Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          9xYR+QJD/wCixjvJACf6bOb2tPjUrItAIklJsQoeXAg=
Subject key identifier:   F9:E1:EA:2E:4A:73:0F:A5:5F:B1:2C:13:AE:DE:0E:C6:91:7E:3D:67
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       3E472D896866FA0A513C01B6A40147BB85D9156E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          7B
Signing time:             Fri 17 May 2024 15:20:58 +0000
Manifest this update:     Fri 17 May 2024 15:15:58 +0000
Manifest next update:     Sat 18 May 2024 16:08:58 +0000
Files and hashes:         1: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: 5rmKFRHlsmtxXXR2bHNBloXlP7eqMj7O4NHNEANICm8=)
                          2: AS48606.asa (hash: Kzo0aZU1ndE8uN2ZSqMmNGFzcEAx0iZ9r258aQfuHnA=)
                          3: AS59678.asa (hash: 6JBQTCI7y1ycuSV7hJGbw3awdmwsdtHpAQe/er28Geo=)

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:47:2d:89:68:66:fa:0a:51:3c:01:b6:a4:01:47:bb:85:d9:15:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: May 17 15:15:58 2024 GMT
            Not After : May 18 16:08:58 2024 GMT
        Subject: CN=F9E1EA2E4A730FA55FB12C13AEDE0EC6917E3D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:f3:6e:24:c9:a5:46:40:14:aa:40:be:50:
                    22:c7:49:0c:2d:61:da:18:a1:e9:3e:40:35:3e:cc:
                    a5:19:34:90:45:54:39:52:bf:50:f1:d0:ce:f6:7b:
                    76:67:22:73:a3:ad:35:3f:f8:4d:dc:6b:a5:ee:2e:
                    84:70:ba:b4:7a:57:03:f8:a9:de:79:4b:4a:c2:f4:
                    f3:48:6b:a2:28:7e:3e:50:24:55:f4:8f:7a:cb:a0:
                    5c:ed:31:44:66:0a:54:75:1e:13:94:33:1b:0e:a1:
                    c6:e9:4f:cc:63:b0:d3:84:0c:f7:7e:51:d8:79:55:
                    f2:5e:3e:fe:cb:07:33:6f:c3:3a:8f:47:ec:cc:75:
                    ab:8a:31:e6:bf:c1:5d:94:a9:b5:6e:14:9d:7b:29:
                    ec:c5:3b:ae:d5:4d:a5:b4:b3:94:9a:ec:02:0a:3d:
                    50:fe:27:79:a1:38:1a:5a:56:96:d2:4d:09:d8:25:
                    c7:fa:3d:f1:30:38:7c:e1:69:9c:c3:59:7e:49:e6:
                    44:f9:d7:37:9c:37:ee:b0:c5:2c:22:74:06:9e:1c:
                    d1:e9:8d:ba:01:ec:7d:85:ee:1d:83:84:3c:ed:f8:
                    ff:1e:d0:46:32:24:49:d9:81:5e:90:49:ed:4f:5b:
                    39:a5:be:bc:59:f5:81:89:73:cd:04:3b:c7:ec:0b:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E1:EA:2E:4A:73:0F:A5:5F:B1:2C:13:AE:DE:0E:C6:91:7E:3D:67
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f1:c3:ba:79:b9:e2:33:f3:0d:4b:f8:f9:76:a4:24:92:35:
         e7:0f:4a:e0:14:33:b7:de:cb:53:c3:73:36:53:b7:08:a7:47:
         59:90:4b:5b:da:f2:b3:19:36:65:fb:91:39:85:cf:cf:04:4d:
         17:a3:0b:fe:56:89:5d:bc:a1:b3:b8:ae:33:ac:28:05:68:52:
         51:eb:32:ab:34:d4:93:0b:a2:95:15:8d:ff:67:cb:1e:96:aa:
         37:bf:c3:67:73:e1:29:5e:a5:92:fc:ee:36:bf:97:83:a6:33:
         ca:2f:7b:34:ab:f2:e6:b8:43:62:22:bf:d6:2a:e0:69:a0:72:
         e6:74:a9:27:a2:52:6c:c0:f1:b0:b2:79:44:df:86:9d:dd:25:
         a6:11:50:ad:3e:6a:e1:8f:0c:44:3f:4f:fc:56:84:ac:ce:d5:
         39:ce:81:c4:fa:75:2d:b6:e1:f5:56:47:7b:7c:d3:ef:eb:b5:
         df:aa:27:09:61:9a:0b:39:71:ee:14:38:84:2c:ee:db:5e:44:
         88:02:6a:fc:58:ff:d5:81:59:ad:6a:8d:10:56:db:99:3d:d5:
         71:d8:04:9c:2c:b8:cc:ab:7f:17:2a:4e:08:e5:6b:01:85:bd:
         51:a9:4d:ee:00:94:4a:af:fc:f8:ad:ef:e6:b3:e3:a5:01:41:
         14:31:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:47:59 2024 by rpki-client on console-ams.rpki-client.org