Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File:                     F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier:          BPItKK1UKpywtjx2P1VZzy25rzVywyOvYm9AhfQStm0=
Subject key identifier:   3E:FE:FD:57:74:2E:18:59:44:2B:37:04:7D:6B:7A:32:12:EC:0B:02
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer:       /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial:       018F215C55C96382A97FD30A9F3A47853BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number:          03FE
Signing time:             Sat 27 Apr 2024 21:00:50 +0000
Manifest this update:     Sat 27 Apr 2024 21:00:50 +0000
Manifest next update:     Sun 28 Apr 2024 21:00:50 +0000
Files and hashes:         1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: /v7yH+KkVRNVTJRJaeJZopiO/9b7HD3IshtE3U3HMPw=)
                          2: NkbufksIxVJ8T0tvcGLRlO9Uma4.roa (hash: a03cVY5rxZg+Kf1X+HQteTedl3ORnHdR7YPmnlMG7EM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 15:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:5c:55:c9:63:82:a9:7f:d3:0a:9f:3a:47:85:3b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
        Validity
            Not Before: Apr 27 21:00:50 2024 GMT
            Not After : Apr 28 21:00:50 2024 GMT
        Subject: CN=3efefd57742e1859442b37047d6b7a3212ec0b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:cf:63:84:4b:d3:e9:68:1f:95:c4:1c:fa:b6:
                    fc:6b:ff:34:ef:1b:de:f1:2f:17:b8:80:22:3f:7c:
                    9a:83:24:94:43:34:3a:39:1f:2c:16:29:91:57:4f:
                    42:24:db:55:6c:91:7a:9d:52:d8:6c:09:ab:c7:46:
                    ec:f5:92:d4:17:60:1d:b5:5e:c6:b0:88:15:a9:bb:
                    02:0c:ac:d0:51:e9:2c:26:09:24:38:5a:cd:38:16:
                    c3:1d:f5:4c:2c:02:e7:95:3c:ef:1a:f7:e2:17:d4:
                    ff:80:31:bc:2f:99:bf:d7:85:44:f7:d4:87:4c:52:
                    71:b4:62:d0:04:20:9d:eb:b0:66:20:3d:f5:2d:cc:
                    82:69:45:93:b1:54:29:8d:5b:94:09:14:d5:3b:fa:
                    47:17:7e:bf:74:84:12:6d:49:ba:f9:84:a0:a0:1f:
                    23:c5:69:a9:ce:0d:3f:c2:0f:47:d7:bc:18:07:8d:
                    2a:18:7a:6c:e2:96:cc:b9:8d:39:1e:ff:c5:eb:d8:
                    a9:d5:77:d2:e9:d0:2e:e9:a1:57:03:96:5a:d1:fe:
                    f5:7b:6e:ef:fe:f7:6e:f2:53:bb:76:41:6b:46:60:
                    84:ba:29:03:9a:35:7f:85:b7:50:5e:e8:73:03:b4:
                    56:b9:5b:4c:a4:de:1e:21:4d:f7:79:3d:d3:d0:ce:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FE:FD:57:74:2E:18:59:44:2B:37:04:7D:6B:7A:32:12:EC:0B:02
            X509v3 Authority Key Identifier:
                keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e2:d8:43:8b:81:8c:10:64:39:7e:27:5f:11:27:08:18:32:
         c7:75:87:fa:02:5a:ea:b9:01:a5:f1:a1:a2:f4:48:d6:b2:4d:
         36:bd:48:f6:87:ef:b9:ab:79:87:54:82:02:aa:e3:24:26:17:
         1d:65:b5:e7:10:a7:e8:d8:2f:29:cd:72:e2:e2:bb:39:56:36:
         93:3f:a9:c9:e1:6f:62:8c:73:66:09:ac:41:bb:e3:16:e5:59:
         86:af:f1:78:b8:65:d3:57:18:6d:83:d6:7a:ff:32:8f:b9:a6:
         d5:b1:ca:5a:d4:44:78:39:84:ed:d2:a6:fb:32:b0:58:de:cf:
         da:f4:40:6e:43:7d:31:4c:da:b7:b0:cc:f6:5b:ae:ff:95:10:
         6c:0e:94:ba:28:1e:c2:b9:b4:13:e3:53:9a:b1:ac:1e:79:fa:
         3a:5b:f9:ea:5b:43:c6:03:69:cd:c5:89:be:f2:0b:f9:ac:13:
         7b:64:e7:d1:0e:4c:6c:76:20:93:6e:91:0d:1f:d5:f2:9d:10:
         75:e7:e7:8a:78:11:f5:2c:1c:7c:7b:4c:13:31:8a:55:18:34:
         db:d8:f5:f0:61:4b:0b:ed:51:51:cc:95:d5:f4:e3:b5:1d:16:
         86:e0:e5:65:81:ac:51:43:64:1f:4c:43:36:16:12:71:f8:a2:
         a8:11:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:46:06 2024 by rpki-client on console-ams.rpki-client.org