Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File:                     35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier:          8LjFBeiJXJiHjg/0TmBLikoKgxDBs8eYwtzKreXdzLU=
Subject key identifier:   B9:31:FE:8B:95:A7:5F:62:31:55:92:04:DB:32:1F:15:C1:EB:35:70
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer:       /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial:       018F36D22E6282A6A5BC81B9CF92B6AED922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number:          0D74
Signing time:             Thu 02 May 2024 01:01:35 +0000
Manifest this update:     Thu 02 May 2024 01:01:35 +0000
Manifest next update:     Fri 03 May 2024 01:01:35 +0000
Files and hashes:         1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: whM/qApb7lcCW4AWYTtRtMlYqb1mu0VyZ3JOy8TZX+4=)
                          2: bFyTSVWaksMFPIC5uBwbHyreY9E.roa (hash: 3FG371GIP9RsCMbfIl11e2kFW+ACT9X1ZyfToXR+GXU=)
                          3: reNYiWo9S-NrugOXr_4jFbghS_g.roa (hash: 0z3wlnDlEROtnkWdI8KPfL+waRYLTRMYoibxjUPz4q8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d2:2e:62:82:a6:a5:bc:81:b9:cf:92:b6:ae:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
        Validity
            Not Before: May  2 01:01:35 2024 GMT
            Not After : May  3 01:01:35 2024 GMT
        Subject: CN=b931fe8b95a75f6231559204db321f15c1eb3570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:0c:28:31:e1:b7:76:1f:0a:78:a7:21:cf:
                    90:1c:20:50:1f:eb:8c:a8:57:ba:3c:e6:31:ef:58:
                    ca:a9:8a:63:d9:07:ff:91:17:36:dd:2a:08:83:23:
                    6d:a4:3a:86:37:fc:24:ca:59:d1:c9:be:be:e8:b5:
                    4d:5c:6f:10:54:28:47:ec:55:99:4a:8f:03:e2:d1:
                    e6:9a:d7:ee:c0:3b:c6:2d:0f:24:36:5f:fe:71:ea:
                    3a:3c:93:36:d9:f6:f6:9c:4d:49:c6:c6:90:6b:f9:
                    ed:a4:81:44:a0:cf:2b:a0:31:de:8c:83:f6:f3:31:
                    77:d2:aa:77:bb:2f:5a:17:e3:62:91:b1:b6:1b:2e:
                    e5:76:e2:d3:ab:a3:0e:cd:55:30:27:c1:03:18:b2:
                    c1:e7:a7:27:5c:b3:76:0e:2e:5c:a8:8a:77:9c:e4:
                    74:e4:1c:13:fe:d1:be:d0:e2:e9:c3:32:71:ab:e7:
                    ca:20:53:de:0c:b2:1e:91:b5:0b:e5:3c:ff:4d:ca:
                    c0:24:15:c7:dc:61:ab:36:81:dd:ad:d3:ff:90:4c:
                    86:d4:12:db:81:d2:a9:b7:01:3a:40:9f:78:ce:94:
                    78:30:c0:66:32:7e:b4:0b:f0:b0:27:80:ce:f6:c2:
                    8a:82:c1:c1:13:24:60:24:4a:d3:2f:60:55:9b:35:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:31:FE:8B:95:A7:5F:62:31:55:92:04:DB:32:1F:15:C1:EB:35:70
            X509v3 Authority Key Identifier:
                keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:1f:1c:de:78:cd:9e:bd:9c:b0:4a:2d:03:78:be:57:10:
         bf:a5:8b:62:92:61:3d:4e:88:7a:4d:8d:5d:f4:ca:66:1d:28:
         b9:16:1a:7a:c8:54:dd:18:fb:71:75:62:4b:ec:b4:f7:42:61:
         cc:e7:2e:95:a2:0c:a3:82:e5:ec:f5:fd:07:5e:93:a7:29:17:
         f6:db:e6:ee:4f:65:fe:e4:2e:d4:ad:88:a3:7a:cc:fd:89:de:
         4b:dd:16:d1:d5:d3:e9:83:7a:49:b0:43:66:a1:d1:5d:90:33:
         d3:07:b5:f5:c4:20:e9:e8:8d:b0:b2:5c:6f:15:da:0b:e2:5a:
         50:3a:d0:bd:ad:99:da:33:c5:c0:03:db:be:75:b1:b5:40:a4:
         45:ed:1f:2c:bb:ed:15:87:e1:15:0b:6e:5c:0b:fb:da:6a:a9:
         d7:39:c8:92:70:5d:47:c0:86:14:8e:40:54:1f:ea:3e:5d:fa:
         94:14:02:3e:f8:56:7f:61:39:68:97:5e:81:82:67:53:6c:04:
         fe:b0:ed:e7:b9:e1:a8:6a:bd:41:c1:00:be:6e:ee:04:55:e3:
         90:ae:00:24:ba:1f:9f:a7:89:ca:22:96:9e:8b:c7:a9:04:db:
         71:fd:8d:66:c0:65:e7:d3:5d:50:15:6c:0c:cb:1d:6e:b7:1a:
         e4:8e:88:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:30:32 2024 by rpki-client on console-ams.rpki-client.org