Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File:                     3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier:          nclrNS9OJmLTgAd7nk8WlxOAZeWu8HNEqnY+4giCBCM=
Subject key identifier:   2F:4E:C7:25:08:41:A0:72:4E:95:0E:D0:66:3E:5D:B3:99:7F:DE:1A
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer:       /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial:       018F4A2179D270495AFEF1B8AA5305162736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number:          0B12
Signing time:             Sun 05 May 2024 19:00:58 +0000
Manifest this update:     Sun 05 May 2024 19:00:58 +0000
Manifest next update:     Mon 06 May 2024 19:00:58 +0000
Files and hashes:         1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: MoRxckhNF8lxUSMD57kmEeSO6enWNiM9K32bez27Vf4=)
                          2: z68IgboXGZiKQ6dzJS-V8KNFxGc.roa (hash: fUSaPwcqpcN4c4L8zqNawHhhpxaNcUgQCRY6lsKpqsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:21:79:d2:70:49:5a:fe:f1:b8:aa:53:05:16:27:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
        Validity
            Not Before: May  5 19:00:58 2024 GMT
            Not After : May  6 19:00:58 2024 GMT
        Subject: CN=2f4ec7250841a0724e950ed0663e5db3997fde1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:a9:f8:c8:52:98:ec:cb:d3:01:8b:ed:b4:
                    fc:f4:43:8d:37:4e:79:ea:5f:71:26:d3:07:0a:6c:
                    04:33:85:29:a1:80:d2:20:0d:36:ba:ec:7f:56:04:
                    d0:80:0d:9a:25:87:f0:6e:b5:e1:5f:39:0c:72:f7:
                    81:11:0c:a4:8b:7d:55:91:ed:3b:1b:da:0a:2f:82:
                    c0:ec:c1:74:d6:77:82:98:69:70:70:1b:e9:6d:31:
                    dc:a2:f8:08:84:04:01:cd:11:cf:83:e9:12:f0:b8:
                    1e:15:65:66:b6:95:2e:95:83:d2:4e:78:1e:09:ff:
                    ab:88:12:71:33:4a:46:0c:5e:3a:43:ac:ba:b8:ae:
                    9b:b2:31:8e:2d:02:c8:d5:5a:19:f8:fb:39:64:2d:
                    e0:67:2e:cd:a2:87:f8:41:25:6f:10:b7:86:b3:a5:
                    25:04:c6:88:dd:d7:56:eb:bc:c2:6d:ff:69:3e:c0:
                    b6:f2:ba:ba:83:1f:e4:ba:9f:f6:fe:cc:a9:19:5a:
                    73:c1:1e:c0:ae:de:33:04:12:3c:f1:29:bc:38:ba:
                    69:b2:57:c3:71:f1:36:75:06:5a:fb:42:5c:d3:0d:
                    6d:16:72:f0:04:53:74:1e:4d:f1:7e:52:b3:d0:d9:
                    ce:fc:83:30:38:61:a1:0d:21:2f:79:81:89:fa:de:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4E:C7:25:08:41:A0:72:4E:95:0E:D0:66:3E:5D:B3:99:7F:DE:1A
            X509v3 Authority Key Identifier:
                keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0f:bb:b1:aa:6e:fd:77:24:11:fc:51:05:00:f0:12:23:a7:
         c3:57:3a:1a:a1:3b:a7:f7:07:a8:b2:9c:36:33:72:87:1b:b9:
         c9:bc:23:6c:5f:6e:6a:21:11:e8:25:9d:4d:ab:fa:fb:8d:c5:
         90:ca:72:49:ba:f6:fb:b7:b6:3a:5e:55:ee:0b:75:46:aa:5b:
         a1:01:bd:8c:8c:88:c2:10:8f:a3:52:c6:55:d5:41:90:4e:a4:
         f0:fa:49:ce:8c:22:35:8b:40:97:59:ac:42:90:b7:b5:c9:54:
         a8:c1:a6:08:d9:f7:29:41:0f:19:0e:08:8a:0d:00:f7:d0:6f:
         2d:8d:7d:6b:33:d2:48:0a:a5:88:dc:ac:59:4f:c6:0c:8b:23:
         a3:f7:dd:ba:f4:fb:c8:e2:f8:71:7f:f8:ad:a3:d5:66:27:83:
         bc:04:30:75:27:40:f0:0d:ce:23:bc:a4:c4:a5:0b:31:45:9a:
         57:55:38:8c:0c:8d:ca:ba:e6:74:69:54:ba:7b:15:82:05:32:
         70:36:f6:65:20:68:ac:bb:d2:2b:10:57:26:e1:62:4f:61:19:
         a9:43:1b:50:f1:4c:a0:ed:a0:d1:54:07:ef:a8:75:ba:f7:ab:
         06:4b:b1:23:ab:24:85:07:fb:81:64:29:7e:e5:1e:46:7c:e1:
         2d:ee:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:25:26 2024 by rpki-client on console-ams.rpki-client.org