Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
File:                     3f3F4pPp59caluYcPb9oWF1PgwU.mft (raw, json)
Hash identifier:          qDzW5gm9AEPq2+7b8jVpe0IYUN55KRSTlHGcn9Pd790=
Subject key identifier:   0C:20:0D:60:BB:FB:2A:02:D9:A1:8E:D8:98:44:D4:99:F2:33:77:6A
Authority key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Certificate issuer:       /CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Certificate serial:       018F874A7844E7249800D0AFCE3030867A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
Manifest number:          0120
Signing time:             Fri 17 May 2024 16:02:35 +0000
Manifest this update:     Fri 17 May 2024 16:02:35 +0000
Manifest next update:     Sat 18 May 2024 16:02:35 +0000
Files and hashes:         1: 3f3F4pPp59caluYcPb9oWF1PgwU.crl (hash: PdAkzUmFXazfYsemm+tJUq4pDZIGZwaSeoua/Ec9bME=)
                          2: WEF3dHGWAn9og_hCPcmwAnwYytU.roa (hash: j8i+Fy+c1XJOd4cadNEH5z/X3oEtrVKbIFK4GNJ7ctY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:78:44:e7:24:98:00:d0:af:ce:30:30:86:7a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
        Validity
            Not Before: May 17 16:02:35 2024 GMT
            Not After : May 18 16:02:35 2024 GMT
        Subject: CN=0c200d60bbfb2a02d9a18ed89844d499f233776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:4c:c3:9f:3b:2a:1a:ea:6b:c4:9c:83:2d:
                    fd:1f:b9:1b:f8:6c:e7:dd:7d:da:51:e2:03:76:25:
                    c3:24:95:e6:6b:78:88:95:12:4c:18:98:f2:d5:09:
                    ee:5a:09:98:ef:d6:e7:45:b5:ae:25:4f:ed:0a:16:
                    3e:aa:09:a6:7a:72:b1:cb:26:fc:cc:39:e5:93:3c:
                    30:ec:4a:03:37:41:90:45:a2:f5:0f:f7:5d:6d:5a:
                    e9:18:75:b6:1a:1d:e8:66:0b:86:85:0f:06:2a:ad:
                    b7:f6:af:80:a8:e2:b6:31:95:cb:b1:dd:50:53:26:
                    f6:9b:bc:fe:7c:cf:27:6b:ca:ce:e4:f9:fa:0b:a5:
                    79:30:fa:14:ab:ce:ef:2a:91:91:bb:1c:fd:e2:c8:
                    c6:75:8d:1a:4d:0e:8b:aa:12:80:e3:a9:29:e1:cc:
                    1d:c2:3d:77:d8:b8:88:cc:59:7f:8e:9e:e2:39:c9:
                    af:d5:e1:d9:a0:ce:f3:a6:ba:d8:a6:fc:2b:96:89:
                    82:e3:8f:b7:68:91:a1:91:44:81:3d:3e:f0:3a:4f:
                    ef:15:7a:8b:43:f6:99:6a:d8:56:95:af:4f:1d:21:
                    20:7f:d3:15:61:15:44:ec:53:b7:c1:9d:9e:a5:85:
                    b4:8a:22:04:02:19:98:45:cc:83:45:cd:20:c6:d2:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:20:0D:60:BB:FB:2A:02:D9:A1:8E:D8:98:44:D4:99:F2:33:77:6A
            X509v3 Authority Key Identifier:
                keyid:DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:23:9c:45:0f:0e:82:7d:a2:5b:1e:30:83:c6:69:84:5a:a3:
         c5:f1:57:a7:b2:b5:35:04:cf:f6:e8:38:51:ba:68:2a:a4:6a:
         54:93:1e:61:27:dc:4d:ce:c6:ef:e0:e0:a8:9c:54:8d:8a:bf:
         8d:e7:f1:08:78:af:b0:c4:c5:07:62:31:bc:7d:65:41:6a:b7:
         4c:df:63:88:f9:2c:9b:99:18:0e:28:17:f7:80:3c:a1:cf:29:
         6e:97:e7:ae:a0:21:c1:d7:8f:a3:8d:37:a5:9c:e1:75:09:c7:
         4e:b6:fe:ac:a1:5b:3d:f4:18:ce:7e:5c:33:5a:b8:d8:15:9d:
         ff:e1:67:78:cf:7d:99:8b:86:92:7f:e5:26:91:22:c4:b2:a6:
         5c:21:75:ca:a1:99:6b:3c:b6:51:26:b7:4d:fa:e6:13:88:e1:
         b0:f3:18:08:42:c6:36:b7:23:57:05:e3:e0:4f:65:8a:e4:0a:
         68:0f:bb:c2:7d:43:54:98:62:51:72:39:f6:a3:da:5e:fe:a1:
         6b:74:2e:e2:64:00:4b:d5:e5:9d:97:20:f4:fd:12:29:65:f7:
         37:67:92:ca:80:cb:e4:34:e4:3b:b9:0c:f2:26:a1:31:38:5a:
         a0:f9:94:43:2f:77:0c:a2:ac:9a:5f:a9:ef:c8:d8:28:40:53:
         38:9c:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:04 2024 by rpki-client on console-fra.rpki-client.org