Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          c0EDaSjvU7UdZ/Fe35Xa7HpXjG0P9J2MgP2E6QKQy8Y=
Subject key identifier:   29:D1:FE:F0:3D:C3:08:A8:AA:21:2F:69:04:0B:74:CD:15:02:A2:C2
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       0193617A781C6D3BDC8245BCE6BD49DD8514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          113B
Signing time:             Mon 25 Nov 2024 04:00:36 +0000
Manifest this update:     Mon 25 Nov 2024 04:00:36 +0000
Manifest next update:     Tue 26 Nov 2024 04:00:36 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: DasT6gHKxOSYGQnzI0HdqQVAu1YszR9ZgOABaZmnDIc=)
                          2: J9xo5S8sis1GUq8l3od9IiAYLxU.roa (hash: ZLTWdtz6flZYONkSuYBnZCYa16DxclNvkKkM+WekRuc=)
                          3: QE1wd9DRg298hH6Hxv-QVv81mrU.roa (hash: 2GG4eBykvKFEEP2hMtzD055izlHK+CKu7xNeVeYbTlI=)
                          4: Ths9GpPZdGq7SzqyA6phiUC_f7Y.roa (hash: M50YA7qLc7DuQ7S6BCJ8duRnMC3eGYfOIA1J2M+D37U=)
                          5: WA6YQzDc6pMLz5iK3NzVlALfLDY.roa (hash: BsMEs0NNvNbUhiHmX7GftlUb7RA8YuPDtiCbHjp9+CY=)
                          6: XKZuKQVEdZFbohb2VnoRvH_rGoA.roa (hash: qfYQRL41BXUC4ufUXBkCcEIlctCpzL/dSv0/Q/U2Zww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:7a:78:1c:6d:3b:dc:82:45:bc:e6:bd:49:dd:85:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Nov 25 04:00:36 2024 GMT
            Not After : Nov 26 04:00:36 2024 GMT
        Subject: CN=29d1fef03dc308a8aa212f69040b74cd1502a2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:b3:65:d7:b7:ca:c3:dc:c3:4e:b1:a4:58:
                    f9:b9:15:87:6e:29:2b:e5:d2:1b:97:b4:75:b4:21:
                    a8:f9:d5:53:c6:3f:45:ba:e9:9d:98:59:5c:91:79:
                    0d:1d:7f:1c:ef:c3:e7:86:dc:71:1d:22:6e:63:8b:
                    c0:ab:93:2d:31:f0:2d:04:f8:eb:ee:6f:b3:38:65:
                    d4:ee:e8:da:52:df:41:a1:96:6f:c5:56:c1:6d:b9:
                    31:f5:5c:be:4c:94:d5:d8:1a:93:e0:e9:f5:c8:ea:
                    d2:2d:a5:a8:c6:25:5c:0a:98:8c:4e:97:19:36:d4:
                    14:b5:77:bb:eb:54:3e:84:8b:fa:ef:bf:41:73:b6:
                    ee:fc:f1:07:2a:b7:0c:64:45:41:88:90:2a:22:dc:
                    e1:e5:34:48:ef:9d:a2:96:86:80:48:05:e3:f3:13:
                    23:aa:2c:20:fb:79:54:ca:a7:24:37:66:18:5f:25:
                    bd:9c:a5:05:82:c0:ce:d7:91:ad:87:27:03:dd:cf:
                    c4:69:24:c4:17:ae:c7:86:2b:c7:2d:51:08:25:2a:
                    8e:a1:99:b7:94:87:e8:c7:fc:56:ae:2c:91:0b:41:
                    ef:f0:1e:a2:fc:87:99:3c:db:12:44:99:93:61:e0:
                    ba:56:c4:bc:2d:6d:88:49:b3:1e:0c:d5:58:8a:24:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D1:FE:F0:3D:C3:08:A8:AA:21:2F:69:04:0B:74:CD:15:02:A2:C2
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:28:3b:41:d8:9a:38:fd:bb:28:11:8e:39:01:2f:91:e2:75:
         dd:3b:29:89:f1:2a:24:f6:4e:a1:a7:60:e1:6a:62:82:fb:f5:
         74:1f:9d:bb:25:4d:89:ee:f9:de:72:af:b6:0b:3e:b8:41:2a:
         3e:56:b5:7e:a6:2b:ef:80:a9:14:de:26:db:64:4e:1e:77:9d:
         92:0b:e2:1d:35:8f:ac:d0:33:a7:d7:e6:9b:28:1c:f4:8c:65:
         b9:af:7f:f5:21:2e:13:16:5d:56:48:73:43:e2:e0:15:2e:6b:
         af:3e:31:f7:bd:40:ec:9e:2d:35:29:71:5e:12:ea:2e:c7:c9:
         cb:4a:50:3a:b6:50:f5:a3:58:aa:e6:53:ca:42:5f:85:df:37:
         05:94:1f:9c:94:95:4e:bc:d8:fa:fc:0e:f9:90:fe:92:b1:ff:
         b0:26:21:25:f8:43:1c:0a:38:0f:26:84:83:fb:4a:23:08:5f:
         01:78:36:83:c7:2d:b8:08:aa:9f:8c:4f:96:09:04:98:0b:ca:
         d4:b3:cd:1c:12:10:30:d2:ec:10:6f:62:a2:f9:20:50:bd:85:
         26:3a:f2:4e:28:85:cc:a8:7e:7e:33:b0:76:72:69:e4:f9:ca:
         f9:b2:a0:ac:f1:7d:44:ab:1c:30:43:9c:c7:a1:ed:b8:5d:c1:
         36:f9:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:12:58 2024 by rpki-client on console-fra.rpki-client.org