Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
File:                     3VBysTiAwfG6hvzExAKX9dn0N3Q.mft (raw, json)
Hash identifier:          7ICOQ8oP7bUKaIU/WDci9rdir3Cy/dDP18xBDkEWp90=
Subject key identifier:   C6:34:87:44:8E:F7:0D:2F:2D:D6:7B:D5:4E:46:A3:8F:7A:22:6A:02
Authority key identifier: DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74
Certificate issuer:       /CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
Certificate serial:       018F3B53AFD23573B706AAD539BD82F43DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 22:01:31 +0000
Manifest this update:     Thu 02 May 2024 22:01:31 +0000
Manifest next update:     Fri 03 May 2024 22:01:31 +0000
Files and hashes:         1: 3VBysTiAwfG6hvzExAKX9dn0N3Q.crl (hash: +wi1pEAzRzIwkaB2IGI7wUmgwypPSAJORHbeLPrkCQA=)
                          2: Xbd_XMqvNacnCPj2PS52S3iR5NE.roa (hash: mw/kVgGLOCh5t3UKl9AjBcnBXDf2W3mLW7LiIponHYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:af:d2:35:73:b7:06:aa:d5:39:bd:82:f4:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
        Validity
            Not Before: May  2 22:01:31 2024 GMT
            Not After : May  3 22:01:31 2024 GMT
        Subject: CN=c63487448ef70d2f2dd67bd54e46a38f7a226a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:48:0e:29:56:42:1d:be:8d:43:b9:a4:9e:
                    a6:60:13:8f:68:45:af:11:b0:6c:27:fd:21:62:fa:
                    1a:bf:3b:6c:90:22:cd:71:7a:99:71:58:8a:ed:53:
                    ae:2c:25:96:73:61:01:e3:95:2e:ee:a3:49:51:f9:
                    7c:20:35:5c:00:34:26:62:d1:c5:e0:ca:c9:51:7d:
                    79:b6:99:40:8d:a8:55:aa:11:19:ab:e9:34:31:1a:
                    2c:40:73:49:1a:f6:1c:ce:13:c2:b7:59:32:ce:89:
                    e2:e2:a5:8d:c8:42:9b:99:4d:1b:1c:83:73:bf:d9:
                    f3:8c:d4:75:2f:a1:0c:4f:80:c2:82:b1:10:6b:75:
                    fc:10:c4:f6:52:a4:4f:ed:fe:74:39:94:f4:95:69:
                    68:f5:65:31:b8:b8:89:cf:e7:26:a2:8b:e1:b6:94:
                    d3:ae:b5:6b:aa:1d:f2:0e:b1:0f:77:a7:31:2e:7e:
                    35:85:de:65:aa:44:00:21:89:ff:98:cc:42:55:19:
                    12:ce:16:fc:25:a5:14:4b:7f:37:18:95:aa:a0:19:
                    51:ff:86:1a:38:50:87:fc:a5:f5:aa:31:66:b6:e1:
                    05:a9:ff:bc:ba:77:45:97:d2:dc:3f:a0:d1:5d:23:
                    03:be:b6:81:93:2a:2c:2b:70:21:10:1a:5e:6a:52:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:87:44:8E:F7:0D:2F:2D:D6:7B:D5:4E:46:A3:8F:7A:22:6A:02
            X509v3 Authority Key Identifier:
                keyid:DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a6:db:9c:a4:7f:e9:3e:e3:eb:09:7e:b8:1f:c0:bd:a6:dc:
         4b:ed:93:0f:bb:ec:38:4b:6a:64:08:72:27:43:59:37:6d:f4:
         aa:20:4c:79:f7:c4:46:48:ae:40:f6:9d:bd:fc:c0:7b:1f:8e:
         8a:19:f8:4e:09:ce:e7:c9:87:ad:bf:26:b6:7d:a0:9e:f8:3f:
         2e:0f:ad:de:cd:14:ad:4c:af:ae:1c:5f:5d:d7:41:7e:e3:81:
         39:27:3a:0e:7e:93:44:72:27:ff:34:5f:a4:b9:4a:3c:aa:c5:
         1c:c9:0c:6f:9f:f0:88:32:dc:fe:7f:0d:95:cb:a5:c9:8b:d7:
         47:ee:4a:8f:22:91:ea:d6:f8:44:87:ac:e1:ac:8f:be:61:60:
         db:20:5a:9e:e8:61:52:0d:9d:bc:48:88:35:e6:b8:7a:07:5f:
         38:5e:0e:f7:73:b6:a3:5b:f4:4b:2e:16:07:d9:60:f0:e4:31:
         86:f3:5e:a6:c2:1c:ec:8b:e1:66:16:c8:40:c1:5d:de:d5:6c:
         94:df:e3:d2:65:36:f1:eb:a7:74:99:c7:1c:72:82:88:32:38:
         1e:33:8e:97:df:0b:d0:05:cc:75:ea:1e:91:58:d9:cb:ae:5d:
         66:a6:e9:3b:1a:0b:5e:75:83:45:c3:39:49:b0:08:d9:6e:1d:
         23:02:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:03:50 2024 by rpki-client on console-fra.rpki-client.org