Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File:                     3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier:          OUKfbFhr6xASZphYRQW/VVrenT7t5XAwhPKYpmO9w5Q=
Subject key identifier:   4A:D8:A3:28:D5:D2:C9:81:8F:95:9B:08:42:F7:16:B8:A2:A6:C3:77
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer:       /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial:       018F54379AB9A60890D43E07546CD4760160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number:          115F
Signing time:             Tue 07 May 2024 18:01:21 +0000
Manifest this update:     Tue 07 May 2024 18:01:21 +0000
Manifest next update:     Wed 08 May 2024 18:01:21 +0000
Files and hashes:         1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: amV/fA4zXWLwma9iBpN+etlkEu0RJJGNjxeH4vMJDC4=)
                          2: LfyAcBU61rkGs5mBKPzjfAIosNc.roa (hash: kJRzPWBVMSVfrHZjapPgi/EKnAURuioU2NmAyhqu9pg=)
                          3: YllJttbKLAz7vT7C31cbyWuVV8c.roa (hash: I4XUKKjqUDSkzZrZEfVZnVgEvx0vb+ezEdlceW/yd2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:9a:b9:a6:08:90:d4:3e:07:54:6c:d4:76:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
        Validity
            Not Before: May  7 18:01:21 2024 GMT
            Not After : May  8 18:01:21 2024 GMT
        Subject: CN=4ad8a328d5d2c9818f959b0842f716b8a2a6c377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:3b:5e:45:85:82:a9:a9:f3:f8:e7:68:79:
                    ee:0a:75:be:e2:05:29:d5:f7:cc:a8:ce:e4:e0:3c:
                    b5:91:31:ad:43:2d:fe:76:7a:40:8c:44:8a:ca:89:
                    7f:c1:4b:b0:7e:71:c9:c3:f3:8b:10:e7:71:e1:0f:
                    68:1e:ca:a5:8e:73:9d:7a:1b:a7:04:56:bf:18:5f:
                    66:0c:20:68:1e:be:f8:2a:da:2c:e0:58:61:84:ec:
                    f4:53:7b:45:20:8c:02:c7:b9:1a:32:cd:e0:c4:35:
                    04:89:13:ec:96:8a:94:45:e9:86:be:ff:05:82:68:
                    fa:64:c8:2b:61:0a:12:f7:da:b7:6a:ec:ba:fa:30:
                    e9:0b:ed:60:a5:b9:b7:75:97:6b:25:9d:9d:f9:2e:
                    ff:88:50:22:db:50:2d:69:66:e6:4b:47:de:47:3c:
                    a8:0b:ad:3e:3a:13:0f:8d:4e:44:b1:8c:9d:c5:0a:
                    46:59:c2:85:aa:22:e1:5d:46:f2:0c:cd:55:67:36:
                    e8:cd:57:2d:7e:0f:1c:e3:18:2b:38:23:b3:88:9b:
                    bc:89:26:0a:b0:74:56:ac:31:4a:25:19:6a:36:a0:
                    52:0b:fe:9e:4c:2e:ba:0f:9c:77:8c:c6:90:5e:df:
                    65:2a:5e:b1:5e:1d:de:fb:b8:43:8e:dc:8c:24:44:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D8:A3:28:D5:D2:C9:81:8F:95:9B:08:42:F7:16:B8:A2:A6:C3:77
            X509v3 Authority Key Identifier:
                keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:ad:ce:fd:20:5c:fc:09:6e:d6:8b:a9:71:3f:10:57:a1:
         8e:44:2e:4d:1c:b4:c5:97:5b:fa:0d:96:53:99:8c:4a:e5:ce:
         43:2c:c9:aa:29:48:7f:5a:73:ed:7d:96:53:a9:ad:8c:ea:ef:
         b9:49:fb:be:45:3c:89:9f:0a:33:3e:2b:08:9d:33:02:4b:74:
         c0:fb:a5:7d:6e:c5:11:9b:cd:85:96:c4:df:0b:8d:53:bd:b4:
         ec:9c:52:61:26:cd:b4:58:f3:d1:48:cc:38:de:28:2f:c3:20:
         38:b6:cc:bc:57:67:8b:50:d2:a4:8f:02:ea:c4:09:5e:aa:89:
         40:91:e3:5c:f1:5a:cd:59:25:2f:9c:6b:a0:3e:09:57:4a:40:
         0e:2a:e0:db:d3:31:f8:a8:18:99:a1:1f:12:8f:ac:62:11:7e:
         04:12:0d:86:28:68:db:eb:6d:7b:cb:5e:88:d8:f9:8e:93:99:
         db:f6:f0:e3:d6:87:ed:e0:92:93:2f:59:fb:fa:8b:24:2f:91:
         05:cc:c0:68:6d:16:80:66:df:97:91:5c:8c:df:3b:0e:af:a6:
         dd:08:07:37:c7:67:79:86:5e:bb:d3:69:cc:1d:a8:f5:01:5c:
         eb:3c:9f:10:ea:5c:cb:30:6a:37:c3:2b:24:f8:b5:d2:e5:70:
         68:77:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:40:26 2024 by rpki-client on console-ams.rpki-client.org