Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File:                     _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier:          QlJ+z/eoqxMUTHC7XLF8DZ8wk7ILxuLDdb4q0GLOsC0=
Subject key identifier:   3C:A4:AF:2E:39:4B:B1:62:58:AF:2F:71:09:C3:61:78:B4:CE:98:14
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer:       /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial:       018F874A246139C267EECA06D01B8CEB6298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number:          081D
Signing time:             Fri 17 May 2024 16:02:14 +0000
Manifest this update:     Fri 17 May 2024 16:02:14 +0000
Manifest next update:     Sat 18 May 2024 16:02:14 +0000
Files and hashes:         1: DJUg3Einy9P9qXmpdOjidVP9zM4.roa (hash: dIB4sp0F9vSxjrRg8nxfUCLrXIIkqk0DhKLU2BR9cwM=)
                          2: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: xCvapaMCkQ9wtexG9OU08F1mnQN239Za9p3YYX3eF6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:24:61:39:c2:67:ee:ca:06:d0:1b:8c:eb:62:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
        Validity
            Not Before: May 17 16:02:14 2024 GMT
            Not After : May 18 16:02:14 2024 GMT
        Subject: CN=3ca4af2e394bb16258af2f7109c36178b4ce9814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:b2:bd:08:e1:a9:29:d5:f8:ed:d4:e6:63:
                    1c:00:fa:1d:e6:70:d1:54:27:c0:69:cb:06:74:87:
                    fe:f2:4c:d2:9a:3f:4c:bd:c0:90:52:54:8d:58:1c:
                    7c:7f:2a:91:95:f4:3a:88:7e:bc:8f:32:25:e5:ee:
                    f7:98:98:2b:38:11:1f:ca:4d:1f:20:d2:04:c5:2d:
                    a0:22:12:f7:9c:1b:a1:06:11:76:83:48:9a:b1:48:
                    52:6b:47:96:e7:c3:32:b4:45:18:09:51:ec:11:73:
                    b4:22:e2:b2:30:b1:6b:f7:77:ae:05:87:2f:f3:b6:
                    64:64:6a:ac:67:a0:87:71:f3:66:81:a1:41:bc:a5:
                    1f:ae:31:71:e6:41:0b:18:61:da:37:db:ae:3c:ff:
                    18:21:52:99:e1:9d:2b:69:e0:84:19:5a:5d:b9:6d:
                    be:74:ab:ad:73:61:cf:c0:82:cd:ff:a6:90:66:e6:
                    00:d8:74:01:62:c8:a1:f9:fc:b1:2d:99:5b:89:d0:
                    8a:23:22:7e:fc:86:39:e9:62:fd:3c:ff:c7:57:87:
                    a2:cc:ec:18:2d:8b:aa:4b:2c:5f:fe:24:93:a6:6b:
                    7c:60:6d:a2:2c:0e:f6:59:38:93:72:f0:ba:d8:98:
                    f2:75:dd:89:50:30:8a:f5:ee:98:69:d3:5a:7c:16:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:AF:2E:39:4B:B1:62:58:AF:2F:71:09:C3:61:78:B4:CE:98:14
            X509v3 Authority Key Identifier:
                keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:98:ee:38:73:02:41:f2:7d:6c:63:93:0f:e0:66:50:78:
         40:6d:11:95:65:81:7d:80:d0:fc:ac:23:1a:85:8b:ac:11:83:
         0c:b5:9d:c8:b4:43:82:c0:3b:5a:c1:c7:c6:2f:5e:15:b9:ae:
         0e:f3:cb:ed:1c:79:02:10:cf:02:b9:d4:ac:13:6c:00:93:8e:
         bb:c8:1d:fc:14:ac:77:af:61:df:28:c7:22:e2:20:9f:b2:0e:
         52:55:57:4a:a2:1b:dd:ca:bf:9b:f9:0b:c5:6c:c3:a1:0f:0a:
         31:fa:ad:0e:80:65:cd:cc:2a:3b:30:5b:29:28:72:e3:9d:08:
         2f:74:08:87:b6:df:01:75:f7:8f:ba:34:e2:58:32:8c:88:55:
         72:d6:35:4e:c2:e0:94:bc:29:b5:dd:20:cc:50:b0:33:b2:98:
         1d:77:9c:08:d8:1e:77:fc:70:d6:f3:28:16:30:45:7d:47:4b:
         5c:58:da:a2:c4:b8:19:a2:ed:82:af:6e:15:0d:9d:80:54:cc:
         84:9a:9c:86:f9:57:26:8d:52:bb:65:7c:77:23:27:ee:7a:0e:
         c2:f5:e7:19:18:df:37:aa:3c:58:1e:5d:d4:65:66:d9:2b:90:
         40:b5:e4:c1:4a:33:b8:7b:18:28:ca:ed:ca:72:7f:f7:aa:48:
         aa:20:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:08 2024 by rpki-client on console-fra.rpki-client.org