Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File:                     3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier:          owdxA4t7Oe1Dp7ZSaXhw6/gLxSNpoeTl3bNVL+cZO9w=
Subject key identifier:   C7:B7:EA:30:CA:6C:CC:95:A7:F3:15:05:46:57:B3:0F:84:0F:DD:21
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer:       /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial:       018F9E76C394E92A97077589EFAD975CCA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number:          0817
Signing time:             Wed 22 May 2024 04:02:14 +0000
Manifest this update:     Wed 22 May 2024 04:02:14 +0000
Manifest next update:     Thu 23 May 2024 04:02:14 +0000
Files and hashes:         1: 1j77BTOK55nbFjU9T3CSmHmjr3g.roa (hash: tdr1tS/koFdMbxvqrnTYG5UfuWzeMgscZdh7hKIQEuQ=)
                          2: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: BbvmUzSICszbLxhygoLlVOLtaclKA+9ZfzJwbN5lB44=)
                          3: ipEAS-vliJq9f0TrdRYNcNmvrJg.roa (hash: y8Bmpp47o5v9W4xZWrPh2vrrtuYuc6uyQBidt4ucGps=)
                          4: r0CqBDiHixY8TiNHLE4R4QhnyhE.roa (hash: HvN/UuJrVgCGnpu6fHe1gvDCCX7pcGWGEXjMaRWKXro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 04:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9e:76:c3:94:e9:2a:97:07:75:89:ef:ad:97:5c:ca:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
        Validity
            Not Before: May 22 04:02:14 2024 GMT
            Not After : May 23 04:02:14 2024 GMT
        Subject: CN=c7b7ea30ca6ccc95a7f315054657b30f840fdd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:9f:d9:7a:37:dc:5d:ca:df:57:f5:83:49:
                    02:4e:2c:e9:31:d6:9e:f3:e5:9c:30:09:cc:ce:3e:
                    53:05:9d:71:4e:44:5a:e6:11:52:9d:b8:19:64:ad:
                    68:3d:9c:37:6f:22:ad:c1:a0:ad:46:9d:54:4e:cd:
                    49:23:ac:ad:06:f2:b8:76:0d:ce:d1:3c:d9:25:a4:
                    b0:e1:fc:9f:b1:59:07:54:dc:ac:10:03:1e:8b:fd:
                    cf:e1:85:53:d3:c7:98:e3:16:2e:c1:65:03:17:ed:
                    cd:33:e3:f6:56:37:ef:97:0d:64:5c:35:81:2b:c3:
                    b2:39:e8:62:6f:14:88:9e:6a:18:5b:1c:cc:a0:99:
                    88:cf:22:09:b0:ee:e9:fa:23:54:8f:ae:b1:ca:a9:
                    1d:d5:7b:81:5e:66:d7:57:74:fa:5a:1c:e8:91:7a:
                    de:2e:39:1a:fb:8b:44:51:1b:09:18:03:8e:6b:95:
                    fb:d6:2e:e4:12:65:4a:7d:49:16:6d:8a:15:b2:d6:
                    c2:e1:2f:96:a7:69:ca:89:fe:8f:ab:e5:72:5b:a3:
                    55:91:df:2b:ab:3b:dc:b3:3c:fc:b6:77:15:18:54:
                    2a:be:a0:8e:6f:4b:4c:14:2d:51:4b:e3:a9:4d:04:
                    9d:b6:f9:86:aa:d0:93:c0:35:4f:ec:ca:ab:57:79:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B7:EA:30:CA:6C:CC:95:A7:F3:15:05:46:57:B3:0F:84:0F:DD:21
            X509v3 Authority Key Identifier:
                keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:25:b9:22:98:c9:60:7c:8a:a1:c4:22:42:d0:f8:5c:b0:07:
         b4:b7:de:8b:38:ec:f1:3b:dc:c4:ba:e5:7d:e0:5d:b3:a1:09:
         48:cd:f3:f0:71:50:d7:11:4d:76:05:61:2c:03:2d:63:c4:00:
         9b:8a:c4:0b:bb:e0:0a:6b:92:3e:59:d2:a7:8e:96:15:8f:fa:
         8f:c5:4b:65:13:f5:10:ba:2c:08:da:e4:65:ea:e7:dd:5e:2a:
         e2:f5:65:37:b3:2a:09:d2:33:e0:fc:be:fd:8b:c0:3a:2b:be:
         d5:a7:b0:bc:61:84:72:fc:d7:90:04:4e:6c:7e:b1:61:eb:b9:
         be:90:6e:79:05:15:ba:1f:8c:54:4f:48:a9:5c:14:df:5c:df:
         2b:38:40:35:05:d0:34:e4:4d:88:34:6b:aa:e6:f3:38:44:64:
         22:a9:c8:1a:9b:20:23:2f:d0:bb:ef:b4:40:b2:5b:97:93:80:
         0e:62:f8:75:6d:04:48:4c:8a:05:36:61:e1:c2:fd:d0:c4:9d:
         94:f7:41:8d:e5:f1:a0:65:be:60:8b:1d:39:f4:13:da:54:01:
         06:62:be:62:47:28:2e:0d:e6:d6:e2:34:9c:96:98:7c:4b:29:
         bb:ca:41:e9:91:a9:e7:e7:c3:08:17:a7:bd:92:9e:2d:29:39:
         6b:0b:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 11:39:44 2024 by rpki-client on console-fra.rpki-client.org