Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File:                     3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier:          fts4c65LchgjcKGBRAuIb6aidqOY0TBzGWQbkHPamA4=
Subject key identifier:   81:7E:C0:28:C3:36:02:AF:E2:29:CF:E7:30:10:1F:F7:4B:D6:80:AF
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer:       /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial:       018F1E5B6471B6EC8EC7C749837D12433118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number:          0E71
Signing time:             Sat 27 Apr 2024 07:00:56 +0000
Manifest this update:     Sat 27 Apr 2024 07:00:56 +0000
Manifest next update:     Sun 28 Apr 2024 07:00:56 +0000
Files and hashes:         1: 1MRv46aLV6-VLBS31_4qQTAwYso.roa (hash: 72YKuxwBGoqORbaMQsEqopCqCc8uRmUa4vYgeCG91X0=)
                          2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: 6Yve04i8oYOsxGZX9UhujOmPKRIXRAKDIdyawEjgm3o=)
                          3: AJc3vSU7PMt9ixG88lQ2ok35iUw.roa (hash: D/6jsDxroId4i5lO1ohr+FLqTi4El1b/10z/tBvlvoo=)
                          4: KCiky9_Pt9Z3JjgVmCu_5wM-X8w.roa (hash: WlrHbLt/7e1Eel8fV1VhGtAMPHdvEvQu58Plo5Zv+Tk=)
                          5: dqCfspEn8yrdqMXW1ZukNWIgbqM.roa (hash: oHCT/quGvp8IVC7CzC4u4VV266uou0DcTvOLlOf1NOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:64:71:b6:ec:8e:c7:c7:49:83:7d:12:43:31:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
        Validity
            Not Before: Apr 27 07:00:56 2024 GMT
            Not After : Apr 28 07:00:56 2024 GMT
        Subject: CN=817ec028c33602afe229cfe730101ff74bd680af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:e7:e5:e9:dd:b3:61:9d:29:1d:1c:9a:c1:
                    62:71:77:42:65:9a:b3:3c:3a:72:3f:41:56:5c:58:
                    44:3f:6d:e6:92:bd:8f:a7:81:a5:59:dd:17:47:05:
                    bf:c2:ee:92:9d:7a:3a:91:8c:d7:6a:57:d7:ff:cd:
                    83:db:e3:2f:8e:16:ed:95:f2:16:95:5e:fd:9f:c4:
                    98:e4:dc:05:31:35:71:71:6d:a7:ff:08:4b:ac:93:
                    35:05:86:d3:87:3b:07:68:2a:2a:23:35:db:f1:c6:
                    fd:ce:a5:5c:fa:68:7d:6a:3c:eb:24:4c:1d:f3:db:
                    f3:19:cb:38:98:ff:ca:a8:0f:17:8d:0e:65:3e:02:
                    d7:dc:e8:34:92:fe:68:ac:f5:dc:f0:3a:ca:66:2e:
                    02:fa:98:05:35:cc:1d:ed:bd:8e:6f:04:59:90:9f:
                    df:0d:2c:10:d5:86:96:a9:39:7d:58:fb:d5:31:2d:
                    78:3a:c5:9e:5d:ed:71:eb:42:51:c6:ea:70:19:3d:
                    de:34:fb:88:c5:3f:5c:88:b8:fe:06:68:ec:a2:ff:
                    86:ad:92:fb:6e:1b:b6:52:b9:de:53:13:43:86:2d:
                    6e:5b:68:2c:0a:7b:b6:dd:56:3f:34:53:96:a4:11:
                    53:3b:01:b8:f3:3b:78:53:37:54:0d:79:8c:d1:6c:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7E:C0:28:C3:36:02:AF:E2:29:CF:E7:30:10:1F:F7:4B:D6:80:AF
            X509v3 Authority Key Identifier:
                keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:2f:d0:dc:d8:7e:82:a8:38:b4:81:ef:2a:3e:cd:a7:60:6e:
         4a:b2:65:9c:59:99:4f:78:3b:fb:d3:bc:56:ac:24:23:e7:c8:
         95:c3:a0:d0:48:02:70:d7:a1:9a:73:bb:f5:9b:be:ad:1e:57:
         66:03:15:e6:06:13:75:9a:ba:c4:f7:b0:28:30:93:cd:22:95:
         fc:f7:c6:e2:4a:4c:a0:ef:b0:bc:16:4d:87:29:34:28:9f:65:
         f0:39:c3:77:f3:cb:03:6f:b6:e0:7c:99:3e:41:f9:38:fb:fa:
         29:3d:66:d7:97:a1:39:e7:70:bf:b9:73:fd:f4:14:31:37:bb:
         5b:52:21:e1:e3:dc:68:20:5c:a8:e9:cc:f4:3e:b2:13:44:57:
         a8:c6:d1:15:8f:26:df:a2:b6:62:f9:68:9a:5d:d3:7b:0d:85:
         3a:e5:80:b4:8a:6b:96:98:10:91:31:a5:32:84:e0:e7:d0:6d:
         d8:7e:1d:78:67:be:92:08:ca:9c:98:df:cb:8c:a8:7e:f6:17:
         60:e4:00:50:c6:e0:31:a1:c1:bc:14:45:0a:fc:80:fc:de:3a:
         00:4f:f7:a1:42:f8:7a:8a:ea:cb:b3:ac:43:5f:5f:e2:25:35:
         16:56:8b:25:0b:70:fe:ff:0c:a7:aa:75:86:c9:88:22:f6:3a:
         68:79:94:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:10:46 2024 by rpki-client on console-ams.rpki-client.org