Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File:                     3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier:          I1WpVCM56EdaWUEiPutxwd2azIzPQk1uYGvqsjH1zvE=
Subject key identifier:   F9:F7:7B:9D:F4:0F:16:4C:1B:B7:25:37:A7:9E:EE:B5:9C:5A:2A:CA
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer:       /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial:       018F8D165F4FA3CD8FDF9780CB986C6E0F59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number:          0F9F
Signing time:             Sat 18 May 2024 19:03:24 +0000
Manifest this update:     Sat 18 May 2024 19:03:24 +0000
Manifest next update:     Sun 19 May 2024 19:03:24 +0000
Files and hashes:         1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: Bc+eJLyDzYZvPSeMsFrIwJzCLxi2MjK3I4xyIGsM8HU=)
                          2: 6DUQ869KtkAddqX5BJXWzU-Oo10.roa (hash: WfIQW1ZM7y3p2JXQIQ//Q6GHkYgKlFlbBYjXoY3Ffm4=)
                          3: c8xodrd9AnJ1Q1LTZBHuJwGeRgk.roa (hash: UFY+22wwM/Wr2ITxyrvkg6+Zb/RvP21dZrRLOQn8U4c=)
                          4: tLU8YTa50BNFR815aO3wRQWQeOU.roa (hash: zKU8zGeZgDYdgb9bdeIWosjG2Cp7PA508CX52QOSIVA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:16:5f:4f:a3:cd:8f:df:97:80:cb:98:6c:6e:0f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
        Validity
            Not Before: May 18 19:03:24 2024 GMT
            Not After : May 19 19:03:24 2024 GMT
        Subject: CN=f9f77b9df40f164c1bb72537a79eeeb59c5a2aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:39:22:c1:09:36:d5:01:6f:38:a3:02:4c:
                    7e:c2:e7:f2:39:4d:75:25:4b:cf:9f:3b:98:72:7f:
                    9f:78:31:db:9a:ff:2f:02:2c:c2:06:5e:3d:e0:16:
                    90:2e:40:9f:2b:9d:27:ec:14:26:eb:5c:46:24:21:
                    32:be:9a:dc:17:af:27:87:a7:48:87:27:56:91:0d:
                    4a:d5:1a:e8:b9:bb:16:a6:33:62:a9:18:ed:a0:8f:
                    18:90:12:0a:1b:1f:4a:66:78:5c:23:74:52:52:67:
                    65:eb:f6:c2:81:9c:54:a8:e4:f9:93:a2:bd:2c:d5:
                    7d:56:83:61:18:54:b2:ee:0d:ee:21:56:67:9b:ba:
                    f0:cc:3d:1c:1d:78:0f:b5:c6:0d:28:31:44:02:85:
                    01:98:30:06:43:05:75:63:90:4a:63:86:bf:3e:93:
                    51:c6:7c:fc:e3:30:92:9d:34:0a:14:01:9b:13:2e:
                    43:95:3b:a1:3c:49:d8:05:c6:67:66:95:9e:3e:f7:
                    7a:ff:bf:ce:1a:d3:a0:14:5e:ed:fd:97:f3:a8:32:
                    7b:61:72:70:ce:65:68:b6:25:cc:23:1c:d6:e2:3b:
                    b7:be:ac:e9:d6:c9:f5:63:ef:de:26:b3:ce:43:cd:
                    06:9d:a7:65:02:8e:8c:96:b5:5a:34:3d:6c:fd:4d:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F7:7B:9D:F4:0F:16:4C:1B:B7:25:37:A7:9E:EE:B5:9C:5A:2A:CA
            X509v3 Authority Key Identifier:
                keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c4:3a:c1:19:6e:2f:cd:52:ab:ee:1c:62:28:e4:ff:b4:40:
         b5:db:ad:da:2e:f5:de:bc:e7:71:f6:6e:d2:42:38:ba:72:47:
         59:7d:65:ab:2b:e6:24:73:19:45:49:67:b8:39:1d:99:7f:1f:
         e4:8c:16:6f:32:92:84:bb:c4:28:6c:93:8d:07:15:ef:a3:1f:
         0a:83:00:f9:74:9e:5d:3c:80:35:dc:bf:35:60:46:be:ee:a7:
         fb:02:25:fa:e7:7a:33:a0:7c:f9:50:13:84:36:ae:f6:70:42:
         8f:ef:9c:9f:2b:9a:a7:5a:e9:46:5e:ce:77:d1:8f:1c:82:e0:
         99:fa:9c:83:7d:f8:ce:1a:46:ff:8e:34:79:ca:7a:f6:f8:f1:
         49:5b:00:6a:43:77:6e:38:d6:2d:2d:ec:44:df:30:14:33:a5:
         97:bd:d5:ad:64:45:f4:a2:af:bf:17:d9:cb:73:da:11:43:4d:
         e7:68:13:76:16:ae:6d:2d:b8:7b:e7:53:7a:b5:48:df:c5:c0:
         a5:dc:b9:9e:2a:e9:25:91:88:98:f6:85:79:d5:1b:ff:f5:3c:
         c1:52:7e:3a:fe:2b:1d:8f:56:4d:e7:44:39:6e:f7:ce:4f:83:
         13:37:36:d9:65:29:5e:b0:62:2d:f1:6e:20:84:e8:28:35:e2:
         a8:91:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:53:58 2024 by rpki-client on console-ams.rpki-client.org