Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          3lS/cE3kekEz/9SNl3gfjmV57GadkabsGeliX8AM1nw=
Subject key identifier:   64:DB:0C:38:7D:FF:53:DD:97:0F:77:49:3B:67:7B:72:B1:77:17:CC
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       018F2381F7DAA5A2B0835B42C4BAE46B165F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          04E9
Signing time:             Sun 28 Apr 2024 07:01:11 +0000
Manifest this update:     Sun 28 Apr 2024 07:01:11 +0000
Manifest next update:     Mon 29 Apr 2024 07:01:11 +0000
Files and hashes:         1: 7L55_N-GGVHljL-QAz3N994ge3U.roa (hash: 8vJS19eA7pJ+5JovWbPE5l2PcUsYpz2/bztFKRobunE=)
                          2: 8dRFBxE7q7wYj5Gn_IZMeSxa7Q0.roa (hash: 0iyoldQs0UzbfYTDSjyE/7C446a3IWX9kaNVDAWoKp0=)
                          3: A-3Gf3UgxQIZ6Ky-Cazaqu17xIk.roa (hash: dgrM7o+8O9wsrCrNpqji+jQERTikBcq3GEqjrSbA/CI=)
                          4: CIRls3stTp9BOjHce35suioz25Y.crl (hash: ZyNdIUiz7IsNjgG/jDsBufWiHCCSFi5TTB0zyf3n/DE=)
                          5: EhgLyU8HvtDYz7dSasUYheXrZLM.roa (hash: M1xbdPb+iwx/tX5zOJU79vyx7DCdsgOEGBkZvr6JmwQ=)
                          6: HRNCM29Lfd6GUrjLWhfVEZK8Pk0.roa (hash: z48BydbyCcnp1XJbWLcmx5rliPkrqbTUFpr/Zni0HCc=)
                          7: IyOQ3_9kRcCaKPJsq4axOWy-HYs.roa (hash: S+LuIEKMRU2TRdcgebmfy4EZ9tZD9n61WhgTtODu9to=)
                          8: WfRMqwEzwStURAh01roSLkYv1U0.roa (hash: HNa0AY81x/+AccOuLe0azU0S7PEQCkT6eu3lt3/eu7c=)
                          9: axTIK1Cd6xNvIGQcZlJRMER2QFo.roa (hash: qVieod/xg66m+9lc+me65CfGEYNPFENdxnCjhg2A7bM=)
                          10: bPGVmwC5wVAJLJY_VqBl6LkbGl4.roa (hash: bQFYpZP0FaCpt2r9gHDSzWGF2kjGlh8i3ok1643W9vI=)
                          11: d1ogW3WxN0Vy_VZlHCgGlOrnezc.roa (hash: 6ruWmO6+DlJ4vUG/gcPWSMLemL9HmLjlRTKaI8x73SI=)
                          12: drL0dFt8ESK0rijIgcxamuW08M0.roa (hash: scNmkIiGui5gfwb9cU1BGgdxIhKnyOvTw0JqckMZuvQ=)
                          13: i8NbONvs5xhBWus_MB-NQZP3my8.roa (hash: EsQoRAscEkFhvzOIZAFyfg8yYTrMYfGLEKEj6fCJ+d0=)
                          14: i_Rznfzs9-GsDjO5dtgeBxIhJSU.roa (hash: 3xHSQoVMkR40bZSIZByp+NAJJPcNDRqbz8myR6qYVuQ=)
                          15: kCFK5KVTZ-oBpbpUm6gWRufqphY.roa (hash: auwcGtcgRGQzg15U/5lm2/LPsOIbOGKKP/uRfEXPYiA=)
                          16: kmOv4T4WeoK9PsD5P0rltL5I4bk.roa (hash: SX5q30B33T7jU2L/WOp9elLAJmE5jcE7bhg5rQB8LRg=)
                          17: liYYEUDeEK4mb8kNgSbWRHrhdC8.roa (hash: x+7bDIe8St1YG62wyUZpmycI67GTwgn7MhqsPRwNLlA=)
                          18: nCze57cjIRCMGshiGLAyEq3Ponw.roa (hash: LkCADmNPCgQVqXTv0TQ5t5d3IzyZ0ofPj+bUmbp5Pl8=)
                          19: pbRnEKy35OIur1byAlEZ7NczUH8.roa (hash: /kzRKlyUb2SUK4mIXbDuF8XZ3zCvXcX6tO5XLbCzoBw=)
                          20: q9XAMvZePT2XanZ5tFs3Z8C3BA0.roa (hash: JXjKyk067tuPpcj75S7FbQk7GIqT7ZRj0BuyYcKd28A=)
                          21: s-sL5wT32taHauUGptZDQ8bJgP4.roa (hash: 3roMJQDeGMcuay4MzIwtKwbCGU0o/jeBJESEuIo5kS8=)
                          22: xgAjK3UpVlbWMJ5lH01QCmJPhRY.roa (hash: sdbZUGo1C9uD51rJjlYvxRl1v4mVkvQW97kGxU3scoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:81:f7:da:a5:a2:b0:83:5b:42:c4:ba:e4:6b:16:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Apr 28 07:01:11 2024 GMT
            Not After : Apr 29 07:01:11 2024 GMT
        Subject: CN=64db0c387dff53dd970f77493b677b72b17717cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:16:c9:f5:39:30:e0:dd:c2:88:13:42:eb:
                    99:89:c5:57:34:47:a1:f1:fa:af:ac:ec:2b:7f:1f:
                    e5:24:31:b6:88:f3:43:95:36:ec:c4:26:38:51:3d:
                    ac:b3:26:a4:00:b4:12:35:4e:a6:d6:b3:4d:71:c5:
                    b7:96:00:5f:f2:38:3a:b3:bc:4d:b0:59:5e:96:55:
                    5e:8d:41:15:a7:d0:a3:33:de:24:4c:a0:47:b5:35:
                    67:61:4b:46:df:bc:c6:4b:b0:f7:dc:1f:b0:bf:f1:
                    fc:93:cb:87:e5:88:56:09:ed:ea:8b:85:ca:88:11:
                    f7:a2:f7:f6:d9:71:86:ec:f2:52:56:a1:99:b4:7e:
                    dd:fb:91:64:7e:89:14:42:ab:92:eb:23:3a:f3:44:
                    0f:18:f0:2d:1e:0e:1a:a8:0f:ab:a2:a7:cf:57:3c:
                    ea:7a:c4:d4:94:35:31:6a:95:8b:f7:9e:b3:17:b5:
                    01:fc:2c:34:e9:bf:f1:f4:b5:c5:f4:52:89:56:71:
                    3e:e5:85:ed:03:6b:48:07:11:d0:f1:e4:c1:73:de:
                    9c:46:17:e6:59:5d:98:32:87:05:20:f0:9f:89:3f:
                    63:1c:28:c9:1b:64:db:33:eb:e5:3f:4d:70:5d:90:
                    bd:08:a2:15:26:a0:21:58:3f:f3:52:ad:8a:75:80:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DB:0C:38:7D:FF:53:DD:97:0F:77:49:3B:67:7B:72:B1:77:17:CC
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:09:f3:79:6d:24:3f:7b:bf:bd:2e:ca:07:a6:be:c4:b9:07:
         d7:da:33:2e:f3:31:cb:29:09:ca:21:e6:f7:f3:ad:c6:ad:c6:
         65:32:bb:97:69:61:70:1c:7e:65:a2:fa:5f:ce:3d:34:76:46:
         e3:d4:76:6d:8a:40:10:05:26:77:cd:05:4d:59:1b:5b:a8:bd:
         90:86:be:28:b6:38:a2:c6:bc:c7:c2:79:99:1a:90:46:5c:80:
         5d:ab:78:25:7e:41:a2:bc:a1:22:1c:23:50:19:ba:2c:51:36:
         61:e8:84:c0:7d:89:7c:43:35:61:74:4d:eb:09:65:e2:a9:47:
         62:40:33:06:ed:b5:12:c1:20:7f:40:d2:54:2a:3f:2c:c8:d8:
         ad:90:f9:4b:37:45:e0:ba:cf:d5:ab:78:1d:44:12:75:72:9b:
         02:4c:21:dc:18:4d:b7:14:21:f3:6c:65:e8:17:f4:8e:dd:94:
         be:47:8f:71:9a:09:34:ae:5a:bc:60:e5:60:51:87:dd:13:87:
         93:2d:db:46:dc:85:d5:2e:41:b9:56:51:b1:dd:f9:b3:d6:54:
         94:01:77:00:4e:ef:39:6c:4e:e7:c1:28:1f:64:c1:41:98:cc:
         a4:5c:ed:6a:97:f1:dd:68:48:93:00:43:63:b0:5e:d4:58:cd:
         33:83:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:36:08 2024 by rpki-client on console-fra.rpki-client.org