Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
File:                     3IiUXIhnpyYro3mzpphACRpPGQQ.mft (raw, json)
Hash identifier:          vZ0kw3ocjz+F/Aiixyx+cn63IHIqIQ+mk7VQC/TnWWw=
Subject key identifier:   E3:48:8E:7F:3D:49:8C:44:37:F0:E5:D3:9B:FB:8D:71:37:DA:75:D1
Authority key identifier: DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
Certificate issuer:       /CN=dc88945c8867a7262ba379b3a69840091a4f1904
Certificate serial:       018F3AAE922F9042207400FD260B6055A323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
Manifest number:          0522
Signing time:             Thu 02 May 2024 19:01:10 +0000
Manifest this update:     Thu 02 May 2024 19:01:10 +0000
Manifest next update:     Fri 03 May 2024 19:01:10 +0000
Files and hashes:         1: 3IiUXIhnpyYro3mzpphACRpPGQQ.crl (hash: w3fmTcrJTsm4Efpa9o9Nyn4pWJ0rcVCHZ8GsYATBpaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:92:2f:90:42:20:74:00:fd:26:0b:60:55:a3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc88945c8867a7262ba379b3a69840091a4f1904
        Validity
            Not Before: May  2 19:01:10 2024 GMT
            Not After : May  3 19:01:10 2024 GMT
        Subject: CN=e3488e7f3d498c4437f0e5d39bfb8d7137da75d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:de:37:83:73:6d:27:a5:b2:3e:4a:41:96:
                    51:21:91:da:42:38:c5:5b:c5:a4:f3:43:bc:ba:f9:
                    84:11:da:ce:91:a8:23:f7:49:4e:b6:18:f5:95:87:
                    8e:3f:0b:63:54:f7:3c:60:0b:c6:8f:57:f2:9d:ba:
                    8b:09:c6:f7:32:5d:b9:39:a9:cb:cf:ab:f2:50:5b:
                    13:6a:1b:67:4f:ec:54:e7:9f:a5:1a:c2:22:c8:4d:
                    a4:cf:8d:c2:84:a0:83:dc:ee:c5:5d:b8:8b:4d:9f:
                    87:ef:31:44:6a:d6:73:88:60:5a:48:2c:8e:b5:0b:
                    26:a3:6b:79:05:a4:d4:29:e9:96:8b:69:89:e9:1a:
                    88:f9:61:fa:bd:d4:12:71:0c:1a:45:c4:86:8b:d0:
                    fd:99:3c:f0:ea:a1:63:01:59:e2:92:22:9f:5c:bb:
                    f5:18:bc:c8:c8:18:71:b8:a5:8a:7a:0a:5c:bb:05:
                    73:e0:12:25:4e:11:94:e4:b7:ac:66:5d:50:6a:86:
                    cf:dd:94:80:a7:c2:10:5b:55:be:f8:fa:64:1e:0a:
                    9e:e2:6a:e9:d6:fe:84:1c:70:92:1f:f7:86:de:87:
                    9f:d6:62:77:51:a2:d6:21:70:17:27:5a:3d:f6:4c:
                    fc:f7:dc:16:25:d6:3b:1d:07:58:a8:e8:34:70:aa:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:48:8E:7F:3D:49:8C:44:37:F0:E5:D3:9B:FB:8D:71:37:DA:75:D1
            X509v3 Authority Key Identifier:
                keyid:DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:34:8f:58:9f:26:25:c4:1d:b2:6d:07:77:e5:fd:fe:e6:e9:
         82:f8:ae:0a:b2:94:5f:cd:5c:af:0c:7e:0d:5c:ad:05:16:b5:
         59:f5:77:ff:d4:18:c9:71:df:65:b2:f9:e0:b5:7d:74:c3:87:
         72:13:12:1c:19:90:2a:b5:2d:8f:16:92:17:d3:84:ba:08:5a:
         5d:fb:78:24:e2:4a:a4:b0:c0:b1:f5:3e:c9:48:4c:ed:53:00:
         6f:49:4c:5c:0d:22:f0:bb:55:8f:2c:2c:25:1e:65:ac:86:6a:
         2a:9c:28:25:7e:a8:3c:58:80:2d:51:01:5c:6c:b0:ac:87:a1:
         98:5e:d8:0e:23:7d:96:3e:1d:6b:58:b6:05:fa:0a:af:0c:3c:
         ab:b0:2c:7b:ba:ee:27:68:7d:a8:d1:05:f2:5c:aa:9f:24:c9:
         da:a7:a1:a9:6c:86:48:f0:68:79:8e:c1:5f:5d:47:84:50:ec:
         01:eb:ca:5d:68:7d:29:5f:94:37:88:be:77:b0:d9:92:b3:d2:
         f1:75:ef:da:d8:62:a2:a5:8b:b4:c0:db:fb:34:be:03:0e:db:
         33:5f:8a:10:45:be:f8:65:76:2f:f7:1e:ec:8f:bd:91:b7:78:
         a8:69:c9:41:ca:93:f0:0c:a4:6a:96:ed:85:f3:d5:12:42:f0:
         07:78:fc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:14:59 2024 by rpki-client on console-ams.rpki-client.org