Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File:                     _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier:          afcOQ4DFz3s3l2Sn0t/iyw3fgOjtvXluIOPLNR9N+FU=
Subject key identifier:   61:A3:B5:0E:42:53:32:E9:98:FB:CC:A1:8A:2F:51:41:17:D8:D3:1B
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer:       /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial:       018F874B27E455C2BB2D97948AAE0488C7E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:03:20 +0000
Manifest this update:     Fri 17 May 2024 16:03:20 +0000
Manifest next update:     Sat 18 May 2024 16:03:20 +0000
Files and hashes:         1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: Mn2TivC0R1FS5OYl0P3sPMX1EzYd7vp4xX9reiLqL+w=)
                          2: sJQhejzANXmhjfA0SwICil3Vbvw.roa (hash: d9LT9p9rNWyYY2+R6D4n46INz03lFIXneCFJpTKkKbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:27:e4:55:c2:bb:2d:97:94:8a:ae:04:88:c7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
        Validity
            Not Before: May 17 16:03:20 2024 GMT
            Not After : May 18 16:03:20 2024 GMT
        Subject: CN=61a3b50e425332e998fbcca18a2f514117d8d31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:74:a6:73:58:bc:a7:c2:30:f8:26:3f:a9:
                    8b:0e:96:3b:60:4d:45:f5:63:ac:46:ff:20:3c:2e:
                    a3:b3:95:00:bc:17:70:19:7b:13:9a:76:22:d0:7c:
                    2f:cd:33:6c:cf:2a:37:61:96:1f:ce:9e:be:b4:19:
                    d0:a2:0e:f5:ee:94:48:3b:ea:bd:42:d0:bd:f1:a7:
                    b3:9b:69:b0:b6:9f:fc:ac:68:61:cf:42:49:31:a6:
                    82:7a:b3:37:f6:bb:17:ab:4a:a5:ad:2a:1d:22:6c:
                    54:27:7f:21:10:5e:a3:63:1c:1a:6a:22:2a:6d:37:
                    6e:51:b8:18:4b:a9:e2:30:46:9e:70:eb:31:87:11:
                    16:01:c1:d5:d5:e0:7c:9f:74:ee:ff:08:70:a2:4d:
                    39:e8:16:6e:6c:4f:29:54:74:63:19:cf:32:14:ad:
                    6a:de:f3:d7:00:c3:a4:6a:8a:b8:0c:5e:47:8d:76:
                    bc:c5:a5:d7:fd:05:2a:40:43:7d:8a:4c:12:66:4d:
                    fa:93:9a:0e:7a:45:69:a6:bf:f7:68:e0:af:84:3b:
                    d1:05:65:a3:4a:51:76:32:46:93:5e:df:08:a6:c1:
                    0c:1c:95:53:9e:5a:05:76:9c:46:c3:f7:89:fd:3a:
                    1a:7b:41:7a:6e:03:74:e3:0d:8a:d0:14:6b:e7:76:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:B5:0E:42:53:32:E9:98:FB:CC:A1:8A:2F:51:41:17:D8:D3:1B
            X509v3 Authority Key Identifier:
                keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:f9:eb:8f:b8:f2:ae:c5:d8:e2:c0:d5:3c:55:d3:aa:1d:
         72:ac:11:a6:50:b2:d9:c2:61:10:a3:14:05:35:ab:80:a7:78:
         ee:2d:32:82:b2:7a:6f:c6:ac:ba:28:04:0a:d0:ff:d7:9d:03:
         c2:15:f3:17:19:1e:30:da:fe:f2:ad:c7:74:fc:09:ee:3a:62:
         73:e6:2c:b9:6b:ae:3d:3e:27:49:b4:ca:ca:fb:c2:cb:25:74:
         f6:23:be:ab:cc:ca:d4:68:9c:d2:60:42:47:c2:41:d5:0a:1d:
         66:9e:3f:2a:79:07:b6:dd:56:27:af:d1:ea:22:c2:ae:8c:67:
         eb:14:8e:35:b3:a1:f3:de:9d:2e:e9:83:a3:34:b3:bc:91:ab:
         78:23:df:f2:87:e8:c1:f0:fc:64:ea:94:89:c7:96:84:75:20:
         c0:e6:70:62:a7:53:db:58:53:5e:1d:bf:4f:55:44:15:d4:6a:
         95:ea:71:6e:f2:38:97:4e:93:93:fd:4b:a1:fb:e8:af:a7:19:
         37:91:dd:67:49:38:0d:61:de:00:96:3d:d7:e8:0a:c8:01:16:
         48:70:07:c9:48:26:b3:47:89:9d:ed:04:82:03:0e:79:c2:18:
         00:d9:8b:8a:5a:e0:57:d5:f9:97:a5:4d:55:11:0d:1f:f6:18:
         cf:7f:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:51:33 2024 by rpki-client on console-ams.rpki-client.org