Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File:                     48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier:          f4YNSVOwVTev7bt/dbwAa8dCU58FLUwU51/RP1dW8KA=
Subject key identifier:   D2:53:E9:6C:7A:26:EE:2A:E6:3C:3A:4A:40:21:30:0E:EB:1B:3C:19
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer:       /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial:       018F3776E412CFDB29E37332F8425644B86D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 04:01:29 +0000
Manifest this update:     Thu 02 May 2024 04:01:29 +0000
Manifest next update:     Fri 03 May 2024 04:01:29 +0000
Files and hashes:         1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: aOa01oXA7jo2ULyqdPZ4ZjFqM5l5/XuU1Q/e8N2f9GY=)
                          2: BsI4gal2WXzic8nQiJkMTA14LKk.roa (hash: alJuzYPhgp8NaU7KpNCDNBCSZF9ikWn6agn4bMwWAdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:e4:12:cf:db:29:e3:73:32:f8:42:56:44:b8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
        Validity
            Not Before: May  2 04:01:29 2024 GMT
            Not After : May  3 04:01:29 2024 GMT
        Subject: CN=d253e96c7a26ee2ae63c3a4a4021300eeb1b3c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:94:a5:c9:01:0d:d8:0d:d4:91:e0:6c:e0:
                    d2:65:3f:cf:bf:ab:d6:ae:54:92:81:fe:5e:cf:ad:
                    82:05:6b:ed:ee:f7:e4:38:9d:7c:76:7c:86:a8:20:
                    80:1e:92:7d:78:2c:cf:1a:20:a7:c7:69:83:7a:4c:
                    97:33:85:59:b2:89:86:66:ad:98:bb:5a:f6:25:4e:
                    dc:d7:47:b2:35:39:b4:c7:e1:6c:a3:29:ea:1f:f6:
                    b7:b6:4d:b6:0f:11:ad:46:71:15:95:89:77:a8:ba:
                    04:29:31:9b:82:9a:9d:69:a1:59:3f:33:a1:b0:ca:
                    09:84:79:9c:b4:3f:cf:87:be:75:bb:9d:d4:6e:0f:
                    98:cd:0b:95:a1:e7:40:45:e3:09:0e:31:01:a4:25:
                    90:6a:dd:f2:67:78:05:e3:ed:71:d8:1f:ab:6b:55:
                    ed:32:14:68:8d:6f:46:9a:cc:14:a7:62:5a:5d:01:
                    55:45:ea:b8:94:4c:2a:96:a2:dc:68:20:f7:a6:b2:
                    bd:f5:5c:9c:83:f0:84:0f:85:4a:ee:13:9f:bf:67:
                    dc:69:86:ef:43:f3:90:ac:97:bf:ff:a0:56:16:16:
                    e6:31:bc:7a:8c:1c:89:cf:63:24:b4:b3:b9:17:de:
                    eb:e1:d8:d2:cf:d0:34:a1:03:f2:ff:67:45:33:ad:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:53:E9:6C:7A:26:EE:2A:E6:3C:3A:4A:40:21:30:0E:EB:1B:3C:19
            X509v3 Authority Key Identifier:
                keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:ce:bb:a4:7b:7f:db:99:89:a7:eb:7b:04:d0:6c:c7:3c:
         18:6d:9f:39:30:24:fd:6c:97:cd:c2:13:cd:fe:bd:7b:d9:db:
         f5:0a:6b:8e:27:1d:9e:8c:6a:1b:2e:49:a7:c5:cb:05:b6:44:
         a5:e5:4f:bf:fb:e6:e9:cf:b1:76:be:76:93:2d:61:3f:47:4d:
         10:ee:cc:e8:c2:d6:a8:4f:31:9e:d0:f0:f4:3f:6c:72:0c:44:
         5b:ca:a1:bb:85:3f:e8:0e:b2:9f:4f:40:3b:f9:cb:06:6f:2d:
         b3:55:8f:21:71:6e:aa:c6:f9:12:7a:a6:8f:4e:91:6b:06:50:
         fa:dd:69:0e:70:bf:f4:6b:5f:bf:ba:6d:ee:67:c9:57:9e:95:
         d3:af:8b:6c:d9:97:3f:12:89:3d:2c:7b:a5:9f:fe:05:77:9a:
         a6:7c:a3:56:79:c1:0f:6a:4a:bd:e3:f4:e8:27:19:24:7e:65:
         84:53:bd:d7:d1:d9:70:78:0d:3a:6e:a2:77:0c:f1:23:30:13:
         6e:db:87:75:e4:28:c8:fc:ae:26:eb:36:a3:41:ef:00:f8:64:
         15:2f:45:cc:0d:87:1c:b7:95:fa:cc:7f:47:ec:e7:32:27:4f:
         ea:f8:b8:5a:7d:c3:0e:ae:9f:63:ad:4d:e8:42:86:32:c4:ae:
         44:18:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:23:26 2024 by rpki-client on console-ams.rpki-client.org