Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File:                     3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier:          pwlT4Crj5yKx+mxYX2RHaXX5NnwVx3j/0YfrzB+wt0k=
Subject key identifier:   15:4C:FC:65:97:5D:8B:76:DE:D5:73:72:53:2C:2C:87:FF:09:8F:54
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer:       /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial:       018F9503E0E1784A11451F58AB89641B8529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number:          1187
Signing time:             Mon 20 May 2024 08:00:10 +0000
Manifest this update:     Mon 20 May 2024 08:00:10 +0000
Manifest next update:     Tue 21 May 2024 08:00:10 +0000
Files and hashes:         1: 0u2sQt8PK_0-FMApdIithVvyQ4I.roa (hash: qne0t8Jt7NcQqUmJxqzwxwD+svtQjOqPRkh9+LLEyQc=)
                          2: 1-9AlAVqar8-vfxOY_1Coe1MNeqA.roa (hash: ktX9SoeWW470jcGmfLqRg6lOXLcjXWBcXhDBsL2aG7Q=)
                          3: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: 53wcysw1hqxhtrKb8iJ2wDpMkTmdY2h/Ar9kc2bow1k=)
                          4: 43xkqhf8qJADnvq2LhUbT8yMRdA.roa (hash: yYSmzZPQN0uGyNR+jCS734f49ZlS4CaVOwtgqUhaQPA=)
                          5: G0jKKlt1o2NxTKIXOcJrL5iPIJA.roa (hash: /JyfXQVRqjlOiPo4O61+1PtjTcBuG9XIhhxjKbHJiSY=)
                          6: K0P5wqqKWXQf4_FlQB6fUeMx0n8.roa (hash: 9ZnbQSU7oESWQV93xi0eKjC1Ihy8uql2EPb0mIzf/w4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:03:e0:e1:78:4a:11:45:1f:58:ab:89:64:1b:85:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
        Validity
            Not Before: May 20 08:00:10 2024 GMT
            Not After : May 21 08:00:10 2024 GMT
        Subject: CN=154cfc65975d8b76ded57372532c2c87ff098f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:f5:9a:a2:16:78:ee:ea:f6:d9:c6:33:6e:
                    7c:bf:f2:c6:ae:88:bf:1f:eb:50:4f:b6:40:59:31:
                    fc:a4:0e:05:20:2a:ca:ed:dc:b3:b8:62:15:6e:83:
                    d6:4b:ff:f1:d3:5c:1e:6e:9d:a6:df:e4:5b:3b:0d:
                    b2:e6:ae:01:15:28:99:73:a0:cd:23:bb:4e:6d:d7:
                    fc:38:c2:0c:0c:99:eb:3e:61:18:91:c6:96:42:07:
                    9c:0d:34:90:d3:b8:b8:ea:e4:99:ae:44:44:68:05:
                    4a:5f:d5:cc:5e:73:09:60:53:f2:30:04:7b:a3:7f:
                    a8:1c:ab:64:bf:c0:51:a6:87:b4:e2:d2:be:af:61:
                    0d:60:2c:c8:53:95:a6:3d:f7:4b:16:a7:84:18:54:
                    08:3f:2c:5c:ed:f8:20:1d:ec:2d:0e:62:4f:f6:30:
                    e2:f0:17:d8:27:67:07:6c:f8:ac:fc:b2:83:bd:c1:
                    50:af:70:ec:b0:b7:6a:6e:7f:4d:7b:0b:d1:b0:66:
                    95:25:68:bc:33:5f:7f:26:37:80:dc:25:8d:56:90:
                    bd:c5:29:43:d5:1c:f8:1b:32:61:3d:77:e5:af:2d:
                    33:8a:78:4c:8b:ca:5d:50:df:68:19:4c:3c:91:bc:
                    c3:72:49:ae:04:96:fb:17:2e:a6:16:45:21:2f:79:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:FC:65:97:5D:8B:76:DE:D5:73:72:53:2C:2C:87:FF:09:8F:54
            X509v3 Authority Key Identifier:
                keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:bf:32:e5:08:a6:32:00:38:82:e1:51:d8:16:2c:fe:a0:
         85:6f:a4:71:8a:dd:28:4a:b2:5c:ed:24:e8:23:77:17:bb:df:
         88:e4:09:8d:33:12:02:22:8c:07:a1:4d:63:8e:30:db:c2:59:
         47:3c:52:7a:38:57:4e:c6:60:3c:c8:d1:3e:a9:4a:e3:a9:79:
         6a:78:5a:11:6b:96:a3:69:d2:35:14:1d:9d:6d:de:c1:64:50:
         78:dc:75:21:56:5a:d0:21:f2:d4:dd:41:a3:8b:dc:7f:1c:df:
         15:9f:47:8d:76:d4:e5:cf:f3:1b:75:e3:b3:19:b8:0d:7c:c8:
         89:2d:bf:7a:46:78:2b:f8:9c:70:05:de:ce:88:6c:f4:49:7c:
         ef:bd:04:11:e5:24:be:1a:8b:9a:74:5f:25:9b:dd:af:82:81:
         76:d8:fb:3c:66:37:87:2d:56:71:7d:8e:b1:5e:bd:69:7b:b5:
         6d:1c:21:18:97:5b:b5:89:cf:a6:08:e6:b1:4a:e5:48:1e:68:
         e1:16:40:5f:c4:a9:db:0b:5d:14:45:d4:75:af:39:df:11:49:
         87:7a:3c:2a:bf:db:71:ac:2c:02:6f:2e:8d:02:cb:34:28:0a:
         b5:8d:0e:0a:ea:15:a9:f2:90:af:e7:75:68:87:b1:6f:64:a4:
         14:bb:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:37:17 2024 by rpki-client on console-fra.rpki-client.org