:a8:97:10:71:
                    06:77:f3:02:1b:4f:f5:ba:07:24:48:b4:88:10:41:
                    73:c7:2a:f8:5c:e1:6b:1f:12:35:06:de:b2:ef:20:
                    53:67:b1:59:88:7c:26:79:e6:0b:2b:34:a0:70:cd:
                    24:66:e1:7e:f0:1d:40:1a:2e:34:95:83:36:09:30:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A7:A4:61:A8:E1:19:E2:85:6E:F4:6B:CA:61:41:5C:0E:A5:03:DB
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:04:de:69:f0:a9:fe:f5:86:8f:f5:6f:2e:3c:31:50:63:90:
         2c:f6:13:20:ab:c5:48:2b:aa:14:b0:1c:7b:1d:51:9d:8f:7f:
         a8:f0:fd:ed:11:46:dc:9e:22:50:9c:05:5e:6c:fa:f4:d0:dd:
         31:8f:19:c6:cf:8b:78:95:28:d9:ba:d5:88:cf:e1:10:29:e5:
         89:38:26:7c:23:a2:9f:71:26:81:76:7c:6b:4e:78:6f:a5:5b:
         d1:63:8f:00:3d:5c:92:92:1e:eb:7f:95:73:3d:77:9b:2b:f5:
         71:14:db:d6:00:12:53:49:6d:ae:56:4f:37:02:eb:61:ed:3c:
         d0:e3:a9:4c:f9:12:85:fc:95:16:3b:36:11:d9:c7:2f:22:68:
         2b:57:b4:72:6c:17:77:fd:e4:e5:69:70:a4:c1:72:73:a6:41:
         54:d2:54:06:37:7c:23:03:97:32:4d:9a:5a:99:6c:e8:19:a0:
         2c:0b:6e:96:6b:5c:df:96:7c:51:c6:66:53:ae:b3:04:87:9b:
         f4:dc:2b:53:69:d2:af:b6:6c:62:7d:ab:6b:4d:21:93:d4:38:
         b8:0f:42:bf:12:c7:be:01:37:c8:47:28:39:f6:02:89:8d:82:
         69:17:c2:28:8c:9a:93:68:d0:30:eb:14:14:52:d2:96:be:fc:
         5a:fd:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:19 2024 by rpki-client on console-ams.rpki-client.org