Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
File:                     94tjVHSP4-hS4GSYKCwhVAB1_GY.mft (raw, json)
Hash identifier:          YxQQz1QInZrJlMsC4VEFQVAuSirIe9iCCpT8nJZJcfY=
Subject key identifier:   3B:42:EF:75:12:AE:A4:1B:67:A8:4D:0D:22:34:7F:59:EC:B0:27:24
Authority key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Certificate issuer:       /CN=f78b6354748fe3e852e06498282c21540075fc66
Certificate serial:       018F847E3E8BDB62D3F9D31C00002FDF943D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
Manifest number:          0399
Signing time:             Fri 17 May 2024 03:00:16 +0000
Manifest this update:     Fri 17 May 2024 03:00:16 +0000
Manifest next update:     Sat 18 May 2024 03:00:16 +0000
Files and hashes:         1: 94tjVHSP4-hS4GSYKCwhVAB1_GY.crl (hash: zszpbrXG6A5yW51XMhNXXHaurZ9FiwZfMUuOK3Tx3Ds=)
                          2: skxbN87EKfO25iOZwfa0FuP27AE.roa (hash: y8VVp5t2w/hkTVlpGOPnt5dGMU/7v9yDHLXtX0yAV74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:3e:8b:db:62:d3:f9:d3:1c:00:00:2f:df:94:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78b6354748fe3e852e06498282c21540075fc66
        Validity
            Not Before: May 17 03:00:16 2024 GMT
            Not After : May 18 03:00:16 2024 GMT
        Subject: CN=3b42ef7512aea41b67a84d0d22347f59ecb02724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:3d:e7:42:2e:35:b7:aa:7e:84:e4:a2:86:
                    f1:65:b6:2e:34:0a:b1:52:f5:de:78:99:10:a5:21:
                    33:c1:d9:af:39:44:28:8e:f3:b1:0c:ef:94:1d:ba:
                    f4:36:9d:3b:f0:0e:eb:eb:19:55:fa:41:ab:f6:95:
                    f0:e8:28:90:4e:b1:73:55:4b:69:d1:48:f5:fd:e0:
                    ee:26:fb:ab:b2:a1:67:6d:ce:82:b0:32:33:68:bf:
                    43:79:e0:2c:8a:3e:7f:c9:75:49:ed:92:6f:d5:df:
                    7a:d9:08:34:b6:83:18:69:73:9c:d1:1e:c3:76:21:
                    e0:e2:81:50:a6:64:0a:eb:be:ae:58:2d:89:4f:69:
                    a7:f0:5f:e5:33:48:52:b2:df:65:a7:3d:35:c4:ea:
                    31:9a:e1:d6:f2:b2:3f:5b:f6:d1:34:2b:ea:47:96:
                    e7:85:c6:f0:cb:09:7f:e4:ce:7c:88:2e:79:5d:e5:
                    94:ad:0d:29:a0:1b:6b:61:f6:7c:35:0c:44:42:c6:
                    df:be:cf:37:ea:cd:46:a7:63:45:69:56:8d:2e:a2:
                    f6:de:d9:e0:7d:f4:10:38:f3:4d:31:6f:5b:c0:af:
                    04:28:9c:92:93:da:14:b6:73:65:37:03:60:08:8f:
                    87:dd:cc:5f:37:98:22:9d:4e:8e:14:e6:64:34:d3:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:42:EF:75:12:AE:A4:1B:67:A8:4D:0D:22:34:7F:59:EC:B0:27:24
            X509v3 Authority Key Identifier:
                keyid:F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:d9:b9:87:80:f5:e6:4c:35:7c:11:4e:e8:4f:a7:4a:1f:
         fd:27:0c:68:6b:f2:a8:6e:68:b1:b3:40:44:66:b2:b6:e1:dd:
         28:bb:c9:78:22:5f:84:dd:d9:29:ee:66:fe:e2:91:34:12:58:
         80:9c:a1:10:95:c0:33:48:e1:de:1f:35:22:03:6c:1d:c9:68:
         ae:8b:c1:6e:f5:43:3c:ca:e1:fa:42:5a:2e:a3:74:ff:57:5e:
         57:1a:5e:42:58:a9:05:a3:23:9f:a9:cb:4f:24:18:87:09:a3:
         f7:df:94:6d:44:dc:74:e8:e8:28:1b:18:a4:f1:f7:95:bc:0b:
         58:63:3e:5e:70:de:d1:6e:ba:5b:8d:7c:2e:fb:ec:19:69:d9:
         a6:5a:92:5f:38:11:24:cd:66:0b:35:14:d3:29:ae:4e:65:38:
         7c:cf:df:7f:19:48:18:6c:05:bf:92:1c:4c:e2:70:a5:72:38:
         3d:99:e9:eb:d2:b8:83:2e:d0:59:36:87:f1:6c:55:90:9d:d9:
         ff:66:7e:a0:e2:ea:6a:32:88:74:05:1a:d3:a2:18:56:4b:d7:
         7e:00:11:8f:46:60:e8:57:ea:a9:81:cd:ac:b9:a6:31:53:39:
         04:5a:5c:ae:ba:b0:42:fb:3a:19:b7:ea:78:8a:1e:b5:f6:7b:
         ac:3d:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:44:19 2024 by rpki-client on console-ams.rpki-client.org