Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File:                     1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier:          /aueOoZZDl7VkqYiqSP04w0KH3wwkaAjBY0o0LXQak4=
Subject key identifier:   B1:77:01:E5:D4:C7:85:C4:8B:A3:AE:C2:81:62:19:82:65:29:61:D0
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer:       /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial:       018F8891FFD32753CE494592F5BF7BC648E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number:          A3
Signing time:             Fri 17 May 2024 22:00:20 +0000
Manifest this update:     Fri 17 May 2024 22:00:20 +0000
Manifest next update:     Sat 18 May 2024 22:00:20 +0000
Files and hashes:         1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: ngzUM5jiB0GpS9Ni+EqPZHcaKjPcLje8243c7/W7Kl8=)
                          2: 4y7L4loJxAmG7Lrc8oUUJEYU1kE.roa (hash: nmSmjd9yEwlo2QtPhNbJ1Iif9VdMzZuHLKo598Gw7HM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:ff:d3:27:53:ce:49:45:92:f5:bf:7b:c6:48:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
        Validity
            Not Before: May 17 22:00:20 2024 GMT
            Not After : May 18 22:00:20 2024 GMT
        Subject: CN=b17701e5d4c785c48ba3aec281621982652961d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:b3:1a:f3:db:2e:c1:a5:03:de:17:12:88:
                    db:12:b9:d4:b5:6e:1b:3f:16:3a:0c:f1:b7:2e:0b:
                    26:7b:1c:28:32:3b:7c:6c:34:65:3b:d5:cf:12:e2:
                    13:e9:5c:b0:8d:53:57:a2:a2:13:62:99:1b:15:e2:
                    f6:ce:ee:78:ee:d0:65:c3:bc:7e:d0:b8:71:81:d0:
                    48:2a:da:c9:b1:02:63:a0:01:a4:db:40:6d:f1:ed:
                    0a:8f:8f:9e:68:7a:da:d5:0b:b3:dc:f9:5f:61:de:
                    9b:04:2c:1e:4f:2b:83:a0:6f:0a:d2:d0:85:7e:40:
                    43:53:08:97:b5:58:8c:c1:1b:69:d8:6d:d5:d1:4f:
                    53:2e:e9:4a:3e:8c:b3:ce:98:2a:39:f5:36:3a:87:
                    d4:8c:19:02:7f:a0:3a:d5:0d:6d:5a:ed:fd:ab:a4:
                    bd:2d:6a:a6:a3:b6:e5:01:d3:b8:f0:16:36:79:ff:
                    ad:5d:60:90:f8:f2:ef:f4:b0:c4:7b:89:99:a6:0f:
                    44:ef:ce:28:26:1f:0a:94:c4:e3:f4:da:6f:f0:44:
                    b1:d6:ac:56:b7:9a:ce:f7:f0:cb:cd:cf:52:62:4a:
                    10:c5:c2:d2:87:d0:7c:27:b3:d5:93:5d:75:0b:5b:
                    65:dd:7e:23:9e:92:6b:42:f5:6f:f6:a5:be:04:84:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:01:E5:D4:C7:85:C4:8B:A3:AE:C2:81:62:19:82:65:29:61:D0
            X509v3 Authority Key Identifier:
                keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:80:d2:0e:b1:99:db:ec:42:4d:62:4e:69:d2:71:c2:eb:36:
         68:78:c1:e1:56:3c:9c:46:46:49:34:7b:c6:d2:bd:e1:c8:87:
         48:f0:9b:4a:c3:2e:b8:46:b1:46:5b:eb:26:91:4b:14:ff:e0:
         9a:21:c8:61:9b:a0:e1:d3:50:5d:74:88:e6:0b:f2:fc:7b:6f:
         b9:e2:75:04:6e:34:c6:8c:9c:e5:a2:34:91:8f:b0:db:ce:5d:
         d3:2d:68:cd:53:1c:9e:9a:d0:3f:bf:ef:73:3d:33:ab:60:54:
         12:8d:63:0e:bb:cf:b9:f9:2b:b0:5f:24:82:e1:25:8f:06:00:
         8a:81:ac:f4:a4:13:05:ff:aa:94:93:4a:3d:d7:a5:5e:dd:e4:
         ff:f3:d5:14:c8:c7:d7:68:59:8b:69:60:b5:f2:b0:01:a1:5d:
         5f:a0:62:c6:1d:2d:c9:0f:a1:bc:be:98:8b:61:bb:ea:fa:75:
         a6:5a:52:ba:d2:ae:c2:8f:a6:19:cb:66:4f:09:3e:8f:d0:11:
         02:d9:a6:5a:4c:12:87:bb:e3:49:a5:af:c5:df:1d:94:68:7d:
         3c:33:c4:94:0c:bc:da:f6:35:0a:21:90:22:6e:89:a7:2b:0d:
         28:d1:19:80:2f:ca:07:6c:fa:7a:a5:e0:fc:28:6b:d1:52:12:
         26:77:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:36 2024 by rpki-client on console-fra.rpki-client.org