Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File:                     3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier:          XOO7tPlW7nieQ1ket5wAjB6u5c4BPcfa9F4y60EeLvQ=
Subject key identifier:   39:B0:D7:29:4E:4D:08:A4:24:AD:B6:EB:CF:C7:C2:84:1D:86:6A:59
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer:       /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial:       018F381DBFE7CBF0B74156B9F15BED115070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number:          0AA1
Signing time:             Thu 02 May 2024 07:03:44 +0000
Manifest this update:     Thu 02 May 2024 07:03:44 +0000
Manifest next update:     Fri 03 May 2024 07:03:44 +0000
Files and hashes:         1: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: bJjWyJ1UdcgSGo5EeOYDaZ+leovjJvY6MzhMTj60690=)
                          2: ui5Mat4nsMmfRi3PSBDmfjJ3Dv8.roa (hash: mkzGULpmmlE8/QktPaCU0rLHK2lgFHeJiCq2O81bqz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:bf:e7:cb:f0:b7:41:56:b9:f1:5b:ed:11:50:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
        Validity
            Not Before: May  2 07:03:44 2024 GMT
            Not After : May  3 07:03:44 2024 GMT
        Subject: CN=39b0d7294e4d08a424adb6ebcfc7c2841d866a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:9c:72:fe:00:44:52:73:ec:0c:ea:54:46:
                    32:c7:5a:fb:e1:8c:0d:90:80:3a:c2:a3:4c:5a:fd:
                    ef:be:22:f8:08:4b:9c:c5:8c:b8:d8:af:17:96:9d:
                    6f:f9:5c:15:9d:66:04:49:e5:b3:ad:7c:16:81:9d:
                    fb:6a:37:9c:2a:02:c7:3a:14:9a:17:48:e9:a0:42:
                    d5:d6:96:76:be:f6:8a:e3:f9:c0:4c:fd:6d:8e:42:
                    66:fd:b1:60:16:0f:09:90:9d:1f:ce:07:17:e0:1a:
                    ac:ba:b6:53:38:27:2a:60:e3:99:4c:d2:c2:16:f0:
                    c4:61:bc:8d:91:46:6f:20:8f:8b:78:e2:77:b9:8e:
                    e9:16:bc:f0:2e:fb:53:0d:9f:87:27:28:8d:de:09:
                    eb:15:e7:23:13:2e:d1:26:ff:a0:df:0d:a6:c8:78:
                    d2:b3:80:db:1d:20:67:94:42:47:00:e4:fc:05:71:
                    77:72:83:d4:3e:25:9a:7e:6b:2b:72:7e:a1:1d:55:
                    4b:7f:15:c1:ce:a9:e5:44:4a:d4:0e:1e:33:4c:04:
                    de:5b:eb:2d:76:7a:e1:c9:91:c3:9c:0a:f9:db:4b:
                    35:a0:13:74:40:78:00:db:35:6a:b7:55:3a:1b:32:
                    8e:68:7f:80:7c:2e:b1:7d:68:a0:f8:9b:c2:17:da:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:D7:29:4E:4D:08:A4:24:AD:B6:EB:CF:C7:C2:84:1D:86:6A:59
            X509v3 Authority Key Identifier:
                keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:66:46:8a:55:31:c8:22:80:f3:32:2a:e7:d7:d9:55:af:65:
         26:21:32:39:d3:f0:ba:dd:87:83:bf:81:d9:08:4a:a8:fb:51:
         77:ce:05:00:53:c2:ec:0c:5a:ec:bd:1f:35:7b:87:68:99:79:
         d0:29:87:8c:f8:2d:0a:e0:8e:03:9e:d2:3a:01:92:5c:76:0f:
         93:8e:40:a5:0f:0b:2d:09:8b:91:16:60:44:53:0a:f7:7c:88:
         c5:29:ee:e4:f5:17:f0:48:ee:38:86:e2:e1:37:4f:3e:a2:f4:
         ed:00:9c:cd:6e:1b:85:91:ed:f0:e4:6e:10:f2:38:ea:ca:71:
         7b:41:fd:c0:bb:cc:a8:d9:40:93:ea:c9:b1:e6:10:17:9b:b7:
         4c:65:c2:f3:16:2d:6b:ab:f4:00:a5:e4:38:9e:c6:11:9b:7b:
         71:00:24:61:c0:a3:67:09:93:7e:c7:e7:c3:3c:48:cc:ff:49:
         91:d9:cc:7c:20:87:be:15:98:35:7f:83:66:4b:4f:94:c2:05:
         3c:85:6d:9f:e8:16:3e:ab:3b:44:b7:4e:ee:47:49:ae:70:1d:
         7b:21:bd:68:78:01:ca:8b:64:31:20:ed:f8:07:e5:cb:28:0d:
         9b:c1:18:89:bf:ee:2e:c1:43:7e:0b:79:8b:81:02:2a:2b:50:
         2c:c4:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:22:06 2024 by rpki-client on console-ams.rpki-client.org