Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File:                     34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier:          H31YB2J/91P24bSy1hZZQM4QIr/VKtNvVZsmwMpnpaU=
Subject key identifier:   B9:D0:03:93:92:A4:F6:D2:56:C4:99:87:10:6E:CD:65:7F:ED:30:D0
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer:       /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial:       01936933EEFEFEEB8961C55DE8D42DA31689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number:          0D63
Signing time:             Tue 26 Nov 2024 16:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:31 +0000
Files and hashes:         1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: y6Hepvkx17GkOwJq2HWnAVYk2sPH4Yg63GmORoKV7XU=)
                          2: B3ZGKn6LZpZHYNmbnQ8qqN4bwtE.roa (hash: z6tpHFi4RzcngFWy+XJ770ln+k6Ebkvhhp3R5Ryin48=)
                          3: RXG6QFtN84IZcbJnW_pa01m4h1I.roa (hash: /RuHlBMjOSW575UrbjgheGbLu5dEybwCQMac6AFwoPU=)
                          4: fuXP5Dbr0DLk589B24YbqCyvMJk.roa (hash: H5sNreqrhUbS9iJfdMIfXSfnZDJqeZYRW5/Qh46aEE0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:ee:fe:fe:eb:89:61:c5:5d:e8:d4:2d:a3:16:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
        Validity
            Not Before: Nov 26 16:00:31 2024 GMT
            Not After : Nov 27 16:00:31 2024 GMT
        Subject: CN=b9d0039392a4f6d256c49987106ecd657fed30d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:10:e5:44:59:94:ea:e6:f0:1d:74:2f:dd:
                    6b:8d:ec:01:ea:42:6a:69:b2:38:a3:43:df:74:ff:
                    0a:b8:50:b8:cc:59:7d:59:4f:e3:fa:0b:0c:bd:55:
                    78:b4:40:84:f3:b6:eb:82:68:76:63:f7:7f:76:55:
                    b5:cd:c1:c0:93:b6:87:26:ba:52:0d:af:8a:24:8e:
                    0a:bc:6b:2a:3a:68:37:47:09:1b:40:3a:db:65:c0:
                    15:e5:3d:e1:93:4d:e7:fc:c8:9a:b3:db:51:02:84:
                    ed:22:70:dd:4a:f7:42:ec:7a:70:39:c3:70:6d:e8:
                    af:34:0f:d3:37:6d:86:58:7c:b4:a1:72:d6:8d:bc:
                    36:b4:10:1e:9a:4b:8d:26:32:e3:d1:c1:aa:d1:d1:
                    56:db:09:a7:4a:67:e2:a0:32:65:76:2f:b8:a1:1f:
                    35:22:8a:90:78:d7:5a:55:5c:8a:98:38:49:66:e1:
                    90:0a:d5:c9:a2:a5:1a:91:d0:00:1f:08:8a:11:c6:
                    1e:d3:bc:7a:4f:aa:2f:48:c3:57:b6:bf:a1:e7:58:
                    cf:62:ff:ec:e5:6f:ad:7d:c8:f7:5b:5e:35:c0:fc:
                    1f:2c:46:70:1c:68:9a:e0:67:7e:29:38:da:0a:49:
                    95:0e:ab:91:dd:30:4f:86:d9:48:aa:53:65:56:af:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D0:03:93:92:A4:F6:D2:56:C4:99:87:10:6E:CD:65:7F:ED:30:D0
            X509v3 Authority Key Identifier:
                keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:3e:3e:23:2c:24:e2:79:9e:ad:bb:13:9c:e8:0f:47:75:
         d1:d6:8f:13:a1:11:9b:c9:ff:cd:10:1b:2f:d8:7e:e7:ae:54:
         2c:2f:ef:83:3e:88:d6:ff:ec:b8:b1:1f:0f:5e:5b:70:0d:91:
         22:05:1b:22:1f:f8:e0:3c:52:3e:97:31:a7:12:24:82:05:5d:
         ff:17:cf:0c:6d:11:34:83:85:5d:53:f7:63:e0:6f:de:9c:6e:
         34:93:8d:fb:95:8b:f4:27:40:1f:4a:98:e1:d9:fb:e7:bc:19:
         12:fb:94:52:6c:92:a1:de:d6:f7:61:76:93:e3:42:70:8b:a8:
         1f:d2:d4:1f:a5:f0:f4:d0:77:e5:6d:98:b5:9e:83:3f:a1:ae:
         5f:b6:03:5d:2b:eb:e2:1f:2f:87:12:67:fd:c4:23:e8:05:71:
         84:6c:e1:b3:5b:0b:73:6c:2e:c8:a7:12:58:03:20:7a:f1:22:
         2f:d0:dc:e2:7e:ee:4b:5b:4d:6e:dc:19:1b:b3:e1:53:38:5e:
         6d:26:2f:fc:7f:de:c8:45:a2:8a:2d:ea:13:0d:21:21:10:f9:
         1a:9b:28:a9:cf:be:07:fd:f6:79:3d:d8:ef:d3:33:88:d9:fa:
         85:1a:97:d4:d0:cd:cd:fa:72:6a:ae:98:ef:f7:0e:f2:de:17:
         50:d3:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:23 2024 by rpki-client on console-ams.rpki-client.org