Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File:                     3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier:          frJmheUiiexHn0/36wmlNsKkELYWyAgXVxIKVXkXIF4=
Subject key identifier:   51:33:E3:54:88:98:E7:57:D5:44:B8:20:57:11:6F:8C:0C:71:59:73
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer:       /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial:       018F3D0AB72C4BEEF2BF905E2AB2D241FA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number:          0BEC
Signing time:             Fri 03 May 2024 06:01:03 +0000
Manifest this update:     Fri 03 May 2024 06:01:03 +0000
Manifest next update:     Sat 04 May 2024 06:01:03 +0000
Files and hashes:         1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: noMeIXFUl0aoMGv+QFtxfWJBa+HL10WUFFQd6uyp5KU=)
                          2: 3L4hje9cM3cFKTWq_sIDoRCg5_U.roa (hash: T+NsYRL61m3HK9gZNG2a5kPbmvjZSw7AcQYXis9jiU0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:0a:b7:2c:4b:ee:f2:bf:90:5e:2a:b2:d2:41:fa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
        Validity
            Not Before: May  3 06:01:03 2024 GMT
            Not After : May  4 06:01:03 2024 GMT
        Subject: CN=5133e3548898e757d544b82057116f8c0c715973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:36:a2:40:a2:4f:66:2d:45:06:b4:bc:06:
                    19:3a:69:1c:18:47:e0:2d:a0:73:d8:cf:7e:29:2f:
                    ff:f6:67:a3:52:d7:f0:7b:5e:73:3b:62:6a:55:45:
                    eb:a2:28:c1:14:94:2a:5c:b0:65:b1:59:9c:dc:b1:
                    a4:24:8b:08:ae:30:23:8a:e0:fc:64:3d:2d:44:e5:
                    6e:1e:d3:ef:9e:57:53:75:b5:67:1c:41:cf:88:86:
                    ae:48:53:c9:11:d2:e1:73:5d:e0:e9:83:e6:c5:07:
                    ed:bf:f1:77:97:67:07:30:f3:9d:6f:2e:92:37:d7:
                    bf:22:af:ae:5c:27:5a:7b:19:a6:a0:e1:90:62:0d:
                    6a:66:1e:2f:34:e3:66:76:4f:5e:c6:55:9c:36:fa:
                    b2:f3:40:2b:85:cd:1e:f1:b2:6f:2f:21:61:10:eb:
                    0f:a4:a8:0e:22:5a:de:c6:92:5a:0b:ac:a1:7f:d5:
                    ac:80:5a:d9:2b:ab:0c:b7:c6:08:eb:52:8c:a0:d0:
                    a2:f7:30:53:23:2b:74:3e:62:52:8d:77:39:b4:1e:
                    cb:e8:17:6c:a5:de:eb:63:cc:bb:eb:04:45:be:f5:
                    cb:0c:35:17:da:05:82:02:f6:d5:9e:0d:a1:d4:bc:
                    38:c9:9c:bd:11:38:50:83:d6:41:f8:9f:5c:57:fe:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:E3:54:88:98:E7:57:D5:44:B8:20:57:11:6F:8C:0C:71:59:73
            X509v3 Authority Key Identifier:
                keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:86:95:09:08:07:19:21:58:ae:12:1c:c4:c0:c7:de:e2:
         c6:5a:9b:44:53:e8:e0:42:46:0f:eb:db:48:4b:1d:4a:b4:43:
         7a:15:04:40:99:af:31:e9:f5:8d:8a:cf:43:fd:2c:40:80:b3:
         35:3b:94:bd:a3:33:4d:01:77:fa:e1:b0:db:af:4d:66:eb:ba:
         52:43:23:9e:f1:41:8a:e0:4b:a2:be:7f:f3:cf:bb:12:0d:39:
         61:13:72:27:aa:67:51:30:bf:9e:2b:82:52:4a:0d:20:26:27:
         10:91:45:c5:ce:9a:ef:15:9d:30:23:31:89:19:7b:56:c4:aa:
         1c:8a:28:4f:ec:4a:d0:43:9e:21:c1:42:1f:2c:45:cf:a4:7a:
         56:39:02:bc:66:49:66:59:16:bf:3b:e2:8f:4d:1a:0f:53:f4:
         f4:03:c4:f1:23:7b:45:71:76:05:a1:75:81:37:49:76:29:9e:
         08:56:a1:04:85:c2:8d:d8:e0:6e:c1:05:6e:da:26:5a:12:0d:
         9a:1e:2e:4a:5c:94:6b:b9:b4:10:08:44:77:ae:24:27:d2:34:
         5a:36:6e:4e:78:06:84:cc:c1:88:33:4c:b7:0b:f6:86:43:73:
         42:7f:ec:d1:18:5d:ed:71:72:ac:55:67:5c:02:6e:7b:dd:58:
         0a:b8:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:14 2024 by rpki-client on console-fra.rpki-client.org