Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File:                     3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier:          UDVLdp6ELLlusd+Uz4m2pCi4Z0me40d8DlbbWqqmT70=
Subject key identifier:   9A:01:46:29:49:4F:F3:2D:68:DD:96:78:44:99:49:59:2D:A9:C0:13
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer:       /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial:       018F44C44DD01C90C049D2D2199748AB249F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 18:01:06 +0000
Manifest this update:     Sat 04 May 2024 18:01:06 +0000
Manifest next update:     Sun 05 May 2024 18:01:06 +0000
Files and hashes:         1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: 46ZX/DLgbGfxkMTUwsBKbwOaIg9fPUgIAqper89h/wE=)
                          2: 9iOelXrsj2P6jIgOTvT1qauDzJc.roa (hash: Jmu33ZU3fOXHQp6eA6xg203rCZOopDTmEk0KXS81tHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:4d:d0:1c:90:c0:49:d2:d2:19:97:48:ab:24:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
        Validity
            Not Before: May  4 18:01:06 2024 GMT
            Not After : May  5 18:01:06 2024 GMT
        Subject: CN=9a014629494ff32d68dd9678449949592da9c013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:7f:fc:59:0d:77:a7:17:71:15:03:64:4e:
                    2e:61:7c:37:a3:77:03:dd:45:74:b9:df:bf:ec:07:
                    61:08:84:54:43:3b:ea:6c:5b:bd:c2:4f:72:98:8e:
                    cb:75:76:af:55:16:d6:64:1e:22:b3:a5:2e:e8:4f:
                    8c:a0:02:e7:78:ef:98:0d:ce:f6:ce:bd:e5:41:5f:
                    89:c5:f5:0d:d9:65:06:b9:58:8a:0c:39:73:7c:43:
                    73:f4:a2:44:9a:b6:4e:d7:c4:20:8e:5b:c1:18:88:
                    72:31:9f:ca:5c:88:7e:07:44:26:1f:90:50:f4:d7:
                    b6:d4:60:c5:42:12:43:7a:32:46:de:74:07:f0:b4:
                    3e:46:d3:c1:e8:50:48:91:ff:46:84:0b:50:e1:43:
                    c0:db:6e:5b:ec:ea:ff:d3:4f:c5:ec:5e:be:d2:c1:
                    42:a1:af:31:7c:44:05:35:c7:ed:c6:64:1b:cf:c1:
                    a5:31:ec:3a:8e:63:b0:6b:1c:d1:27:7c:c8:96:e0:
                    be:95:bd:db:f8:2b:34:f7:7b:c8:20:3f:7f:fd:fe:
                    f5:2c:09:7c:3d:60:7d:95:ed:53:f4:30:0f:92:4f:
                    39:6e:0c:cc:66:bd:72:54:85:46:5c:6b:79:0c:26:
                    7f:8a:74:c8:6e:24:64:11:88:4f:93:db:a7:b0:81:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:46:29:49:4F:F3:2D:68:DD:96:78:44:99:49:59:2D:A9:C0:13
            X509v3 Authority Key Identifier:
                keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:75:c9:5a:b6:50:eb:37:9b:43:eb:ab:2c:5b:00:80:90:50:
         5c:ae:2b:f7:d1:e0:ba:cc:81:dd:9c:ff:ac:b0:3c:2b:78:a7:
         84:07:15:4b:e3:70:71:a1:71:d7:b6:4c:14:a1:e8:51:75:a2:
         ca:57:85:35:bf:e2:89:1a:29:2d:c2:18:e3:67:9d:a8:c7:12:
         ac:88:86:b2:e3:a5:e4:92:f8:e5:45:e0:09:2b:56:24:d6:ee:
         d4:ca:4e:88:e8:9c:d8:54:fb:7c:df:e2:21:09:d2:6f:9f:22:
         42:b3:2c:5e:b1:47:96:40:0a:49:92:94:8a:d0:31:cc:33:41:
         2a:bc:16:cc:05:ee:52:0e:fc:0b:3e:65:20:f8:80:11:ac:28:
         e7:0c:fc:09:3b:90:b7:63:3b:e1:af:f8:ec:7e:5b:d9:55:9d:
         18:7d:97:6c:97:e8:8a:16:f9:3a:54:b5:9b:98:7e:a0:bd:c3:
         a3:a9:a3:da:e0:c0:2c:f8:0f:ae:db:a2:1f:75:e3:68:2e:20:
         08:ce:97:b4:df:84:be:d6:97:fd:ec:97:ac:7d:28:ed:00:de:
         5f:9e:33:ad:8c:ee:b2:2b:ae:81:7f:39:f4:31:c8:bd:51:95:
         53:b4:92:c6:a7:2e:84:ef:a5:ed:9d:72:72:d8:2b:d2:33:70:
         a2:64:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:04:13 2024 by rpki-client on console-ams.rpki-client.org