Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File:                     3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier:          ikTbvxAk7M1y5AH8tDgvOdf7fL/Q/UUl5mWF/ocbMDc=
Subject key identifier:   70:29:EC:1E:C2:C2:61:B1:A0:7F:B7:4A:18:BF:C6:AB:CD:12:A8:30
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer:       /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial:       018F87484109FC7631CE691D9F6F7B97B970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number:          0270
Signing time:             Fri 17 May 2024 16:00:10 +0000
Manifest this update:     Fri 17 May 2024 16:00:10 +0000
Manifest next update:     Sat 18 May 2024 16:00:10 +0000
Files and hashes:         1: 34qmFjo-dEDHLvIbaPrveI9CjUM.roa (hash: PT5S+lVb9nVJ3OSp/1GZF7ZS5OhFGMOpjxSRt5RLFvY=)
                          2: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: po69tvJezum3GTNCXSPWYm3/K0yby2Gl05VC0txLhIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:41:09:fc:76:31:ce:69:1d:9f:6f:7b:97:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
        Validity
            Not Before: May 17 16:00:10 2024 GMT
            Not After : May 18 16:00:10 2024 GMT
        Subject: CN=7029ec1ec2c261b1a07fb74a18bfc6abcd12a830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:5f:42:b7:a4:fb:16:e9:c3:53:88:3f:c6:
                    73:8a:46:9a:36:42:f8:ee:1c:7d:17:82:52:80:86:
                    15:79:dc:1f:8d:18:08:bd:1c:ff:25:8b:c1:a2:47:
                    56:d6:44:90:14:32:8e:d8:6c:19:ad:fb:0c:74:ed:
                    21:97:a5:0a:53:72:e5:cb:20:af:58:c4:db:ca:94:
                    ef:1a:b1:24:d7:b3:c7:2f:60:29:b9:35:7f:44:11:
                    3d:ec:c0:53:2f:e6:fc:ca:94:be:f0:28:9e:cb:04:
                    5b:71:70:dc:51:7e:2c:47:ab:ce:11:e6:48:36:7a:
                    ef:23:3a:ef:50:dd:e6:a8:01:a1:d1:0d:69:92:40:
                    44:cd:fd:c1:7c:8c:d9:ef:41:f7:bc:fe:1a:c5:87:
                    b4:71:d5:54:75:0b:ab:9b:21:87:15:97:8f:14:dd:
                    ad:5f:5c:ad:17:7e:25:d7:56:ed:7f:1a:54:e5:7d:
                    6b:af:ae:be:ea:57:44:85:4d:dc:08:18:de:e1:96:
                    95:e9:70:a9:14:7b:f3:ef:4f:c9:7c:56:31:57:49:
                    e3:f6:e7:78:6f:76:9f:d8:bd:30:d5:8d:ea:b7:01:
                    e4:bb:c4:41:45:cf:c3:2a:dd:8a:03:90:70:30:b8:
                    fd:10:41:03:a8:58:12:21:4c:9b:a1:76:ce:eb:33:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:29:EC:1E:C2:C2:61:B1:A0:7F:B7:4A:18:BF:C6:AB:CD:12:A8:30
            X509v3 Authority Key Identifier:
                keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:81:af:13:4c:54:0b:c0:d9:14:11:5f:6c:69:9d:64:80:08:
         24:9f:76:39:9d:8d:32:7f:e5:86:30:e3:4b:49:76:37:a1:57:
         0b:0c:21:c1:d9:6b:7f:93:20:d3:8f:81:e3:b2:70:7e:6b:ce:
         77:28:16:b3:0b:ee:e3:49:09:a8:63:d0:7e:b5:8e:98:26:fc:
         85:50:2c:61:63:1e:e7:bf:12:69:f0:94:32:f1:b2:50:db:b2:
         a1:71:18:ce:4a:1e:1b:e6:cf:2f:50:19:ed:68:b6:5d:25:d9:
         0b:21:1c:b4:42:e9:8d:63:0e:88:b4:d6:f2:b6:d9:2f:ba:ca:
         ff:61:c3:d3:28:ad:a9:6a:6e:03:1a:5d:53:d9:f0:bc:f2:56:
         b9:4e:62:99:f1:7a:05:f3:52:2c:2d:9b:63:c0:07:62:97:5f:
         eb:08:83:5a:13:ff:0b:5b:70:bc:e9:bf:05:ea:1d:31:1d:15:
         51:02:7d:69:e6:12:93:67:3c:80:28:57:0d:98:65:27:63:95:
         5c:a5:bf:b2:b2:61:d1:f5:e7:96:5e:8f:d7:d8:f3:4d:f3:69:
         52:d2:00:71:99:87:50:c7:f4:12:0d:25:ac:8a:7e:1e:2e:b6:
         2f:ea:f2:8b:6f:4a:f0:27:89:d3:ba:5d:9e:11:e8:64:79:f2:
         84:14:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:09 2024 by rpki-client on console-ams.rpki-client.org