Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
File:                     3IR1bcdywGSDJJqYejsbxuYF6DU.mft (raw, json)
Hash identifier:          s5LykqXUAi1dUdZIolgrgbrmFUTBH43tot2CBCPi1SU=
Subject key identifier:   C3:C4:22:E3:A2:CF:9E:A2:4A:F7:5D:F4:58:E4:C1:E8:CD:C1:EA:7A
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Certificate issuer:       /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial:       018F5023A50C7FCF1FCEEC7B8B618BE77B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
Manifest number:          115D
Signing time:             Mon 06 May 2024 23:01:03 +0000
Manifest this update:     Mon 06 May 2024 23:01:03 +0000
Manifest next update:     Tue 07 May 2024 23:01:03 +0000
Files and hashes:         1: 3IR1bcdywGSDJJqYejsbxuYF6DU.crl (hash: IZ1x4GiFwXBGHsZuSq06CnO1JSFLK5+EiKPvm20e5IQ=)
                          2: rq39Cxcjv22zN8qaanrTd64xr4o.roa (hash: NTXCeYvqcRQumTAQPPOUf3vxEbPuLjQPCRtTzhXnJ3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:23:a5:0c:7f:cf:1f:ce:ec:7b:8b:61:8b:e7:7b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
        Validity
            Not Before: May  6 23:01:03 2024 GMT
            Not After : May  7 23:01:03 2024 GMT
        Subject: CN=c3c422e3a2cf9ea24af75df458e4c1e8cdc1ea7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:32:1b:f8:9c:2f:43:1a:be:11:0d:b1:ac:
                    78:ae:a9:1c:0d:70:12:6d:70:c6:a6:0b:2c:b7:e7:
                    c9:51:12:4e:82:70:27:11:97:e6:f4:f3:e6:87:c8:
                    67:cb:4a:68:fb:5c:22:75:5e:56:51:a1:11:ab:12:
                    b6:12:8c:e5:30:cb:dc:a1:41:cb:bc:10:ca:f8:ea:
                    d5:92:c8:a8:cf:b0:60:0a:8a:dc:fb:6b:a8:c3:a1:
                    30:35:14:6e:2e:97:0f:9f:3a:69:49:70:30:3b:47:
                    33:88:66:37:4b:46:ec:a3:d4:7c:77:26:53:8e:9b:
                    5e:51:b5:eb:de:a2:77:19:dc:2d:0d:9a:60:9a:41:
                    c0:93:78:a6:60:4e:99:ba:bb:ff:61:b3:00:94:b2:
                    9f:2c:30:6b:d0:ba:a6:59:af:ca:5f:a2:ad:40:b9:
                    b3:50:10:0b:88:21:3b:93:a2:11:b5:0b:91:59:e0:
                    57:3b:1a:a1:f4:d2:8d:3e:84:a0:73:58:7a:4d:4c:
                    eb:cf:84:fc:e5:05:d9:4a:50:b8:a4:68:6f:4c:96:
                    79:d8:4b:cf:21:0a:2b:f2:9e:31:9a:c1:94:23:95:
                    d8:ca:47:74:51:7d:52:c9:2f:65:bc:b7:e0:ca:50:
                    fb:f4:66:11:5d:04:d0:7a:a4:dd:a4:d7:0e:22:ae:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C4:22:E3:A2:CF:9E:A2:4A:F7:5D:F4:58:E4:C1:E8:CD:C1:EA:7A
            X509v3 Authority Key Identifier:
                keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:e5:b8:2e:e2:ac:c2:c3:34:02:64:12:6b:49:e2:e5:2c:
         5d:72:fe:91:ca:5f:4e:f1:e4:ec:c2:7e:82:52:fb:0a:93:a5:
         1e:a9:10:5d:3d:44:26:ae:52:4d:f7:ea:f4:ff:36:87:f0:5b:
         1e:d9:8f:e6:b7:49:fd:8d:3b:3d:0e:3e:5c:c7:05:51:fb:10:
         52:2f:36:43:0d:65:eb:0c:10:d5:76:0b:6a:21:af:03:cc:9a:
         67:d2:60:6c:29:cf:0b:b3:68:e8:ad:f1:69:ac:41:6d:b7:38:
         09:e3:ff:fd:2c:75:b5:2f:e4:82:66:95:95:ec:6f:2c:ec:6e:
         32:45:f6:ce:c0:72:0e:e3:a4:cc:bd:9c:e6:62:13:30:c6:1e:
         ca:42:e7:6c:05:6a:df:6e:2c:6b:43:fd:1e:27:a6:7f:6d:b9:
         2c:db:11:76:a2:c4:58:14:ca:cd:d5:30:3d:e5:5c:6a:91:85:
         17:98:63:04:63:b1:a7:39:bf:cf:22:c0:7d:e2:37:85:49:c9:
         d2:11:6d:1a:b5:17:b0:7a:bf:2c:78:39:be:de:89:ac:6d:31:
         69:ba:41:d6:cb:1e:14:68:cf:2b:20:da:c6:70:d5:a9:00:4c:
         14:ef:84:36:21:e9:de:7d:ae:9f:e4:3f:92:22:f0:0a:82:85:
         e6:48:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:33:15 2024 by rpki-client on console-fra.rpki-client.org