Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File:                     I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier:          Ik6w8g5v1/IcjAhDKSjnCfLabchdwBEGdcGboi9LffI=
Subject key identifier:   27:3A:6F:99:02:F7:5F:5B:33:93:91:EB:B5:75:30:46:07:5A:5D:25
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer:       /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial:       018F2C846BD9434CD971CCC3CC3D12B043DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number:          109D
Signing time:             Tue 30 Apr 2024 01:00:26 +0000
Manifest this update:     Tue 30 Apr 2024 01:00:26 +0000
Manifest next update:     Wed 01 May 2024 01:00:26 +0000
Files and hashes:         1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: VfbNBIhjmuaTmsaS5NiK1arIwy+pbi3eg3sTU28qzMc=)
                          2: tOqG3PPhm3VxhvggOx6KD69EYVU.roa (hash: OuOopVvVcSJwcL3SshPDKYQlBiWnsEOYVFi1YnY2GaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Apr 2024 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2c:84:6b:d9:43:4c:d9:71:cc:c3:cc:3d:12:b0:43:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
        Validity
            Not Before: Apr 30 01:00:26 2024 GMT
            Not After : May  1 01:00:26 2024 GMT
        Subject: CN=273a6f9902f75f5b339391ebb5753046075a5d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0b:80:75:45:13:73:25:e6:fa:9d:85:c5:10:
                    be:2e:64:1a:33:de:61:78:20:40:ea:ed:79:6f:03:
                    4d:ca:d5:4f:ef:95:00:9c:29:6d:8c:a3:37:e2:79:
                    09:62:e6:53:82:ae:1f:6c:b7:f7:f7:e9:6f:77:0a:
                    50:13:9e:f7:4d:f8:2b:79:0b:08:a9:01:a7:ab:db:
                    34:96:52:28:b1:66:24:05:ba:f0:e4:83:3a:11:8a:
                    8e:07:b8:51:62:43:23:46:73:6c:0f:73:61:97:9a:
                    13:f7:49:9d:41:b9:fb:78:9c:9c:5e:37:6b:75:df:
                    e2:f6:82:7a:f9:e1:a5:ed:49:6b:42:df:48:ab:28:
                    7c:2f:e7:35:31:0f:8a:f5:ff:7b:04:d5:31:6c:5c:
                    c3:c4:d2:77:ea:f8:17:a9:a0:f2:50:a2:af:41:11:
                    bb:45:42:f7:bf:14:03:b4:67:d2:ab:97:5a:80:db:
                    5f:14:4d:7f:80:55:68:5a:01:b0:e3:71:09:42:15:
                    ed:20:89:0b:14:d9:28:5f:1b:d3:52:08:f4:e8:68:
                    1f:b8:a8:68:bc:9c:e3:54:60:78:9f:00:3c:52:73:
                    f6:88:bf:be:9d:ff:68:fd:d7:43:42:7d:1b:dd:dd:
                    1e:ae:7c:5b:71:ca:13:8f:cf:0d:be:d5:0d:03:6d:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3A:6F:99:02:F7:5F:5B:33:93:91:EB:B5:75:30:46:07:5A:5D:25
            X509v3 Authority Key Identifier:
                keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:7e:39:de:d0:fe:ed:d4:ef:a4:72:26:b4:56:2d:35:67:
         9b:b7:b1:74:79:4c:f6:e3:83:f1:16:da:91:56:23:cd:d9:76:
         44:aa:24:c3:17:71:96:05:11:51:f3:12:65:f9:ce:57:9a:44:
         41:74:d5:36:90:bd:c4:05:fc:19:72:05:98:f5:18:80:5b:1c:
         55:78:7a:3b:a0:0d:45:33:4d:84:aa:a2:00:71:de:74:91:79:
         d8:5e:57:6f:1f:10:0c:1d:65:1a:d2:ff:b5:4f:ed:4b:f0:fa:
         54:93:ea:bf:14:4e:90:e5:87:83:6d:8a:64:fe:52:b0:c6:87:
         1b:a7:70:b8:9c:75:38:44:c6:d3:13:7e:b7:2b:38:dd:86:67:
         0d:01:ba:c3:1e:1d:d2:9f:07:8d:6c:5f:d7:88:2a:7e:3a:05:
         1b:85:73:a0:5a:d6:b3:e0:d9:de:4b:c5:ad:37:5c:f4:21:28:
         25:99:ac:cd:79:99:27:92:10:77:c0:1f:1a:2d:76:c5:66:0e:
         53:6f:5d:de:a6:2e:d9:dd:70:56:ef:9f:4e:61:d4:2a:b6:ce:
         25:b0:17:f6:53:6e:56:53:a4:53:c8:f6:40:ad:6f:30:31:c7:
         ed:e3:de:f4:c4:b3:ed:02:e8:1d:1b:fe:2b:3a:f5:b0:bd:54:
         d8:51:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 08:13:20 2024 by rpki-client on console-fra.rpki-client.org