Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File:                     3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier:          hXt9yretmfbpTQ7074Zg6IYCW7yOPzq8xxyWi24UKEk=
Subject key identifier:   93:3A:00:6F:5C:A6:7C:59:9D:2F:07:C3:0E:50:AC:07:44:81:68:B2
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer:       /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial:       018F66E295A1D982414A68BC055DC14BB72C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number:          116D
Signing time:             Sat 11 May 2024 09:01:16 +0000
Manifest this update:     Sat 11 May 2024 09:01:16 +0000
Manifest next update:     Sun 12 May 2024 09:01:16 +0000
Files and hashes:         1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: 8qSKST+AU7Yfb6knKHqXVtqDHOxI6oq87hF7GH/LLV8=)
                          2: 3gxLc-JXDOolgl3-vrz4tPzTwJ0.roa (hash: JBZ1ki4/wKYLZMKsj4tmUHaxZioWdg/m2wqA5xS+Lmw=)
                          3: 5wG8ZSua9WMWbYmimqvnbKy2e04.roa (hash: N9EEH721iBVp1oEYEd2pVY3auPDlMlLn1YnDI80Y5dQ=)
                          4: LD3lOEV10uIkcFbzMROz1z4RvzA.roa (hash: oHODW5fU0hPCgdgiarNC11OfTCrn8TJ39Y+wC0DW930=)
                          5: ZnU01CkXVpAV1FzgLXKzDB2FmKA.roa (hash: wGtaQwUJEd7kX5jRYn9o+Pkk46Bt5oNwCNeRZBnHSBQ=)
                          6: _lA0ik_bP7NR3WFZe_S_KSdCErA.roa (hash: xkI2ehznICMKdp8JMvy7KckoFkbKuNyXJNukyBWy718=)
                          7: yI9PfUcBojSb4DBTqMqbyOjur10.roa (hash: 0zoOnUx0ttRVVKFTuGAeXtoVJVoyA2SskCvCVdgMLYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 04:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:66:e2:95:a1:d9:82:41:4a:68:bc:05:5d:c1:4b:b7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: May 11 09:01:16 2024 GMT
            Not After : May 12 09:01:16 2024 GMT
        Subject: CN=933a006f5ca67c599d2f07c30e50ac07448168b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:65:60:e3:c7:2f:e1:ed:5f:83:78:5c:63:
                    d0:c2:58:b7:69:4d:f1:3f:c1:38:37:24:74:36:63:
                    7b:1b:f9:04:71:ab:00:99:3c:c2:54:d0:8b:78:e0:
                    25:13:50:54:4d:ad:df:02:35:ef:bf:a9:12:4a:50:
                    16:c8:ce:5b:42:ae:e0:55:5d:b4:17:33:92:b9:3d:
                    bd:0d:9b:76:08:db:cd:56:99:f1:96:b0:88:88:8d:
                    e4:87:e5:ec:80:f0:a0:af:1c:08:1e:73:e4:fa:92:
                    3a:b4:d9:9c:ad:ce:17:b3:3d:7e:c0:16:84:31:7b:
                    ed:ce:21:0d:7d:96:39:08:e1:f3:63:f5:5a:ea:f6:
                    5d:58:6c:07:17:75:b2:88:e8:ef:70:78:a3:8d:40:
                    5b:d3:30:18:f9:5f:d5:2e:e9:4f:97:5b:6e:45:14:
                    75:3a:4f:89:fc:ea:62:04:a4:24:06:cf:98:65:5c:
                    5c:ed:1c:59:fa:c5:28:bd:4b:7a:ff:6b:c9:5a:4d:
                    77:fc:53:ac:e8:af:47:01:b1:04:ab:85:8d:ba:49:
                    8b:df:e5:3b:61:f6:0a:75:52:c8:d4:7e:2b:2f:fd:
                    9e:fc:e0:ec:6f:ac:7f:9d:e4:a1:23:ae:c1:3a:d8:
                    ea:70:0f:76:e8:32:b1:d9:db:04:ae:bb:ad:7f:da:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3A:00:6F:5C:A6:7C:59:9D:2F:07:C3:0E:50:AC:07:44:81:68:B2
            X509v3 Authority Key Identifier:
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:bb:b4:ce:db:45:3b:bd:19:e7:61:b5:79:23:35:0d:a3:
         95:c0:e6:e0:5e:3f:08:7a:96:e5:e1:c3:dc:94:0d:da:e1:07:
         f2:94:0e:9f:36:35:bb:f1:82:2b:3e:9e:0d:d0:a0:4d:07:b8:
         05:0f:93:1f:21:27:29:47:ed:71:f1:91:07:87:53:2f:c2:f4:
         34:aa:a5:3e:70:5a:e6:45:df:3f:c0:c6:8e:42:fe:03:34:5f:
         97:29:fc:ba:06:61:99:03:7f:00:86:ce:3a:22:cc:43:e4:f3:
         84:17:70:dd:75:64:b9:19:0a:a1:78:0d:25:09:84:0e:b7:21:
         f1:b5:c0:46:4f:c2:95:29:ce:6b:56:ef:be:04:77:71:89:38:
         9f:53:e3:e1:37:6c:e0:34:c9:f7:45:c4:69:6e:49:8e:bf:57:
         e4:c0:35:d0:6d:f5:6a:9b:61:99:9f:b2:e8:06:46:c6:0d:d8:
         98:7c:41:f2:75:0d:dc:c7:a5:ee:b9:15:b9:4b:36:22:b5:4c:
         0e:9a:fd:98:a8:a5:fe:3d:99:72:66:73:8e:0e:39:a8:a8:69:
         1a:6b:68:e3:07:15:55:fe:2e:73:3d:d9:4d:78:29:c8:18:c9:
         a8:b5:6e:30:b2:67:1b:4a:c6:7d:b5:45:7d:01:46:8a:98:31:
         e4:c6:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:11:04 2024 by rpki-client on console-ams.rpki-client.org