Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File:                     H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier:          X5DynZcQXBWYYnZFolgTP5fGCWfukmZFhhuhM7/4Wsc=
Subject key identifier:   32:15:20:3E:A2:21:45:0C:DF:F6:D1:DC:4C:97:87:08:6E:5F:78:95
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer:       /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial:       018F3BF83664B30EA9C2719568E065F122BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number:          0587
Signing time:             Fri 03 May 2024 01:01:13 +0000
Manifest this update:     Fri 03 May 2024 01:01:13 +0000
Manifest next update:     Sat 04 May 2024 01:01:13 +0000
Files and hashes:         1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: L6RRC5kOEtwti5I5lDbH26QMupCFtpQfIoij8Zt2vos=)
                          2: cPrcPuxIiv_e0GLUcs9i35R4pKw.roa (hash: EDRxpjVjRnDBiyhMgF6vr951tKwOOSGW2p9f3/m9qFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:36:64:b3:0e:a9:c2:71:95:68:e0:65:f1:22:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
        Validity
            Not Before: May  3 01:01:13 2024 GMT
            Not After : May  4 01:01:13 2024 GMT
        Subject: CN=3215203ea221450cdff6d1dc4c9787086e5f7895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:f8:ea:c7:1b:4e:3e:69:00:3d:55:79:f8:
                    07:7d:02:cb:ad:a2:80:98:43:04:d6:ca:92:93:7a:
                    e9:8c:0d:68:d9:28:2d:16:69:7e:8d:77:d5:e5:1a:
                    d5:80:eb:75:fa:06:a6:38:73:b5:07:18:0a:d4:29:
                    57:2f:9f:15:46:31:97:eb:66:19:59:20:92:7b:83:
                    03:72:2f:c1:09:c6:b0:4b:aa:c1:94:84:04:61:94:
                    10:c3:d6:40:a8:86:a0:ae:c3:62:59:a5:e2:8e:4b:
                    d7:d6:d6:de:d2:98:58:ee:f8:de:42:9e:c1:86:ec:
                    54:13:ed:b7:4b:82:4f:4b:61:8d:5c:16:4a:70:af:
                    ef:8a:6b:4d:48:fe:96:c6:67:c1:05:f3:08:1b:a4:
                    5c:36:f5:a7:c1:bf:8f:72:7f:33:62:14:d8:b7:2e:
                    64:77:e9:b3:01:ef:e9:98:38:de:03:1b:9f:8a:f7:
                    ee:16:29:23:ef:6b:5f:3c:ed:fa:d1:dc:bd:c8:70:
                    fe:f0:51:b5:25:ca:ef:3b:8f:47:1f:6a:0b:98:de:
                    9d:6c:d5:1e:aa:d8:ea:1b:61:76:da:e5:d6:ba:6e:
                    6c:64:fc:e6:31:5a:d0:c5:98:5f:5e:bd:6c:70:b5:
                    84:30:c1:ff:f5:91:5c:7f:8b:8b:a2:ab:60:9b:8e:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:20:3E:A2:21:45:0C:DF:F6:D1:DC:4C:97:87:08:6E:5F:78:95
            X509v3 Authority Key Identifier:
                keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c3:e6:c4:8e:d8:52:66:29:9a:45:81:72:3d:9b:ab:86:78:
         a0:8e:9a:d1:db:2e:b6:b0:5f:7b:db:45:69:a9:ac:bf:c7:55:
         9e:92:f0:45:aa:a6:fc:bf:5a:ba:37:f8:b9:08:b8:1f:6d:8a:
         65:87:97:71:c5:4a:9f:6c:f5:1f:08:ac:b6:ff:d9:a6:c7:49:
         c3:93:d7:b3:54:b9:ea:10:b7:56:a6:3c:a0:14:f8:ac:a9:48:
         9b:5a:82:b7:a3:9f:96:10:08:da:38:03:b6:69:c7:2d:d0:f5:
         af:43:bb:41:d0:11:0a:d6:13:84:a5:cc:0d:e6:86:d9:2f:40:
         77:bf:89:44:f5:f6:df:ce:75:ff:ac:5f:22:a2:1a:5c:12:d3:
         91:8b:40:09:fc:a3:4a:f3:74:0f:93:93:be:20:00:11:07:f8:
         cc:26:49:1f:ea:d0:92:aa:0f:7d:72:cf:0e:0a:35:82:86:09:
         34:7f:61:7e:d2:0e:55:8a:e9:41:f0:b7:3d:b3:72:71:65:a7:
         5d:37:79:76:50:13:93:84:8d:c1:3e:e1:fe:d0:b7:b4:d4:4e:
         8c:a3:7f:36:b8:ba:10:3b:7e:6a:36:06:8b:b3:3b:7d:1a:8d:
         42:cb:e4:1a:6f:7b:06:25:6e:0a:dd:12:47:5b:65:fe:1b:c1:
         10:4e:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:16:22 2024 by rpki-client on console-ams.rpki-client.org