Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/49TQirCJLapc3wiMU1rMqwlC-OM.mft
File:                     49TQirCJLapc3wiMU1rMqwlC-OM.mft (raw, json)
Hash identifier:          SZklIKAIla4gJKIwFdsvJTLqyCiZWS1yc34OoZL3Sls=
Subject key identifier:   03:ED:05:63:23:DE:1A:C8:23:F1:FA:32:CF:13:40:2D:A8:91:E6:9B
Authority key identifier: E3:D4:D0:8A:B0:89:2D:AA:5C:DF:08:8C:53:5A:CC:AB:09:42:F8:E3
Certificate issuer:       /CN=e3d4d08ab0892daa5cdf088c535accab0942f8e3
Certificate serial:       018F3174434CB0ED00E6DFE691BD58F08CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49TQirCJLapc3wiMU1rMqwlC-OM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/49TQirCJLapc3wiMU1rMqwlC-OM.mft
Manifest number:          03C4
Signing time:             Wed 01 May 2024 00:00:54 +0000
Manifest this update:     Wed 01 May 2024 00:00:54 +0000
Manifest next update:     Thu 02 May 2024 00:00:54 +0000
Files and hashes:         1: 49TQirCJLapc3wiMU1rMqwlC-OM.crl (hash: P5oW3Sl7RCfdA9sBsC9ZnOinXzgtIOwPYL7jucLQESQ=)
                          2: nQlVzrKAzMFSY-038uflKgLTR1E.roa (hash: 8ERZnPjZ9IG0U36hle/qM/0+NKirciVQGQtpRCdsohw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/49TQirCJLapc3wiMU1rMqwlC-OM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/49TQirCJLapc3wiMU1rMqwlC-OM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49TQirCJLapc3wiMU1rMqwlC-OM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:31:74:43:4c:b0:ed:00:e6:df:e6:91:bd:58:f0:8c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d4d08ab0892daa5cdf088c535accab0942f8e3
        Validity
            Not Before: May  1 00:00:54 2024 GMT
            Not After : May  2 00:00:54 2024 GMT
        Subject: CN=03ed056323de1ac823f1fa32cf13402da891e69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:23:fc:1c:c4:1c:09:c7:60:88:52:91:9e:
                    c2:4a:be:83:21:55:99:b4:0d:ac:64:d5:7b:ee:e4:
                    03:41:25:b5:87:1f:cc:14:8c:79:1c:f0:95:de:3c:
                    b2:76:b3:47:05:e7:13:cf:19:b2:64:31:1e:c6:d5:
                    cb:5a:6f:25:8e:0e:3d:3d:d2:2a:17:2b:67:28:78:
                    5d:1a:11:79:24:39:e2:b0:ab:f5:d0:52:b7:ec:79:
                    fa:fb:23:7b:27:2a:94:26:c1:76:de:64:b4:8d:90:
                    fe:d1:2d:9f:60:18:fb:cd:89:c9:fe:7d:35:16:78:
                    1b:34:a2:30:62:56:f0:8e:90:54:c2:d4:de:e7:32:
                    89:f4:f2:b7:d3:b0:59:06:e1:51:c9:4b:97:7b:f2:
                    cf:21:8c:8f:59:9f:c1:ed:e7:97:54:71:83:53:34:
                    ad:44:0e:a5:c7:30:5a:d5:16:33:4a:a5:41:22:b0:
                    52:7f:1c:7e:7a:70:2e:8b:0f:7e:4b:82:c7:d1:f9:
                    04:f2:15:d7:d7:29:47:7b:ee:21:1f:a1:bf:03:a6:
                    b5:95:26:0f:59:00:e9:80:fd:12:b4:ba:3c:5d:14:
                    44:60:26:70:b5:de:3d:3c:30:68:bd:00:29:0a:d4:
                    27:cb:c9:3c:6b:6c:98:33:3b:4b:eb:5c:3b:82:01:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:ED:05:63:23:DE:1A:C8:23:F1:FA:32:CF:13:40:2D:A8:91:E6:9B
            X509v3 Authority Key Identifier:
                keyid:E3:D4:D0:8A:B0:89:2D:AA:5C:DF:08:8C:53:5A:CC:AB:09:42:F8:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49TQirCJLapc3wiMU1rMqwlC-OM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/49TQirCJLapc3wiMU1rMqwlC-OM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/49TQirCJLapc3wiMU1rMqwlC-OM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:22:60:1f:e3:00:fe:a0:fa:9f:f5:07:40:f4:a7:5e:c3:21:
         2e:4c:07:df:68:3c:90:b4:54:d5:89:60:5f:e1:0e:ae:ab:df:
         99:51:4b:70:34:8d:4f:43:09:ed:4f:30:dd:ce:6a:26:f6:61:
         1f:79:18:81:0d:ff:22:ba:c8:ba:a7:2e:31:f1:99:47:32:14:
         33:58:e3:25:d5:d7:46:7f:09:08:7f:e1:b9:f3:9c:d7:9b:c8:
         0e:24:b5:a6:40:b1:2b:da:ce:1c:d5:60:4e:d9:d0:c2:0d:a8:
         d8:bc:49:13:50:ce:22:3b:b5:bb:ce:23:ea:ac:00:89:eb:32:
         e9:18:d0:47:d4:8a:40:31:ad:9e:66:72:82:03:f7:e8:01:bf:
         61:50:24:0d:40:68:92:39:48:96:82:7d:b1:b5:1b:7b:2c:9b:
         99:f1:16:16:9d:74:fa:4f:16:41:e6:a5:58:b6:1f:e3:58:c1:
         24:2b:2f:de:97:cd:b7:1f:ff:ff:01:7b:de:f0:91:87:b8:83:
         44:68:14:6c:57:e7:78:52:cb:09:ba:cf:16:bc:e5:2d:b1:c1:
         61:0c:cf:f5:a2:de:bf:ef:43:94:7e:7c:47:b4:ae:96:e6:f1:
         de:b5:ad:e4:f2:c1:85:e6:66:31:0d:65:cc:2e:4c:a3:ef:8b:
         b8:52:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:59:49 2024 by rpki-client on console-ams.rpki-client.org