Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File:                     3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier:          ImWeZDQrx0YmjGOtiTH8Y3sErrt+cnO4s1JZNkTvhqk=
Subject key identifier:   0E:EA:2F:C7:8E:7C:9D:30:C9:4B:64:6C:13:81:7B:BD:B0:80:62:0B
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer:       /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial:       018F847E618801A0FD6219AA2F706340A813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number:          03B8
Signing time:             Fri 17 May 2024 03:00:25 +0000
Manifest this update:     Fri 17 May 2024 03:00:25 +0000
Manifest next update:     Sat 18 May 2024 03:00:25 +0000
Files and hashes:         1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: u9pAV9Q6+CPJDCyZeLm81TzLtJhMC96zu3IzhRi9Mpk=)
                          2: OY4rkVFwAXLFA9K8PFt6WvsDiZs.roa (hash: qTQW2zWV5NZPUls4qw6bK8eGxT07Yfyc0cRLGNPr+Kk=)
                          3: Z65dooN8C78K2nTiNDviNF-GEJ8.roa (hash: 4hlmB0cN80Fc8IokYfJhvh6cNiXIOUwNSOaMcLmwtJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:61:88:01:a0:fd:62:19:aa:2f:70:63:40:a8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
        Validity
            Not Before: May 17 03:00:25 2024 GMT
            Not After : May 18 03:00:25 2024 GMT
        Subject: CN=0eea2fc78e7c9d30c94b646c13817bbdb080620b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:65:86:08:f9:89:7e:a9:7e:7a:fe:3d:c5:
                    69:34:ab:62:4b:36:72:7d:05:cc:87:49:9c:57:a7:
                    ef:bd:50:2a:b3:87:87:90:fa:1b:2f:31:0f:f5:41:
                    23:96:1c:66:93:23:b7:ce:5c:92:40:e8:80:30:3f:
                    c4:94:16:65:95:41:50:f1:1c:8a:b1:24:d3:07:69:
                    6c:08:b8:b7:87:ca:12:00:a0:c0:3e:d1:6d:05:5b:
                    53:b2:82:55:3d:7a:bc:d6:e1:17:5b:1f:dc:93:70:
                    1d:a0:8c:52:66:23:76:2a:6e:7e:0f:7f:51:7a:38:
                    b2:4c:9a:55:ec:f7:a5:d8:96:91:55:c2:47:1a:1a:
                    99:1b:49:e1:89:6d:09:fd:37:d8:f1:a0:1b:ed:f1:
                    04:71:9d:9e:95:f0:2f:51:59:68:73:8d:3f:9a:c5:
                    b9:4a:7a:87:a8:b1:53:2f:a2:ae:bb:3f:14:19:3d:
                    4b:8b:29:a6:0c:db:04:3c:da:3b:2f:03:5d:67:a1:
                    9b:f1:00:dd:a0:70:7b:6f:9e:59:3b:5e:40:17:e3:
                    5f:21:ef:6c:16:13:cb:3e:f4:cc:76:d0:20:c9:88:
                    a7:b1:a8:b7:96:5e:8a:58:4b:39:08:78:0c:40:4c:
                    8f:35:34:5c:25:53:b9:d4:79:a9:67:46:96:70:68:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EA:2F:C7:8E:7C:9D:30:C9:4B:64:6C:13:81:7B:BD:B0:80:62:0B
            X509v3 Authority Key Identifier:
                keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:76:6c:ee:58:bb:fb:87:46:35:bf:2b:bd:a5:89:55:19:
         75:f3:31:f5:b4:ac:55:59:57:f1:6a:87:c7:5b:d4:da:ab:eb:
         32:ff:8f:32:8a:ec:3e:17:98:0d:5e:19:fa:5d:db:18:ce:87:
         38:f9:8f:a3:61:ad:69:92:92:07:a3:a0:62:d7:4e:16:b8:1e:
         fe:9c:13:dc:11:78:67:7c:0a:f9:42:de:e7:56:cc:dd:1e:75:
         21:c6:c9:66:8e:56:c4:b2:af:aa:87:f8:99:f3:2c:ff:ce:1c:
         fc:82:41:6c:81:93:23:6f:01:72:f9:dc:8a:ab:b6:1a:d6:bc:
         8e:95:9e:ac:03:f4:b5:59:c2:aa:40:49:fb:08:ec:55:5e:ee:
         e4:98:aa:74:86:d6:77:5e:71:14:bb:be:32:91:30:d2:a3:ce:
         b6:eb:e6:cf:bc:66:28:0a:42:6a:09:68:17:89:d2:dc:04:ba:
         d6:8b:26:69:de:4e:e8:5c:b3:e0:b0:dd:ce:84:29:57:3f:1e:
         e6:c8:8e:c7:e5:16:60:de:5f:28:a9:d5:41:2a:59:a2:b0:6d:
         58:ba:4e:17:86:b5:f8:a9:4c:7a:0e:ba:4c:30:e6:6b:7b:fa:
         8b:0e:ca:e3:90:7c:fd:e9:45:2e:19:df:e1:65:bf:f4:73:38:
         7e:53:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:20:47 2024 by rpki-client on console-fra.rpki-client.org