Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File:                     3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier:          3/OjXaINYvl3lKpHAnsgtQs9VhQZM+N1BrYk0PD16Oo=
Subject key identifier:   4F:E9:74:35:99:D6:9E:36:25:AA:E1:F2:DF:04:1E:9D:FD:ED:6E:60
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer:       /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial:       018F4A5903D50A46AFFEADA949C2030B1F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number:          0B69
Signing time:             Sun 05 May 2024 20:01:38 +0000
Manifest this update:     Sun 05 May 2024 20:01:38 +0000
Manifest next update:     Mon 06 May 2024 20:01:38 +0000
Files and hashes:         1: 1-9zyFv8qasxRvWOi3iN_xdOc1-E.roa (hash: AoE2UPfKSwf8hVVVUsjHTHvbw+E6lpqFMDlBrnOgxbM=)
                          2: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: Lmwvo6qEmJpXTok8L8N1rU3TQrZHI5Rf5wGbvv2Twek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:59:03:d5:0a:46:af:fe:ad:a9:49:c2:03:0b:1f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
        Validity
            Not Before: May  5 20:01:38 2024 GMT
            Not After : May  6 20:01:38 2024 GMT
        Subject: CN=4fe9743599d69e3625aae1f2df041e9dfded6e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:13:68:9f:cf:9e:db:b0:22:51:93:a0:18:
                    c8:f8:cb:92:d8:b8:64:d3:15:00:82:de:40:3f:79:
                    b2:d1:a6:05:3d:d3:e8:ac:db:3a:37:40:ac:5b:06:
                    4a:e7:99:dc:96:19:47:ad:0e:bc:1a:c6:7a:07:50:
                    02:be:92:53:ef:d2:53:59:c5:fe:f1:06:08:c2:99:
                    dd:32:3d:2f:48:8b:03:a6:58:7f:10:08:d2:83:09:
                    cc:39:04:dc:ad:bc:51:3e:70:eb:ec:32:b3:2f:e1:
                    7a:61:0b:07:3b:4f:b2:ca:e4:b3:97:7a:92:13:bf:
                    91:6b:74:68:41:fe:d8:f7:4d:da:14:5d:a7:5f:39:
                    56:3f:4c:b8:68:46:63:b6:58:d6:fe:dc:37:98:71:
                    39:4d:8e:54:f0:23:32:ab:b8:ed:cd:72:80:4c:d8:
                    a7:a7:79:8f:c6:d9:29:5d:b3:46:e5:05:f5:e4:c5:
                    9a:14:62:33:c2:b0:c4:7c:53:41:1d:63:ab:8d:91:
                    12:94:49:67:6f:df:81:82:71:6f:ed:16:5d:5c:87:
                    ff:03:9e:f7:31:c5:06:ce:7e:cc:0c:73:5d:db:cc:
                    6f:bc:ca:7b:e5:be:c3:d6:de:a0:86:70:95:5e:7d:
                    17:7b:8c:0c:af:c9:b5:38:75:9e:ec:3b:55:b6:f4:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E9:74:35:99:D6:9E:36:25:AA:E1:F2:DF:04:1E:9D:FD:ED:6E:60
            X509v3 Authority Key Identifier:
                keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:ed:96:63:ce:32:bf:01:a5:06:67:c3:c7:54:ab:fc:b7:
         b1:c1:c0:14:98:73:0a:be:fd:98:df:84:ce:ff:d9:36:22:34:
         1a:d8:31:9d:48:d9:14:6c:50:f0:e3:72:06:ee:7b:97:2a:58:
         05:74:61:11:64:de:63:3b:d8:c9:43:00:bb:64:42:b5:4e:14:
         fc:d1:fc:c3:ff:47:de:7d:52:ff:31:37:18:fb:77:0f:8e:11:
         5b:8c:10:f4:81:ec:93:9d:69:fa:c4:82:8d:0e:2a:39:c3:8d:
         b6:7a:05:01:ad:68:f4:98:3b:f9:b7:35:a0:f0:b3:88:89:86:
         ad:3b:e5:00:ca:d0:22:89:5d:36:40:d2:aa:5b:ec:9b:00:7b:
         17:7a:7b:c4:9d:ae:c6:87:9c:1b:e4:93:6c:20:ac:79:c5:de:
         6d:b5:a8:60:87:52:9a:f6:48:84:47:74:d2:3e:38:b9:8a:06:
         e8:15:a9:8a:42:9e:30:d0:09:40:d1:48:bb:b9:af:e6:67:c8:
         d4:30:e6:dc:98:c8:d4:72:bb:93:bb:70:22:67:2f:b6:f6:f8:
         d5:cf:15:43:1d:e4:01:a8:05:54:50:04:4c:4b:7f:d9:ee:c6:
         4b:f3:5b:62:32:22:f7:c4:04:93:d3:dd:70:0f:41:b6:b4:3d:
         c0:b7:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:23:39 2024 by rpki-client on console-ams.rpki-client.org