Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File:                     3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier:          6faIMkl1Phif/5HPZREqjRQfBphMWLujoFP9BM2z4mI=
Subject key identifier:   27:67:B2:A4:43:CA:FC:07:91:59:74:6D:F8:A6:E4:75:CA:B1:84:74
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer:       /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial:       018F885B4D47C87D30158A85B863D1A85BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number:          0C11
Signing time:             Fri 17 May 2024 21:00:35 +0000
Manifest this update:     Fri 17 May 2024 21:00:35 +0000
Manifest next update:     Sat 18 May 2024 21:00:35 +0000
Files and hashes:         1: 3FPAYWXx1x-m_qKQJyb1I1OxV2A.roa (hash: bJbnsUbFRgJxDXmo7l12k8k1D+ks0bDIFTzJ2GzmqPI=)
                          2: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: NW5chCzWFkdvLu9jc3fpkUsS8UoFPf7e1P6W2iaTUuY=)
                          3: A88Ne_CpJQYTUr5QITlEtAL0D7I.roa (hash: JD1q3LQyqBBdr5HJo8nenV2rTP8RustPJRGbkA3qqDo=)
                          4: Rg2Lq-JI-C2Am1Eh4MbrxNISatk.roa (hash: UpvTV8QmBM8ZkpjEDMWB4C9Sum48hWhx/l80v4sTp0o=)
                          5: TS1plHbkMHXkR3TBGdCFY0Zr1JE.roa (hash: 4Sjc5/CJdr7+gb9rw8zPPE9K8Qe6AAuo9nTvaiZ+KZE=)
                          6: j30UoMDciFVRU4gyw3GZ8mVK27U.roa (hash: /6P33uwqZ5HWHJSsGgal3RXON+J2HbHy86jgRo4mKqg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:4d:47:c8:7d:30:15:8a:85:b8:63:d1:a8:5b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
        Validity
            Not Before: May 17 21:00:35 2024 GMT
            Not After : May 18 21:00:35 2024 GMT
        Subject: CN=2767b2a443cafc079159746df8a6e475cab18474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:b6:82:31:ad:b0:85:f7:94:73:f4:09:92:
                    df:4b:4e:60:27:f4:97:a6:13:f8:11:de:a1:c2:5c:
                    d2:f2:f1:a3:80:a7:fb:22:7b:6c:fb:08:84:49:ac:
                    ff:c4:bf:9e:00:02:84:50:91:6c:2c:8b:df:cb:5c:
                    30:72:2a:e3:6e:8f:ea:07:ad:ea:e1:b3:9b:27:2a:
                    32:90:a7:87:01:7c:12:10:f5:36:83:4b:4d:76:c9:
                    37:4f:a7:55:7c:61:38:5b:4e:35:b7:a5:5a:4d:c6:
                    b2:c7:65:c9:87:4b:8e:e1:16:00:3b:ed:95:7d:da:
                    a0:be:00:02:01:be:38:98:d3:8c:80:f2:fb:36:36:
                    95:9f:9d:c3:84:53:94:0e:3f:a1:55:62:cb:17:51:
                    70:ad:d3:c4:7e:61:aa:33:d5:c3:f4:3e:1b:b5:18:
                    7b:b6:02:49:84:c8:ec:2e:b5:99:f0:02:b1:60:cc:
                    0d:06:13:91:06:56:3a:52:72:78:1d:ea:1e:07:e8:
                    a3:53:ec:22:fc:37:0b:1b:f9:54:ac:1d:76:d4:06:
                    68:f1:72:ae:30:7b:e8:d2:5c:21:4e:b8:9f:7e:95:
                    2c:a6:a5:86:46:d3:85:75:36:04:9f:69:91:62:5c:
                    b6:98:8c:ca:05:cb:63:cb:3f:7e:ef:44:f1:8e:3d:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:67:B2:A4:43:CA:FC:07:91:59:74:6D:F8:A6:E4:75:CA:B1:84:74
            X509v3 Authority Key Identifier:
                keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:86:a6:33:92:06:9a:61:ef:e6:9a:f1:36:a1:10:1d:e5:
         a2:f1:44:87:dc:b5:67:90:9b:15:4b:4a:0b:75:2e:d1:b1:e0:
         b0:99:65:65:d7:97:b8:e8:9f:f4:83:6b:c0:6c:ac:a3:ce:d5:
         ee:ce:81:9e:16:ef:26:80:fc:aa:53:17:64:ba:37:a0:31:ba:
         20:45:51:5a:e5:b3:b1:8f:b5:0d:0c:0d:3f:0c:3e:28:58:57:
         26:c3:a2:26:56:c5:93:5d:04:ed:4d:ed:f4:44:73:af:aa:64:
         d7:6f:ef:09:83:e6:73:0d:e3:20:71:3d:fe:98:6b:f2:cd:33:
         8f:23:ba:b1:62:ab:ac:e9:02:aa:b3:3e:0b:f0:57:4b:ef:85:
         2d:39:fe:ab:02:46:08:f4:68:09:33:1d:96:46:41:8f:a8:53:
         15:bd:fb:b3:7f:f5:e0:ef:5b:09:2d:93:d5:1c:a5:70:8e:00:
         00:7c:b9:18:e3:e8:31:46:aa:ed:77:b0:38:82:20:40:61:2d:
         24:c0:a6:64:a8:21:20:96:90:fc:1b:54:93:61:dc:54:07:55:
         b4:2b:d3:bd:a6:32:83:14:4b:14:83:12:54:53:3d:16:d3:00:
         49:9d:7b:c3:1c:0c:0c:88:e9:e7:31:d1:54:c8:a7:79:92:42:
         42:79:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:55 2024 by rpki-client on console-fra.rpki-client.org