Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File:                     B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier:          6mEgT2Rg+X3NL48XuEifEofLbvYEt2dTdwWqaS80XW0=
Subject key identifier:   C6:71:84:DE:8F:F9:5C:33:19:F0:BB:33:3F:53:B9:41:6A:68:62:2B
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer:       /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial:       0193572DC1FC45BCA7363DDA2D535939BFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 04:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:36 +0000
Files and hashes:         1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: 8G9/69atBDm71sa2uI5NOR356EYyXVgsOWI3FFfNVfQ=)
                          2: anc83cog0VpGZyeV9wuwAJPUjk4.roa (hash: aiW7WNHYaoOLM9P0xyPjl/VY9eO7JubYLi62fjBNjaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c1:fc:45:bc:a7:36:3d:da:2d:53:59:39:bf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
        Validity
            Not Before: Nov 23 04:00:36 2024 GMT
            Not After : Nov 24 04:00:36 2024 GMT
        Subject: CN=c67184de8ff95c3319f0bb333f53b9416a68622b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:23:3e:7a:88:cf:b1:7b:ad:d7:31:70:e6:
                    84:72:9d:15:1f:23:b1:fb:1b:14:51:7e:45:e7:27:
                    b1:ce:03:7c:4e:eb:5d:12:42:55:b9:23:f4:9a:3c:
                    5a:73:08:0a:00:8b:5c:d4:59:c3:2a:dc:f4:c5:69:
                    95:05:06:49:54:6a:88:cf:ab:01:ba:38:c1:51:35:
                    e3:09:21:63:61:b1:2b:8e:38:b5:c4:c7:a6:c3:eb:
                    70:05:77:a6:ed:51:aa:a1:95:5f:0b:ff:a9:d4:7e:
                    4b:c3:26:24:87:a3:85:3e:a1:6a:26:6b:c8:77:75:
                    ea:9a:e8:d5:ba:76:c7:28:3e:2a:1e:d3:a7:0a:58:
                    2d:5c:2f:a8:4b:c5:58:e2:37:2e:8b:d4:ed:ce:ef:
                    68:0e:6c:84:f7:f5:0d:c4:87:28:3b:c8:90:4e:7e:
                    5f:f0:c0:3b:89:77:de:f6:9f:9b:63:e2:59:52:5d:
                    f2:d5:90:96:b9:82:73:7c:27:58:fa:db:09:ab:d7:
                    f6:f8:65:c6:c2:a2:3d:88:26:3e:e1:c5:e7:55:02:
                    01:88:b8:d8:f1:e0:e0:12:2e:91:ff:0d:1e:32:f8:
                    28:90:a6:0e:ad:da:59:ec:13:b1:79:60:a8:74:09:
                    c7:38:a4:3e:31:e0:2e:fc:f6:00:d0:ff:36:2a:4a:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:84:DE:8F:F9:5C:33:19:F0:BB:33:3F:53:B9:41:6A:68:62:2B
            X509v3 Authority Key Identifier:
                keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:45:13:ae:01:b5:fb:4d:b3:f9:f1:65:e2:b6:4f:16:a3:ba:
         0c:24:1f:ab:0f:5f:62:88:52:ae:b8:92:36:46:15:12:85:ad:
         f7:6c:16:5a:c4:ea:2b:f8:3b:d3:5a:eb:ad:2d:84:1a:cc:33:
         58:c5:bc:74:64:1b:71:da:31:79:78:c0:39:92:31:f4:3d:a8:
         15:bf:f2:a1:31:49:20:ee:d0:c9:fd:bb:ae:ee:26:a5:a5:04:
         a4:c5:ca:63:05:47:92:f8:64:0d:ac:de:62:98:5e:46:83:a1:
         05:9e:15:65:8b:21:21:02:a5:b3:59:f0:9d:11:12:a1:ab:a2:
         76:12:62:db:c2:06:89:aa:c4:2a:a8:4e:35:2f:17:95:25:e2:
         70:da:86:8d:06:97:e4:cf:a7:53:a8:49:7d:61:ef:91:6b:81:
         e0:47:17:b2:04:2e:48:2c:30:aa:3c:bf:e8:81:dc:62:3a:3c:
         75:ba:8a:32:a8:aa:1b:eb:15:e4:b8:8a:ae:6a:a8:5e:ea:38:
         a9:ef:28:34:aa:f0:47:46:bc:9d:53:92:93:b7:c7:b1:56:60:
         48:d6:47:19:4e:fe:51:b2:a1:fd:2f:58:90:8d:b6:5c:6f:6b:
         20:ef:b9:0c:a8:76:fa:66:84:cf:ca:33:6a:8a:d9:42:87:90:
         ab:ff:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:55 2024 by rpki-client on console-fra.rpki-client.org