Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File:                     Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier:          u9epuLD4VuPZnEUMECZ0kOpuogjDyQ7WI8YiC8iicrA=
Subject key identifier:   52:84:BA:BA:DB:3C:99:F2:A0:F4:20:58:05:31:53:D8:3C:79:5D:DC
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer:       /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial:       018F44FB8E7C329242084CF38C5B76DBDF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number:          03A6
Signing time:             Sat 04 May 2024 19:01:27 +0000
Manifest this update:     Sat 04 May 2024 19:01:27 +0000
Manifest next update:     Sun 05 May 2024 19:01:27 +0000
Files and hashes:         1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: llfxdRkz8XovmzkczKAkrS1jlQkBG7YumdJJIs6Hi/0=)
                          2: d2g8u6TgzrCXsxMPVzmCqWrw33k.roa (hash: V3SEif4oMgYgI+uf7FwPzb/AznJTYIbhn+SI7C1JG3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:8e:7c:32:92:42:08:4c:f3:8c:5b:76:db:df:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
        Validity
            Not Before: May  4 19:01:27 2024 GMT
            Not After : May  5 19:01:27 2024 GMT
        Subject: CN=5284babadb3c99f2a0f42058053153d83c795ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:19:0e:58:fd:5b:d0:2a:37:3e:ac:11:48:
                    35:5b:4c:ed:eb:73:4b:15:5c:54:58:23:3d:e3:66:
                    ef:2d:e8:83:e2:28:95:d1:f3:a8:96:8d:d7:97:2f:
                    88:1b:e3:42:7f:0f:59:12:f1:30:73:ff:e2:a8:45:
                    46:26:1c:93:47:09:53:0e:96:16:14:c5:71:1c:bf:
                    b0:b1:b0:4e:c1:d1:5f:70:23:df:b4:80:5b:f9:5d:
                    6e:01:42:f2:49:ea:67:8a:de:f4:a2:6d:01:3c:0f:
                    8b:8c:0a:d1:f7:9b:d2:d6:6b:88:27:cf:93:bc:76:
                    10:c5:97:27:1d:7d:94:f1:2a:7e:5d:6a:35:44:71:
                    7c:fa:34:d8:0d:5f:ec:4e:ec:1c:cf:3a:2d:c6:e4:
                    41:35:a8:95:5b:f7:ed:70:86:42:24:38:6f:40:f7:
                    b1:04:96:a5:24:43:63:d6:a0:0c:f3:78:cc:2f:eb:
                    d2:1b:56:48:e0:df:ba:ad:ba:4a:f4:2f:75:e6:b3:
                    a2:34:49:75:4d:52:88:f7:45:5f:61:3c:94:21:01:
                    68:b0:d0:f8:bc:36:db:63:fc:92:9a:60:a2:87:fd:
                    38:6c:93:65:9c:e2:11:8a:b3:1f:46:1f:83:e7:4e:
                    99:f0:64:e1:55:81:74:bb:8f:e1:8c:04:9a:df:73:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:BA:BA:DB:3C:99:F2:A0:F4:20:58:05:31:53:D8:3C:79:5D:DC
            X509v3 Authority Key Identifier:
                keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:99:8e:46:af:c4:b3:08:4f:94:3a:da:5b:86:87:06:10:81:
         a0:c3:8c:32:93:19:0c:98:b9:e9:dc:1d:12:0b:60:b0:d7:74:
         55:d0:77:1c:d8:02:a7:bb:f3:5d:9f:76:a8:1c:ad:fd:68:fe:
         56:35:65:fd:dd:4e:c8:9b:14:63:b0:30:51:16:e8:71:75:c9:
         57:2a:9f:65:15:18:aa:f3:72:f5:64:c3:f3:4c:87:a5:99:00:
         0c:0e:12:c7:49:4e:8e:8e:c4:8b:6b:71:b1:a7:93:3d:88:f5:
         c5:37:92:b6:6e:03:d0:5d:58:db:f8:10:4b:33:1c:6c:28:bf:
         22:8a:e3:a2:43:9a:da:c1:02:ea:6d:f2:91:84:29:12:ce:90:
         f6:ef:9f:c4:55:ca:5f:b7:52:82:cb:09:1f:ed:17:2b:4a:45:
         99:07:43:fd:7f:80:fc:04:09:25:bc:56:dc:e9:c1:e0:17:8e:
         c7:6a:87:47:8c:d0:6c:7e:22:f5:6e:70:07:00:d1:a6:40:42:
         8a:14:b7:ab:d2:cb:7b:4c:53:d1:c8:2a:70:78:14:bf:29:3c:
         ea:bf:d1:74:84:4b:05:5f:46:80:bf:da:c5:4d:cb:81:74:5e:
         92:04:a0:37:33:91:d5:2c:f7:11:87:0b:25:65:22:7b:15:03:
         3d:35:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:05:58 2024 by rpki-client on console-ams.rpki-client.org