Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
File:                     3KECtaSoa_R_8E6OprIOzQviOCY.mft (raw, json)
Hash identifier:          DsMK1lWA1PSQmbriY8SVxOVwbE7f//w7zobDDvmYWU0=
Subject key identifier:   6F:54:F6:B1:02:7B:A9:29:DF:3B:63:A4:AC:CE:2D:23:B5:EC:8D:39
Authority key identifier: DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26
Certificate issuer:       /CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
Certificate serial:       018F513911A7ECA9974DF12B3E2CA9F5AD6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
Manifest number:          067A
Signing time:             Tue 07 May 2024 04:04:05 +0000
Manifest this update:     Tue 07 May 2024 04:04:05 +0000
Manifest next update:     Wed 08 May 2024 04:04:05 +0000
Files and hashes:         1: 3KECtaSoa_R_8E6OprIOzQviOCY.crl (hash: x8KPS/1dE+vV4DRNgFzDmhCjlVTLuEGMUBHRhMvrk9Y=)
                          2: mzpE5QIUDk2HkeVCYpwXV3rlGnA.roa (hash: d8vnw+4MmaDVPudrpNRptJYRV49C3VHXYHCAqK6C48k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:39:11:a7:ec:a9:97:4d:f1:2b:3e:2c:a9:f5:ad:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
        Validity
            Not Before: May  7 04:04:05 2024 GMT
            Not After : May  8 04:04:05 2024 GMT
        Subject: CN=6f54f6b1027ba929df3b63a4acce2d23b5ec8d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:27:c5:cb:27:65:94:14:cf:34:d4:38:d5:
                    f5:ff:03:a7:5e:97:6c:4b:d0:f0:8c:e1:6d:b2:25:
                    6c:0f:36:68:93:78:dc:b3:ea:f2:a6:d7:58:f3:14:
                    fe:ba:25:0a:ec:8f:2d:88:8f:16:2d:b8:67:87:aa:
                    02:17:10:f4:b6:bd:be:2c:d2:6f:ed:0f:c5:a1:a2:
                    0d:aa:0e:a6:0f:8c:13:0a:8d:ee:f6:32:0e:8d:57:
                    32:a3:82:13:2c:22:34:d4:da:28:aa:4b:8c:0c:f3:
                    f2:d2:52:5e:31:a9:00:2f:e0:bb:86:dc:2a:04:62:
                    2b:65:46:72:bf:d3:e0:58:ac:84:b4:cc:e6:25:20:
                    5c:6d:29:68:69:40:12:3d:80:2f:2b:3b:d6:fc:bf:
                    f0:2c:0e:f1:60:14:cf:09:13:ae:ad:b8:fa:96:03:
                    cb:3e:4d:cf:76:c0:f7:2f:24:e8:58:dd:e7:85:5f:
                    5c:fc:82:39:c3:51:2d:5c:26:de:72:ba:18:78:7d:
                    cc:8e:d3:85:cc:ff:58:ed:77:b6:b8:01:83:83:0d:
                    f2:43:23:18:1b:ea:7f:33:f3:cb:b6:29:c0:64:e0:
                    31:ed:2b:e1:49:1f:87:3e:92:13:a1:a6:a6:db:c8:
                    6d:2b:eb:e5:45:d3:0c:1a:5a:90:02:2a:af:8a:e3:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:54:F6:B1:02:7B:A9:29:DF:3B:63:A4:AC:CE:2D:23:B5:EC:8D:39
            X509v3 Authority Key Identifier:
                keyid:DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5e:27:8c:b2:ed:08:9f:0c:ce:dd:7d:30:f2:cc:ba:f3:d5:
         77:41:42:d4:96:6d:e1:6e:c2:23:47:30:75:91:03:d9:ed:1c:
         df:88:a7:71:98:ff:2e:98:bd:e2:d3:fa:30:db:6c:62:9f:49:
         f6:22:ff:c8:cd:86:3a:93:6a:32:1c:53:9d:e9:b3:bd:e8:30:
         60:4f:20:91:ae:89:f5:c0:ec:3c:1b:02:4e:c0:fe:88:15:7b:
         c1:38:d3:47:14:83:39:d9:fc:f0:fd:7e:d0:5e:ca:1f:cf:65:
         41:2a:95:40:06:d6:61:5d:6c:b2:8c:95:2b:2a:d8:60:6a:92:
         2a:90:70:9d:8d:9b:81:5f:ab:d8:56:ca:d9:e3:09:7a:13:fc:
         93:28:5c:8b:59:1d:39:2f:88:d4:62:16:7d:3f:dd:f4:e6:48:
         d4:46:75:1a:50:b9:6b:28:2f:b6:78:f6:34:55:91:9b:0e:18:
         c6:a1:50:6d:87:3a:5b:f2:bf:2d:f6:1d:af:13:50:bc:1b:20:
         6d:db:6a:22:93:8c:7e:6e:b2:45:49:92:71:9b:ec:d7:5b:5a:
         81:c6:fa:02:dd:d8:07:8b:91:1e:ff:2d:03:a3:98:ac:5e:e7:
         97:26:38:64:1c:e4:1a:19:d9:91:6e:dc:0c:07:4b:b3:e0:bc:
         46:6c:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:31:05 2024 by rpki-client on console-ams.rpki-client.org