Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File:                     3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier:          9LtZ27Fij6vvoTiSy/giObZAw/ECmfl2kO1Y6J/c0tk=
Subject key identifier:   B0:B2:0E:5A:5D:DD:CC:44:29:6A:F1:42:D0:84:09:C1:C9:85:81:14
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer:       /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial:       018F381DADFFD3D35CA991FC98B6D788799E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:03:40 +0000
Manifest this update:     Thu 02 May 2024 07:03:40 +0000
Manifest next update:     Fri 03 May 2024 07:03:40 +0000
Files and hashes:         1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: L+ZMd6ttY+4QoI7AvXGyeKb3DK51zJzCtu6cmK+VULE=)
                          2: NZb3HyPVI_VSF2frXSYsx9jf8Z0.roa (hash: F3h+T2MMsQMXsTkFfX5gTaULgMtsRu/0M8JOJI+yUD0=)
                          3: XB5WK-EENPpEebEtuSfkYZ_nD7c.roa (hash: UkPIXxJyAu0j1gHghftFaoWoJpr6/4NTguw83oiWeQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:ad:ff:d3:d3:5c:a9:91:fc:98:b6:d7:88:79:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
        Validity
            Not Before: May  2 07:03:40 2024 GMT
            Not After : May  3 07:03:40 2024 GMT
        Subject: CN=b0b20e5a5dddcc44296af142d08409c1c9858114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:85:a8:ff:f0:db:36:38:27:47:9c:58:36:05:
                    03:d3:09:90:f2:2a:56:49:84:a9:d0:cc:e7:fb:b4:
                    2c:b3:54:f1:4a:d7:ce:9c:0e:8c:6e:6e:f7:e1:e0:
                    7c:08:32:d2:cf:8c:92:9d:b2:3a:90:fd:66:50:f9:
                    9d:35:75:ed:de:b9:fb:ff:a7:6c:6a:cd:73:89:75:
                    ee:54:c6:cc:1d:63:6c:f6:d2:f6:f2:e3:e2:45:5f:
                    35:8e:4e:10:ea:1b:52:4f:11:ad:95:90:b6:69:69:
                    af:a6:8b:0a:a5:29:db:4e:58:b0:91:ea:b2:aa:6b:
                    db:9d:ea:22:bd:2b:2c:8c:a6:23:c8:cc:fa:5d:31:
                    21:df:3a:69:6c:a1:dd:72:64:49:22:c0:5a:6d:84:
                    33:b6:2c:bb:64:2c:a8:9a:d5:4c:86:50:d8:e3:dc:
                    ea:f6:af:37:ab:72:33:ac:9b:b5:58:86:91:17:4f:
                    9f:9b:fc:be:00:10:ee:a8:39:6a:78:f0:ad:6b:37:
                    40:69:92:a4:7b:8e:8c:ba:93:18:b9:61:6b:bc:6e:
                    5e:ff:89:b7:a7:c3:4c:3e:6d:cd:d3:e5:d1:82:e9:
                    30:79:af:2e:ac:4a:95:86:8b:cd:26:58:9d:f3:97:
                    04:97:7a:98:e5:9c:f3:a3:9a:31:c2:ee:44:88:6a:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B2:0E:5A:5D:DD:CC:44:29:6A:F1:42:D0:84:09:C1:C9:85:81:14
            X509v3 Authority Key Identifier:
                keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:e2:35:2f:58:1b:7e:a3:9a:67:dd:c0:c8:d5:d0:eb:d0:
         bb:ce:d2:08:3e:8b:62:ce:e6:6b:ef:44:8b:f3:fd:e4:8b:df:
         19:e7:7a:c2:62:9f:e0:e2:82:0e:0d:f2:e7:65:1f:00:81:7b:
         64:cd:ef:dd:5c:4f:ed:16:42:f9:35:94:9f:52:1e:12:e8:5f:
         8a:94:5e:be:fd:99:a2:13:19:36:9a:e3:5d:7a:a3:42:53:f7:
         5a:fb:81:72:34:6b:05:2f:00:90:a6:29:36:c4:0d:ac:84:93:
         c9:30:86:dd:3e:04:b5:76:a3:a4:12:f1:87:5c:fa:8e:98:3a:
         c4:68:0d:95:76:ce:06:d0:aa:70:7c:f8:31:b9:d4:a4:3e:5f:
         e6:d2:ad:40:21:f2:c7:6a:c9:15:c1:aa:85:ec:95:cd:b6:92:
         c9:4d:03:18:5f:43:8e:20:af:f3:32:55:15:42:17:a5:37:6e:
         15:76:cd:d5:79:2e:ff:16:f5:ef:17:37:96:15:69:b8:31:33:
         bc:d8:1f:3a:dc:ec:b7:35:e3:af:bb:99:81:21:66:34:70:16:
         ab:53:9d:bd:d6:94:11:27:34:5d:c3:7c:e3:58:28:9b:23:4b:
         50:8d:a6:7a:71:82:28:81:89:44:b6:6c:54:6e:74:3e:40:2e:
         f7:40:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:16:35 2024 by rpki-client on console-ams.rpki-client.org