Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File:                     3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier:          ybhSd21KP1jOFkDZoXJOtYG46hQgEqTUVt7K8gw82QI=
Subject key identifier:   CE:73:B8:90:A2:BA:D0:56:A7:4B:F8:59:B8:0B:A1:99:B4:72:BC:D1
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer:       /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial:       018F220108AD24FF94EF6B80376C30CF67CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number:          0829
Signing time:             Sun 28 Apr 2024 00:00:44 +0000
Manifest this update:     Sun 28 Apr 2024 00:00:44 +0000
Manifest next update:     Mon 29 Apr 2024 00:00:44 +0000
Files and hashes:         1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: Db90PV9n8vo00hzuwbeMD2240LYkxNnW2PHkK+nbV/c=)
                          2: Rl_1q5qz3m9RFjpsMeZmsR2LPQg.roa (hash: 5NU9Sj/6mUTGwrh8343Sl59ikvqB2Xk1Cj+QIyxmpsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:01:08:ad:24:ff:94:ef:6b:80:37:6c:30:cf:67:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
        Validity
            Not Before: Apr 28 00:00:44 2024 GMT
            Not After : Apr 29 00:00:44 2024 GMT
        Subject: CN=ce73b890a2bad056a74bf859b80ba199b472bcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:1d:49:51:c1:0a:86:df:2a:eb:ef:99:f8:
                    02:97:03:98:80:61:57:c8:47:81:be:c3:57:14:39:
                    4a:1d:6a:51:6d:48:17:f8:6d:2f:cb:9d:cf:a7:ca:
                    73:28:f6:5e:c1:e7:51:c6:68:ad:88:bc:7a:29:45:
                    16:e1:0b:f3:57:54:67:62:ed:a8:02:74:1f:0e:3d:
                    f4:e2:64:b6:98:bf:61:1f:0e:06:10:da:ec:4c:9b:
                    25:b4:27:12:00:d3:b8:7b:a0:4c:6f:fc:63:d8:e2:
                    f4:a8:27:8d:e8:66:cb:3a:b4:26:6f:b0:41:e8:86:
                    7d:6e:35:e7:5f:bc:d0:d0:52:f9:b3:74:d2:9a:76:
                    2a:c2:80:99:fb:90:9c:0b:74:54:f5:57:0d:59:24:
                    34:ff:cb:0c:36:c8:53:4e:e9:48:c6:a9:b4:b9:46:
                    49:51:56:97:00:40:96:ac:02:3c:5d:09:63:f3:0c:
                    40:25:4e:c6:65:89:ad:a2:61:5a:c5:b5:82:5a:90:
                    35:dc:07:d1:ce:00:62:46:fb:ab:c0:4d:d6:8e:24:
                    29:9b:23:13:47:1f:62:16:51:86:88:c9:69:ac:d4:
                    b9:9b:ee:18:f9:33:bc:24:83:c7:ca:fa:ef:c9:16:
                    07:30:8b:2d:14:6c:9c:a6:93:be:3c:4a:67:6e:68:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:73:B8:90:A2:BA:D0:56:A7:4B:F8:59:B8:0B:A1:99:B4:72:BC:D1
            X509v3 Authority Key Identifier:
                keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e7:6c:54:e0:7c:d6:6b:eb:02:25:b5:36:02:e2:48:41:b4:
         ab:08:7a:94:84:02:ce:f3:75:85:61:a2:6d:eb:d6:66:9a:d4:
         5b:f9:d7:11:39:6f:e3:76:42:38:ba:39:63:20:8f:07:bf:65:
         97:60:5a:1f:81:4d:5a:c2:6e:25:be:76:a7:92:21:5b:a3:ee:
         d2:e1:1e:7e:7a:e3:02:58:38:8a:9f:37:d4:6d:16:0b:e3:b7:
         67:ec:9f:ba:7a:5f:7a:3b:5b:4b:65:64:78:8f:10:27:f6:3f:
         52:da:aa:38:0a:97:17:a3:db:2b:6e:46:91:24:98:fa:ff:3f:
         90:97:ff:7c:45:20:d4:86:33:ab:a6:3a:b8:35:22:4b:ac:8e:
         bf:b5:3d:3e:7d:1b:45:25:d1:5b:f9:b2:a2:c6:50:8d:4b:a4:
         42:fe:e2:26:5a:d8:31:b1:91:6a:fb:40:78:9c:d3:8c:9e:d1:
         c8:f7:55:a3:01:ae:3c:29:d5:6f:97:ed:39:6e:e5:d5:f3:eb:
         c3:f7:89:2e:76:e6:0d:98:fe:d7:67:05:52:10:08:1e:9a:3f:
         09:f0:36:a0:2d:1e:ba:6e:5b:2d:69:45:c4:d1:91:85:c2:73:
         e8:20:03:f7:22:1c:c0:e0:2a:44:89:08:6c:4f:62:77:fa:14:
         9a:66:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:35:52 2024 by rpki-client on console-ams.rpki-client.org