Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File:                     3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier:          MItJAWOsRoRwqBe0anLX6nBpGwNlQb9jxNKqlJJUmdM=
Subject key identifier:   BD:61:E2:8C:7B:FD:65:2B:D8:9F:BD:27:50:7C:46:09:49:CC:11:EB
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer:       /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial:       018F885B30B03449D1A735662580AC399DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number:          E5
Signing time:             Fri 17 May 2024 21:00:28 +0000
Manifest this update:     Fri 17 May 2024 21:00:28 +0000
Manifest next update:     Sat 18 May 2024 21:00:28 +0000
Files and hashes:         1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: mefg0S7wo0qFDwsmUzVeFMEwZSb0ERo1EmW33rZKRC0=)
                          2: 53-evmt5ByuaE8LvUO1WufJk954.roa (hash: jTkEU9w/Qw39lkBxJXHsMX9VfumTiyJyUWKY8lGVSuM=)
                          3: DHlFIpMD2Wy5wZPDOtpy1iSTYsk.roa (hash: p1YLDIxc/OHJUPuwFNoGjIJKS7pdhL0DAoB+Q84oTuU=)
                          4: Q0k9l6dXg0MeFgl4W3FUl7TOhNI.roa (hash: 2Varc+3wrLVnqAQNAvybG+orOi0Yh3c7542V112XG7s=)
                          5: WAd3f__LWy_9e-vpEBIMHXqxIqk.roa (hash: m9Wl0OGsMn6YZfhsaVFnFfu8cTcRb9urL/UyGXT9jd0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:30:b0:34:49:d1:a7:35:66:25:80:ac:39:9d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
        Validity
            Not Before: May 17 21:00:28 2024 GMT
            Not After : May 18 21:00:28 2024 GMT
        Subject: CN=bd61e28c7bfd652bd89fbd27507c460949cc11eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:b4:10:5b:25:7b:4d:eb:9c:b2:11:73:26:
                    03:1a:bd:6f:3c:fd:85:7e:8d:41:57:1d:bf:58:ec:
                    23:dd:75:60:56:b6:99:8c:79:07:38:25:66:c8:37:
                    44:94:58:7f:08:76:57:95:0b:87:b7:ec:f4:a3:58:
                    f0:8a:26:2f:a0:00:7f:25:a2:15:f3:59:a4:a4:ad:
                    e3:30:e2:fa:0a:6a:8d:30:0c:27:7c:33:5b:8a:5a:
                    7c:87:60:0f:dd:20:e3:c2:2f:9f:03:e7:e2:9c:86:
                    23:c9:fb:52:b3:e6:54:af:56:fa:8a:bd:69:c6:ba:
                    01:8f:73:cc:90:42:ef:35:aa:35:6a:28:61:dc:b2:
                    f0:e1:55:d7:b8:05:f8:bf:92:76:ed:16:7e:5f:40:
                    df:cf:6a:a5:22:5b:c0:e1:64:65:fe:1b:32:9c:d5:
                    d9:d7:4a:12:fe:9a:8a:db:b1:3f:83:43:a8:9c:94:
                    83:8b:8e:1e:fc:1e:a3:6b:ff:a5:e9:78:e0:96:38:
                    46:ea:79:d9:91:10:60:ce:60:04:72:62:43:06:53:
                    c0:fb:fc:c0:c5:77:0d:02:6e:33:97:76:ce:8d:2a:
                    6d:34:e7:55:ae:97:22:fe:53:f0:3c:a9:af:da:85:
                    5e:ca:89:03:f7:0a:92:1a:1e:f1:30:9b:16:7f:4b:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:61:E2:8C:7B:FD:65:2B:D8:9F:BD:27:50:7C:46:09:49:CC:11:EB
            X509v3 Authority Key Identifier:
                keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8c:32:86:35:73:81:62:1d:8b:26:bb:91:c9:03:39:08:ce:
         87:47:40:64:d9:e2:53:cb:ae:26:e4:45:25:31:b7:70:ee:46:
         0b:cb:4d:58:30:8b:f0:90:f4:b0:75:bc:85:e0:19:34:d3:1a:
         b2:9f:29:76:ff:90:ca:52:f7:ba:b6:2a:88:71:02:4d:3b:72:
         0a:fc:fb:13:ae:fe:63:d6:25:9a:3f:84:1d:f9:71:ec:49:8b:
         af:d1:c0:73:64:e5:a1:2e:e4:c9:f1:60:17:19:81:af:1b:d8:
         1d:4a:1b:19:b8:38:e4:30:c5:70:d7:e4:26:f1:38:17:2b:3a:
         67:b6:a8:a4:2a:14:22:16:d6:df:0a:fc:66:ed:ea:ad:90:ad:
         7c:d9:01:81:28:60:7b:2d:f0:50:e7:66:19:2d:0c:5b:ea:c6:
         50:c2:90:50:72:20:69:c4:a2:c3:e2:04:be:8a:0d:39:20:22:
         48:95:89:be:72:9b:9b:f6:ce:f5:1d:d9:14:83:09:23:03:96:
         6f:54:51:0b:7c:22:04:29:8b:ea:67:ff:2d:9a:38:64:02:98:
         62:54:de:64:70:01:62:fc:88:3f:bb:39:65:fb:6f:be:bb:d8:
         9d:91:38:a2:7c:c4:9d:ea:10:cc:91:0b:8c:5d:47:e1:a9:d7:
         82:32:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:48 2024 by rpki-client on console-fra.rpki-client.org