Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File:                     3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier:          Rchjp9R+aAfJhXPzOPNBIXCXDsjQIfIgVDWyOvX/zso=
Subject key identifier:   3A:71:8B:05:4C:2A:E6:E9:EA:D6:4B:FC:BA:1D:87:E9:65:2D:9B:E9
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer:       /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial:       018F38F73C6B27F029C62FD567C8B81B978A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number:          114D
Signing time:             Thu 02 May 2024 11:01:17 +0000
Manifest this update:     Thu 02 May 2024 11:01:17 +0000
Manifest next update:     Fri 03 May 2024 11:01:17 +0000
Files and hashes:         1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: dLPWJtDRAIDNfeL06/ZosFaC9/6VrbBgia/DJBGIWSk=)
                          2: wRIgE3EkGwXNycGnvHQ86lpcZcE.roa (hash: tuPVfTx9Q1niFV4yVMswNKMzJsSB4NE+8v7cp7WJEB4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:3c:6b:27:f0:29:c6:2f:d5:67:c8:b8:1b:97:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
        Validity
            Not Before: May  2 11:01:17 2024 GMT
            Not After : May  3 11:01:17 2024 GMT
        Subject: CN=3a718b054c2ae6e9ead64bfcba1d87e9652d9be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:0e:67:a2:ad:ca:c8:e9:b5:b3:4b:9f:b6:
                    99:a7:b6:4c:e2:e5:9b:89:0d:ad:b6:bd:a8:fc:61:
                    cb:fa:9c:9a:aa:b4:13:89:84:cd:ac:ef:82:86:b0:
                    a0:a7:ad:cc:24:e2:a3:d1:a8:70:72:bd:a5:d8:d1:
                    e8:c9:4a:43:0a:8a:b4:74:2c:f4:c6:56:1c:20:d2:
                    61:44:b0:3e:70:5f:96:c5:d5:aa:4b:68:0a:e7:ed:
                    6e:bf:ef:85:56:f6:3a:80:e6:0d:10:2f:5b:94:80:
                    8f:93:78:2c:86:7a:a6:a2:48:75:f5:a5:77:64:73:
                    46:49:07:d0:b7:7b:68:af:c0:cc:97:d4:ff:76:94:
                    e1:d4:42:22:b0:50:19:50:bb:c9:72:d7:19:5a:98:
                    78:11:1e:34:e1:88:77:9f:88:6c:56:27:bd:51:ec:
                    f8:06:68:d1:31:bd:c3:ab:cc:7a:56:79:24:88:c9:
                    78:a8:97:55:14:5c:ec:cb:7a:8e:2b:d3:2d:5b:d0:
                    74:c0:e6:39:e4:b6:28:ae:87:b7:f0:7c:28:b3:c0:
                    87:a6:fb:79:ab:29:ce:bd:6c:77:5f:cd:3a:d8:ac:
                    0c:f0:34:f8:8b:b6:7b:a8:56:df:cd:00:51:e2:0a:
                    8b:7a:11:cf:30:80:36:68:63:90:b5:ee:b1:8f:01:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:71:8B:05:4C:2A:E6:E9:EA:D6:4B:FC:BA:1D:87:E9:65:2D:9B:E9
            X509v3 Authority Key Identifier:
                keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8b:54:89:00:ec:9b:d1:d7:0c:1a:a5:57:d0:21:d8:2e:1d:
         e2:f4:f0:f7:aa:1e:ad:ee:35:47:01:42:c9:05:20:45:7e:88:
         c9:5e:a3:76:21:62:cb:d0:8b:ef:63:12:80:79:16:f6:f5:b7:
         9e:ce:10:96:55:31:73:0f:f6:39:1f:4b:bf:8b:7c:a4:43:1b:
         1a:b6:62:31:c5:af:ab:e1:b4:45:c0:b9:f0:b4:87:df:ff:fc:
         5d:fb:05:5d:42:8b:23:65:ae:b1:5d:35:14:56:bc:ad:5d:99:
         03:c9:90:6c:7c:a8:40:65:40:7d:aa:08:0f:5f:ea:96:9a:f0:
         20:cd:1a:d4:91:cd:d6:f1:29:9e:89:7f:8d:eb:88:db:b1:65:
         90:b3:f9:63:06:f2:0e:b3:da:23:86:37:28:50:f0:16:1f:6d:
         fd:f3:af:5e:3d:8b:65:b8:9f:7e:7d:89:e7:66:df:7a:a0:ee:
         8b:96:65:36:98:f9:3d:78:06:4d:60:17:67:4a:03:1b:25:73:
         7b:87:7a:53:66:b8:07:99:28:79:47:f3:1e:ef:31:eb:27:26:
         ca:58:30:11:80:64:6a:cf:9d:9f:26:dd:39:1c:ec:f6:9a:b9:
         6b:a1:bb:92:c0:45:85:27:87:23:e9:89:5d:e3:22:34:11:f5:
         58:68:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:33:26 2024 by rpki-client on console-ams.rpki-client.org