Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File:                     3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier:          d48gFxVFRdJTsFgDRy4J7S7o6gap71LYo/f3mHW2dM8=
Subject key identifier:   2E:21:0B:78:58:4B:2C:90:B4:05:47:4A:F2:50:12:7B:BD:35:A8:43
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer:       /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial:       018F24CBFDC101F282BAFB22FAAA21DFEFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number:          1147
Signing time:             Sun 28 Apr 2024 13:01:39 +0000
Manifest this update:     Sun 28 Apr 2024 13:01:39 +0000
Manifest next update:     Mon 29 Apr 2024 13:01:39 +0000
Files and hashes:         1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: byh7is8KV5NFagtTstinZ3IS8mIosYefmcPYOl4DtUI=)
                          2: gR3ZJ2F4lOdD1JLomll4wFtYNyU.roa (hash: sp+xQFgGkcMVWfWtCGv++M4hlOJbMsdA/kz1Xx1g/rc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:cb:fd:c1:01:f2:82:ba:fb:22:fa:aa:21:df:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
        Validity
            Not Before: Apr 28 13:01:39 2024 GMT
            Not After : Apr 29 13:01:39 2024 GMT
        Subject: CN=2e210b78584b2c90b405474af250127bbd35a843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:61:80:ce:ae:85:3d:aa:5e:7d:e0:b4:7d:
                    8f:0e:7e:a3:8e:b8:6f:58:d9:3f:a2:ff:87:30:ab:
                    0a:80:b1:ac:fa:35:a8:21:c9:c8:6e:28:03:97:0b:
                    20:bf:01:7c:1b:68:fb:cc:2b:50:ee:55:9e:eb:b4:
                    5d:26:e0:ed:bf:68:de:31:49:4b:84:f5:3c:0e:64:
                    1f:c1:93:a4:87:72:a5:74:f4:04:1d:90:9e:7b:0d:
                    ad:0b:56:de:e3:d5:14:e3:db:fb:84:87:4d:86:d3:
                    59:b2:0a:8a:de:02:f4:05:72:f3:68:3b:88:35:52:
                    ad:28:5b:57:6f:43:cf:7f:77:00:05:b3:19:a4:9c:
                    57:cd:bf:be:c7:4b:b6:fe:18:2f:47:bb:7e:83:aa:
                    90:c4:9b:f3:e7:a5:73:52:b3:51:2a:4b:51:3d:23:
                    f2:ab:8d:4d:31:26:61:e7:8f:a0:48:b2:8a:ab:1f:
                    fa:59:dc:4e:c8:37:0d:82:74:65:c4:02:a8:24:73:
                    d2:be:e5:dd:c8:74:1a:98:5f:45:de:20:e1:a6:49:
                    db:df:0a:b2:0e:52:d1:e8:2e:7a:25:74:32:55:31:
                    bc:11:c9:6b:54:35:b6:0d:94:33:e3:e7:bd:52:fe:
                    37:d5:8d:a5:38:6b:6b:71:01:1f:cc:f4:28:2e:c6:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:21:0B:78:58:4B:2C:90:B4:05:47:4A:F2:50:12:7B:BD:35:A8:43
            X509v3 Authority Key Identifier:
                keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ef:18:6b:d4:aa:76:6d:57:b1:40:86:a8:7b:61:de:9c:51:
         2c:b7:61:c3:29:65:0f:b5:2d:02:c3:58:ed:77:50:dd:d7:70:
         35:3d:96:be:b5:21:81:4a:88:cd:18:1f:de:cd:1b:f0:86:65:
         73:e4:68:37:21:bb:35:46:9e:41:c5:4d:bb:17:1d:71:94:da:
         86:41:88:6c:fd:4f:d2:97:aa:47:c5:39:2f:a7:40:aa:3d:01:
         0c:ec:e6:12:95:05:43:e0:55:5e:00:86:1f:28:41:da:43:f0:
         d3:79:4b:e8:1b:13:a4:15:02:10:15:ea:70:45:06:02:83:fe:
         ef:98:4f:ca:77:a9:3e:c9:be:38:0d:7e:0c:40:8e:9f:0e:81:
         eb:af:2f:57:6d:88:e3:cb:df:58:46:1d:09:84:88:2e:33:ac:
         c2:f2:d6:d8:9d:32:2e:55:89:8a:bb:70:47:61:9a:8c:43:d7:
         0c:90:46:6f:4f:4f:38:9e:ec:1e:b2:2b:7b:63:0d:6f:65:5e:
         24:7f:e1:a6:83:41:f2:7d:22:a0:c6:57:ce:f2:63:92:b4:39:
         1d:31:82:1d:52:81:ff:20:75:8a:ff:65:2c:f3:ac:d4:ab:ae:
         cb:7f:71:66:77:a5:63:8c:2d:24:b5:ee:97:c8:25:2d:ce:1e:
         6c:b0:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:56:34 2024 by rpki-client on console-fra.rpki-client.org