Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File:                     a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier:          QkcUeTtYqkRgsECn7PD6+eeVG/s8raMs7XnoZHJ+zgA=
Subject key identifier:   33:66:56:11:0B:54:37:EB:BB:1D:53:F8:A4:6A:EC:33:0E:B7:B3:39
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer:       /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial:       018F88927ED6C4A07FA05F06BFBEF8FD318A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number:          0AF0
Signing time:             Fri 17 May 2024 22:00:53 +0000
Manifest this update:     Fri 17 May 2024 22:00:53 +0000
Manifest next update:     Sat 18 May 2024 22:00:53 +0000
Files and hashes:         1: Fw0GP7pgzQxJBoLlMw7E-oEpq0I.roa (hash: ihTMNHlXsFz1Ejm+9h705A0QPTNM1/X8Ts6EzsyyKIo=)
                          2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: J1SuFR8xlcNo+8RvFFc+Jh/+EKthUFIKxrpAFiTil3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:7e:d6:c4:a0:7f:a0:5f:06:bf:be:f8:fd:31:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
        Validity
            Not Before: May 17 22:00:53 2024 GMT
            Not After : May 18 22:00:53 2024 GMT
        Subject: CN=336656110b5437ebbb1d53f8a46aec330eb7b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:6c:26:19:11:2a:45:1f:8d:4e:d0:d7:86:
                    c3:5a:9f:cc:0b:4b:3a:b9:ff:05:19:ea:2d:32:07:
                    10:6e:57:ce:22:59:7e:54:27:8a:0f:30:62:e9:51:
                    a7:bd:da:92:36:f9:ac:fe:7b:85:55:c5:32:76:f9:
                    79:60:3b:bb:86:5a:f4:44:c2:9b:81:3a:31:57:08:
                    1b:97:f3:0a:28:ea:8f:24:56:9e:cd:0f:70:35:40:
                    43:db:5a:11:39:9d:db:24:3b:27:04:a9:12:ac:aa:
                    5d:3d:47:19:e9:65:9a:b5:d7:14:27:ad:dc:1a:94:
                    6b:8e:21:68:10:03:20:b4:ff:ee:9b:72:35:26:a0:
                    8a:7a:61:31:31:04:61:36:f9:45:15:68:35:49:eb:
                    17:d0:f1:84:2a:73:be:ed:af:2e:ae:74:d2:7e:93:
                    eb:7e:6c:86:8d:f0:fe:a9:51:e8:91:5d:ac:0c:6b:
                    77:f9:e2:3c:6f:8f:bc:0e:d2:cd:9c:88:6e:43:80:
                    ee:b5:e5:9d:c2:c5:48:52:1f:fd:10:55:2c:9b:7d:
                    ac:08:e9:b0:44:28:39:34:e5:18:e7:79:83:ec:c0:
                    61:2f:60:8b:b6:04:1b:71:54:4d:3d:89:d2:4f:38:
                    53:06:8f:61:f0:f1:fd:28:46:19:a0:9b:69:14:5b:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:66:56:11:0B:54:37:EB:BB:1D:53:F8:A4:6A:EC:33:0E:B7:B3:39
            X509v3 Authority Key Identifier:
                keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:c2:8d:ef:33:8d:e0:8e:5a:52:6b:33:56:8d:60:e3:6e:
         72:9c:ed:3a:63:99:83:93:40:d6:ef:d1:ab:c1:20:64:26:a8:
         bd:4a:9c:e9:0c:78:72:5f:00:1f:ee:7e:21:77:8d:40:7a:ca:
         50:cb:e6:3e:56:87:44:47:c2:53:40:4f:d8:b5:82:7d:a9:46:
         44:f6:93:12:ff:de:15:2b:28:de:4f:65:d7:e4:67:9f:b6:fb:
         cd:a9:0b:ab:42:64:96:cb:6a:84:73:1b:a9:0c:32:e9:06:6a:
         96:42:ed:84:3f:e9:c8:43:e4:3c:a7:98:83:9a:33:c6:8b:07:
         b7:ec:75:e4:8e:55:ab:ec:a0:49:bc:90:2f:ff:e3:f0:67:5a:
         53:d7:77:07:9c:6b:da:4e:63:f5:91:ce:c7:a6:e9:c6:55:68:
         0b:c3:1a:9a:a8:3c:3c:70:07:d2:51:ca:2f:70:6e:ae:eb:10:
         26:2f:2e:6d:cf:27:05:ae:16:12:8f:ca:0b:8a:16:95:2c:ce:
         dc:34:00:c3:03:6e:7f:ba:9b:c9:49:8c:5d:9f:50:41:c3:75:
         7c:a4:78:c2:6d:6a:8a:35:d3:de:9f:2a:72:34:73:bf:ef:29:
         a1:3f:29:92:0c:0f:e4:b1:54:8c:cf:62:5c:90:3c:d6:7c:2c:
         b8:1d:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:45 2024 by rpki-client on console-fra.rpki-client.org