Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File:                     3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier:          qz+6kLx/2G1HDX6+nH2sgQVJK46vxBnBQoknG0UvNx4=
Subject key identifier:   2C:8F:3E:F0:E8:AE:CD:96:0E:AC:84:25:1D:3D:A5:D0:00:0A:B7:54
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer:       /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial:       018F3AAEC99E41198BFB340289AFBB236A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number:          0D48
Signing time:             Thu 02 May 2024 19:01:24 +0000
Manifest this update:     Thu 02 May 2024 19:01:24 +0000
Manifest next update:     Fri 03 May 2024 19:01:24 +0000
Files and hashes:         1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: rRd9Jn2qjQxAYzeXAwbkaqp+6JC1EvVlOyiHZGb/9fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:c9:9e:41:19:8b:fb:34:02:89:af:bb:23:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
        Validity
            Not Before: May  2 19:01:24 2024 GMT
            Not After : May  3 19:01:24 2024 GMT
        Subject: CN=2c8f3ef0e8aecd960eac84251d3da5d0000ab754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:d2:79:20:4f:50:84:8d:4b:bb:dc:84:ae:
                    5f:a0:dc:f4:37:b8:40:3c:88:84:17:52:93:21:50:
                    63:70:03:4f:8c:5e:59:11:4f:e7:52:41:ee:bf:0f:
                    3f:79:a7:dd:a0:5e:84:76:b7:13:39:01:51:ce:1f:
                    a8:62:a9:22:65:12:15:c9:bb:16:bc:06:67:72:f6:
                    85:a6:78:c6:34:9f:7c:79:ff:bb:67:6a:3c:30:eb:
                    0f:c0:80:1d:59:c9:a5:de:e0:de:78:12:37:41:bb:
                    86:7a:50:81:96:a4:6f:14:43:ac:c9:a6:bc:d5:d1:
                    63:c3:ba:6f:63:8e:6d:31:90:06:07:83:25:7f:fb:
                    00:39:04:3b:2b:10:96:3e:69:d7:05:cc:e1:0f:4b:
                    4c:f7:21:e7:e4:68:60:ab:64:52:96:11:36:49:52:
                    d2:66:d2:c1:56:1c:b9:04:27:20:d6:b2:b6:7a:4d:
                    98:e4:c1:57:50:93:5a:70:21:ae:74:11:8b:da:d5:
                    1d:0b:da:c7:2b:ae:5e:9d:97:94:f7:89:90:85:4c:
                    84:65:e9:e8:8e:ea:0d:f6:bf:c2:6c:eb:3d:cd:51:
                    84:35:f4:99:81:6f:d7:71:58:ce:25:27:78:4f:3f:
                    aa:1c:66:bb:dd:6c:ad:76:1e:bc:6b:a2:21:a8:7b:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8F:3E:F0:E8:AE:CD:96:0E:AC:84:25:1D:3D:A5:D0:00:0A:B7:54
            X509v3 Authority Key Identifier:
                keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d6:e4:38:e6:03:bf:a3:5b:1f:40:d9:7a:c8:38:d5:05:dd:
         c6:b1:6c:6e:2b:41:7f:4c:3b:14:24:91:bb:44:7b:6b:32:44:
         ab:c0:79:fa:6e:aa:57:a3:77:10:b4:ac:9a:57:50:eb:a7:d8:
         d6:d0:db:66:1b:02:2a:6b:1f:31:79:0d:74:f5:2f:af:39:40:
         ec:cb:70:8d:68:5b:a5:78:26:95:df:83:60:8a:77:86:9f:0c:
         22:66:b0:0c:4f:39:93:93:7e:cf:56:4f:13:79:71:f7:2f:19:
         63:bb:cd:41:d3:83:54:98:0b:a6:9c:2d:c2:35:c8:56:c2:04:
         76:a4:0e:a0:95:70:bd:9d:9c:47:2d:dd:d6:ba:f7:25:da:fd:
         fc:7d:d7:5a:36:17:d5:51:54:47:81:39:67:af:17:f5:2e:0d:
         1e:b4:af:5d:f7:8d:97:ac:95:e8:4f:52:21:90:91:89:18:da:
         4e:c4:99:fe:05:74:df:36:19:a9:d0:13:00:71:0a:79:de:9f:
         6f:c1:e0:87:a9:79:18:58:c1:ff:2f:01:c3:2a:a6:8f:a0:9b:
         82:45:b3:3b:ad:ee:31:03:e5:ec:1b:27:93:ce:33:3b:21:46:
         66:b0:29:12:87:1f:22:3d:e7:23:28:b8:10:7e:e8:2f:85:45:
         78:9e:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:17:36 2024 by rpki-client on console-fra.rpki-client.org