Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File:                     3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier:          sPqiwn330W4moOGLt4aXZXw/VDKhrdvVb4Y5XTNNHAo=
Subject key identifier:   73:7D:3A:2C:53:CE:00:F1:6F:43:1D:9C:BA:87:AA:E2:F4:91:C8:B1
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer:       /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial:       018F3E543D10D314D1886057686457CA5856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number:          0A8D
Signing time:             Fri 03 May 2024 12:00:58 +0000
Manifest this update:     Fri 03 May 2024 12:00:58 +0000
Manifest next update:     Sat 04 May 2024 12:00:58 +0000
Files and hashes:         1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: Nu3Iry2OyZdkn4/m+9+DWVGcUxDfeVWHfrwFJTbqrk0=)
                          2: XloO2STes9tUAgfZi6JvrRFV5wo.roa (hash: +Q4BzHOt65FP8jT6hs/ygJvbjniCOye1AOslTJ+0V1o=)
                          3: sOuy05KIPShzrBWXNGn-sVkjv-k.roa (hash: Yf+IKYPVVdd7RIscw2W42QUeSqZIN7VaSFfYzAynAtM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:54:3d:10:d3:14:d1:88:60:57:68:64:57:ca:58:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
        Validity
            Not Before: May  3 12:00:58 2024 GMT
            Not After : May  4 12:00:58 2024 GMT
        Subject: CN=737d3a2c53ce00f16f431d9cba87aae2f491c8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:83:9d:0d:ea:59:d6:58:c5:47:87:c7:bf:
                    0e:aa:86:8f:16:f7:13:cd:60:5b:48:e8:a7:cf:c0:
                    b4:03:8c:76:55:e5:ca:66:a5:78:e4:9a:83:70:b6:
                    30:6b:ed:79:89:c5:e0:da:91:a7:21:c6:a7:79:31:
                    f0:34:9a:24:db:91:07:3d:22:67:f5:74:8d:ef:da:
                    36:18:90:89:dd:e8:b5:51:64:75:5e:c6:38:ee:47:
                    3b:aa:57:20:89:07:38:43:d7:67:3d:67:20:31:ff:
                    ce:ac:86:bf:71:d4:ff:93:98:2c:25:3d:3d:d3:47:
                    bd:7a:e2:47:64:90:bf:1e:e5:0f:a8:76:a0:b4:36:
                    dd:47:64:ae:14:41:0f:23:4e:7f:fc:16:68:dd:cd:
                    bf:2c:6c:3c:e8:0a:be:44:65:b5:c2:d0:38:0f:3b:
                    03:a9:d9:82:6e:ea:27:8e:ed:e9:0d:9d:e4:6b:e9:
                    c7:bb:d3:ee:63:d4:cd:8d:37:6e:16:fd:84:a2:bf:
                    91:6d:bc:ab:ab:67:24:0e:18:36:a6:5b:7d:99:7b:
                    c2:46:fd:2f:c2:72:bb:d7:08:64:20:73:f3:7b:ba:
                    2d:6a:10:ec:d6:0c:bf:9d:9f:d9:3a:df:8d:b6:e4:
                    db:61:b3:e9:2f:9b:2e:cc:9b:2d:e5:24:b0:52:3a:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7D:3A:2C:53:CE:00:F1:6F:43:1D:9C:BA:87:AA:E2:F4:91:C8:B1
            X509v3 Authority Key Identifier:
                keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:14:ab:b1:1b:b6:72:27:3e:ae:ca:04:48:dc:ef:87:da:
         7a:b0:c0:d7:fd:65:8a:81:53:c0:aa:d4:12:14:df:77:6a:6c:
         5d:df:d1:d0:8d:ec:34:c8:8d:7f:d4:07:0c:3e:03:0d:a0:42:
         da:f0:40:c2:43:33:6f:e5:37:09:b6:07:73:67:ff:17:76:96:
         50:95:05:94:90:42:9f:3d:52:46:57:e7:53:b5:9d:ac:ba:6f:
         13:99:c0:b7:48:8e:01:19:a0:5b:d1:ba:1e:c8:56:e6:55:40:
         a2:6d:56:8d:7f:8d:da:8d:ec:f8:8c:26:c6:52:8e:c2:9c:57:
         7a:f5:76:a7:4d:93:57:74:66:55:71:d2:79:58:6a:f7:8c:ed:
         d9:6b:57:25:61:c3:9d:30:98:1b:f6:b6:33:c0:35:a7:f7:bb:
         23:31:53:a8:c9:96:f0:8e:48:89:fe:b6:c6:70:04:88:eb:6d:
         86:a7:9c:3e:74:26:65:99:cc:4c:a1:ca:7e:07:e3:6e:11:cd:
         34:8b:8c:83:d4:75:0c:42:9a:97:1f:0b:1e:dd:fc:cf:3b:e3:
         4b:73:f6:ad:5a:05:c5:63:cf:9b:c2:41:f1:2a:1e:24:49:e8:
         35:48:b4:7a:4a:3a:dd:86:ab:a0:8b:b3:b6:ad:17:03:fb:2f:
         7b:2b:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:41:32 2024 by rpki-client on console-fra.rpki-client.org