Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File:                     3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier:          HPdWRDmtCpFq1lpSosBKR50wkz5Ipkugf2eGWFLs5Pw=
Subject key identifier:   61:10:C6:73:3D:87:34:DD:30:66:74:09:92:97:68:C9:3D:82:09:9A
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer:       /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial:       018F478F812ACA7D979E006A927FF24896BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number:          10A9
Signing time:             Sun 05 May 2024 07:02:18 +0000
Manifest this update:     Sun 05 May 2024 07:02:18 +0000
Manifest next update:     Mon 06 May 2024 07:02:18 +0000
Files and hashes:         1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: ss+9AcB3lUkuKRdDgZ0ml8q8jx4zPNHVBTMxOXzZVpo=)
                          2: zT27IWSWIQOtH3t5JpEAiW21MXQ.roa (hash: pLSDizvQ5Ro5Ng1RTRGvK1Edp7sHn4oy/DHomPtGunE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8f:81:2a:ca:7d:97:9e:00:6a:92:7f:f2:48:96:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
        Validity
            Not Before: May  5 07:02:18 2024 GMT
            Not After : May  6 07:02:18 2024 GMT
        Subject: CN=6110c6733d8734dd30667409929768c93d82099a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:6b:94:86:5b:83:de:f9:a0:50:f2:fd:81:
                    00:27:ed:65:85:d0:24:dc:92:f7:5b:29:55:94:cd:
                    5f:a0:a2:93:4a:df:3b:f6:f7:ae:c6:1d:1d:42:85:
                    62:55:35:b2:e8:ba:4c:76:96:8d:6a:4e:69:53:a5:
                    48:68:8b:2e:c7:88:36:c0:e8:c5:e2:21:78:f9:b9:
                    9d:2b:cd:0b:54:fc:9e:b1:04:aa:05:51:73:5a:3b:
                    80:44:59:1c:15:84:5e:fa:56:8d:00:ca:7c:68:b8:
                    4a:fe:00:6c:13:dd:22:ac:47:1f:3d:a3:18:ef:8b:
                    7c:ce:56:5b:76:89:5c:ea:66:82:b7:29:7d:96:3e:
                    74:69:96:43:a5:80:e8:f0:8a:97:29:94:67:8f:a3:
                    24:a5:a7:79:75:8d:96:13:d8:6f:17:8c:2c:cb:36:
                    71:aa:53:36:b1:5e:77:55:9a:a3:3f:38:05:20:9f:
                    1e:18:8b:d7:aa:52:d4:52:90:a9:99:07:66:9b:69:
                    8a:b3:f2:44:11:7b:68:69:35:02:f5:d8:5c:36:d3:
                    7a:cb:01:20:90:5b:75:a4:16:79:a0:36:34:f2:21:
                    83:84:24:1a:a8:48:c3:57:61:c5:3f:fc:12:40:f4:
                    20:f8:97:b7:8e:c4:86:d2:8c:71:ee:43:3c:78:01:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:10:C6:73:3D:87:34:DD:30:66:74:09:92:97:68:C9:3D:82:09:9A
            X509v3 Authority Key Identifier:
                keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:e8:b0:72:39:18:cc:7f:20:b2:d4:42:50:ca:ea:b6:b2:
         ed:85:80:d7:1a:c6:ea:f3:8d:69:4a:52:04:47:8c:dc:d5:4c:
         95:b8:59:82:de:a5:6f:36:a5:d9:ab:c1:8b:ef:0b:d3:10:64:
         bf:5b:82:1f:a3:f2:27:aa:a7:c2:50:23:87:ac:8d:5c:94:ba:
         25:71:dc:8a:4e:1e:76:17:5d:d3:fb:ea:f9:89:08:da:15:fc:
         7c:8c:b8:d8:ca:2d:e4:24:76:78:23:83:c6:37:dc:a7:17:23:
         1b:f5:4e:95:37:e0:20:ef:d1:7a:52:a0:dd:e9:54:50:2d:e2:
         e9:81:64:6e:56:e7:0f:80:b4:42:62:f6:23:fe:5b:90:59:09:
         e7:82:74:ce:c5:bc:3b:38:8f:7a:3a:c3:a9:33:ee:a1:62:c6:
         45:97:3c:88:15:bf:02:55:42:98:36:a8:87:09:2f:15:56:25:
         53:68:86:cf:09:c9:17:8c:1f:59:36:32:4c:f9:bb:77:4b:a8:
         63:dd:77:ed:f0:a0:af:d2:d7:2b:91:c1:f8:78:79:db:ad:18:
         5e:15:e0:8a:87:e0:2b:06:ad:31:12:48:c4:ba:89:b8:32:15:
         42:aa:fe:34:21:31:f7:56:1d:bf:02:80:a9:70:bd:e9:72:cc:
         73:c3:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:33:22 2024 by rpki-client on console-ams.rpki-client.org