Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File:                     3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier:          1dHwpP9TPWpaO6vOt85IPdULa/mAhS5EipVc1apAsQA=
Subject key identifier:   19:AD:F2:AC:C0:20:DE:1D:BB:75:7A:D6:BC:91:5D:E0:33:00:03:58
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer:       /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial:       018F87ED097D6199D2021C803A9E7939F3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number:          010B
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: z6jZ3yG60Zkm8Ltm8O4mkFduf2E15P7bWx+hfjE57qo=)
                          2: 60m0IvtX5lxrjrezdZMal1jqoHI.roa (hash: ZVCD8Tijn0yA//ietc09REfNA1P83ybVta6/dplw/cA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:09:7d:61:99:d2:02:1c:80:3a:9e:79:39:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=19adf2acc020de1dbb757ad6bc915de033000358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:e8:9f:2e:9b:36:3c:a6:42:2f:82:62:e1:
                    04:b2:14:8b:ac:de:f5:e1:c0:c9:0c:68:02:13:5d:
                    09:1c:4a:70:8c:6a:a8:03:05:b1:5a:d7:9a:6c:a4:
                    1d:c5:b0:86:9f:0c:f9:33:00:9b:51:26:23:c1:0e:
                    60:a3:ad:6e:02:d7:03:02:9f:3e:b3:9f:28:b3:d9:
                    03:76:72:ee:bb:41:76:8e:86:24:6d:1a:04:88:c5:
                    12:0d:a8:fa:86:ec:e5:ed:86:36:e9:47:00:02:bf:
                    ad:25:22:84:f9:34:6c:a9:eb:18:cf:8e:7c:79:a0:
                    fa:ee:99:ee:99:bd:0f:74:90:be:ff:67:ad:30:cc:
                    70:46:59:32:8f:4d:a6:88:1a:54:5a:fe:0b:ef:2f:
                    63:6d:cb:aa:58:d1:c6:47:01:e5:06:4b:de:95:42:
                    cd:1c:64:1a:52:5c:14:67:e4:2e:0a:09:bc:b0:be:
                    fe:d5:32:8d:5d:f3:34:5c:7a:16:ae:6c:79:2c:c8:
                    8c:f4:1a:77:ce:76:c5:b2:20:b4:c8:31:58:31:17:
                    55:72:3b:57:37:5d:4f:3f:d5:83:98:53:80:ef:ad:
                    41:44:2b:27:b5:e5:8c:97:90:81:89:c7:64:7b:f5:
                    d4:50:ec:c2:61:08:77:55:39:b1:8e:13:9e:1a:8b:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AD:F2:AC:C0:20:DE:1D:BB:75:7A:D6:BC:91:5D:E0:33:00:03:58
            X509v3 Authority Key Identifier:
                keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:68:0f:a7:15:84:45:b4:7d:98:9f:48:3d:62:29:af:08:b2:
         08:87:50:8d:ae:ad:6d:9d:b2:d1:ee:f6:5d:9a:b5:aa:0f:8d:
         b8:a3:6a:7e:0e:0b:14:67:ad:8b:4a:ee:3c:d8:ef:09:7a:28:
         c1:da:77:f8:eb:73:31:40:de:44:ff:51:13:e2:9c:c4:5e:b6:
         3c:d4:46:b1:10:46:b3:e0:12:11:e1:80:5a:62:44:0b:ea:28:
         80:90:08:31:f8:89:27:1d:18:96:e2:ee:fe:bc:e0:0a:fa:d0:
         9f:8b:f6:96:1f:7b:ef:58:48:93:f6:0c:57:85:67:40:be:96:
         5d:d8:2b:5c:e6:7d:14:c8:5f:e4:76:20:47:27:2c:32:6e:34:
         6d:c6:31:db:4b:1a:e8:c7:e4:44:55:36:3e:28:27:b7:73:ad:
         ca:1a:26:4a:5b:b0:93:32:51:00:b9:fa:79:47:49:80:34:2a:
         84:38:8c:70:8b:66:b7:48:58:17:3e:a9:87:2c:aa:0f:a4:1c:
         d1:63:93:30:5e:3f:c4:cb:36:69:47:cd:3e:b1:f7:e2:f7:f7:
         df:3e:90:8e:e3:ec:b8:cc:c8:6b:c8:df:3d:a6:18:61:bf:96:
         e9:8b:0d:fb:f4:a0:81:87:31:ac:8d:e7:ba:f0:22:45:69:30:
         db:95:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:36 2024 by rpki-client on console-fra.rpki-client.org