Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          mUwGgSibm+NGiEcVe5TnutuceAe5KTE7XzwoGobUN9k=
Subject key identifier:   F7:70:F3:4B:EF:CC:3B:CE:6C:C8:B0:40:89:03:F8:E1:35:B4:85:F9
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       018F4E353AEE9C72B262C76B7894BE03BC5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          042A
Signing time:             Mon 06 May 2024 14:01:02 +0000
Manifest this update:     Mon 06 May 2024 14:01:02 +0000
Manifest next update:     Tue 07 May 2024 14:01:02 +0000
Files and hashes:         1: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: dtK8twm4LlPgXL7lBHl6IwxZUPbh+3eBbruKfykpAHE=)
                          2: 9uJbc60XGfJ7XnrVCT8LXar-HnQ.roa (hash: +tMvDDMCEyX+j0Fpxz5IxWgpRz9oSWHkEHXYhk399uc=)
                          3: ZcSUGZAIuEweH_SMJ_RKz-ZVJY4.roa (hash: 0BaPXPQPUs3oOlWZZb1qMxrnLaeVEoedxBhNjUh3YZU=)
                          4: e9OaHyk8OzSS3dFcyhGFPcy_xBA.roa (hash: ZaKauy9v5F89c7C+ZL9kJNft2oNhZAALNq3bymByuV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:3a:ee:9c:72:b2:62:c7:6b:78:94:be:03:bc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: May  6 14:01:02 2024 GMT
            Not After : May  7 14:01:02 2024 GMT
        Subject: CN=f770f34befcc3bce6cc8b0408903f8e135b485f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:67:0f:4f:32:99:8a:47:76:02:9c:45:cf:
                    3c:db:9b:71:35:fb:bd:54:16:bb:3a:95:35:3f:f9:
                    b5:f6:cd:ed:fa:c5:8a:24:40:88:7d:07:46:a1:51:
                    d6:c0:f4:8c:4d:b4:49:ff:88:1c:b2:5b:ec:41:4f:
                    94:34:cd:1b:fe:0b:06:d0:a7:00:2b:8f:be:a2:da:
                    2e:57:67:28:3b:98:bb:c3:f9:49:83:ee:ab:63:15:
                    5b:36:68:b6:41:2a:f0:c9:c4:e7:e8:91:18:ce:c6:
                    1d:19:e3:4e:ab:30:ff:66:fa:7c:bb:4b:49:6e:41:
                    03:82:76:2e:a9:9d:b2:25:0a:1f:92:81:23:a3:39:
                    5b:97:c2:7d:a6:6c:09:e8:4b:60:74:48:dc:2b:ee:
                    3b:03:b9:7e:15:4d:71:a5:d5:49:94:18:0b:bf:aa:
                    11:ee:69:e2:72:cd:c8:f8:d3:7f:a6:ff:56:18:92:
                    85:aa:89:14:9e:d7:d3:54:ea:ae:ad:ac:fd:6b:35:
                    b0:2b:4f:76:2c:8b:e0:e6:4f:17:16:f8:ba:e3:42:
                    ab:e2:42:ff:59:94:33:a9:17:e4:1d:c7:f7:bf:96:
                    c8:17:e2:f0:4a:f5:ce:aa:4a:7a:a8:c6:6e:d2:4f:
                    29:54:79:e4:ae:c9:ca:3e:68:bc:e9:a7:1f:c7:60:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:F3:4B:EF:CC:3B:CE:6C:C8:B0:40:89:03:F8:E1:35:B4:85:F9
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:63:98:be:d0:17:c8:b7:d7:7f:d1:bb:2b:62:a7:db:7e:
         61:f8:eb:a9:36:16:c3:cd:a1:95:c7:fd:be:c3:1a:37:87:8a:
         56:62:ff:40:0e:74:5a:12:86:d2:13:db:03:e0:e9:59:48:bc:
         2a:e1:20:5a:90:97:d0:54:7c:d3:ec:73:a6:68:b4:80:b5:4b:
         4a:b8:2d:8d:e5:74:7a:c1:7d:03:b7:39:26:9c:5d:6c:84:41:
         37:25:b7:47:e4:80:fa:14:c2:8a:8e:0a:6f:02:34:f1:ca:15:
         7d:4a:75:7b:aa:1f:8c:c3:e1:d3:96:36:55:be:58:52:8a:8a:
         fd:d0:97:bc:b0:0a:4c:44:9a:1c:5f:b9:ea:8a:e1:2f:d9:bd:
         56:aa:68:eb:52:8d:6b:4a:d9:bb:63:70:d1:92:17:4d:86:40:
         c6:f2:6b:3a:38:7b:18:56:bb:04:32:46:74:e0:68:35:d2:f1:
         e4:b5:38:a3:e0:f9:05:76:d8:fb:4f:65:e3:53:46:ac:3f:24:
         af:14:ff:a0:c2:3c:45:c0:10:2f:61:f5:e3:66:22:59:7a:70:
         37:d2:0e:9f:6f:14:28:3f:45:e6:f0:94:aa:c1:9b:e6:02:4c:
         b2:22:a5:bc:72:87:fa:42:ec:9b:d3:39:2b:0d:9e:42:6b:91:
         d9:71:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:05:11 2024 by rpki-client on console-ams.rpki-client.org