Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File:                     w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier:          8zQkY/9dOVuCfL4Jq/tPUUWJ92z9J+kIu8N5LGpVdZI=
Subject key identifier:   A7:34:73:16:A0:8F:10:DA:2D:B9:07:38:0E:AB:F4:F0:53:61:6B:AC
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer:       /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial:       018F87ED1F824873FF49031013A2BC2E14B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number:          0DD3
Signing time:             Fri 17 May 2024 19:00:15 +0000
Manifest this update:     Fri 17 May 2024 19:00:15 +0000
Manifest next update:     Sat 18 May 2024 19:00:15 +0000
Files and hashes:         1: lVaaLxbdIGRpaWxeNdPow1RB0aw.roa (hash: XIiPm4Ix7BhVRtX5bVVLrlw25L5CCUxMrJTSQ+9lg/g=)
                          2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: sfv6T/BteP0czdINi71rYW/V7JB1N7lZ6tQWjHZljGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:1f:82:48:73:ff:49:03:10:13:a2:bc:2e:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
        Validity
            Not Before: May 17 19:00:15 2024 GMT
            Not After : May 18 19:00:15 2024 GMT
        Subject: CN=a7347316a08f10da2db907380eabf4f053616bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:ae:f6:f8:78:a2:bf:90:f0:a9:7e:c3:ae:
                    c5:29:df:41:54:5c:b5:ed:68:66:49:f0:c4:56:2e:
                    f7:bb:00:b9:73:d0:0f:74:72:56:97:7b:40:74:5b:
                    a6:96:3b:fd:a5:cd:7a:46:66:88:79:37:a6:82:e4:
                    f6:b5:a8:59:cf:7e:eb:64:08:05:24:b8:c6:f6:95:
                    fe:48:5d:5e:51:cb:ad:01:2f:2d:a4:d9:63:70:12:
                    19:2e:54:82:17:76:c2:65:ab:8c:8c:08:1e:67:f7:
                    b3:e6:0e:d7:fd:f4:30:15:09:ad:f1:11:aa:23:74:
                    89:96:eb:28:39:39:37:7f:36:19:28:19:8f:7e:19:
                    13:32:e3:dd:80:9c:7b:04:f6:09:7d:75:06:90:74:
                    de:57:fe:cb:ec:47:ba:b9:3b:0c:9e:0d:f9:1f:6f:
                    18:02:c7:97:cf:af:1a:75:48:7d:41:d9:8b:81:da:
                    5c:98:de:a5:c7:23:61:0c:c1:17:70:1d:de:e9:3e:
                    9f:0f:9a:79:1b:8f:0d:a5:16:8e:ce:50:88:29:21:
                    5f:69:8a:39:7d:77:7b:a9:9c:9e:b6:6d:fa:a4:c9:
                    b7:53:5e:e1:a4:80:bf:e5:17:4a:60:6d:9f:82:e2:
                    c8:22:bf:f5:47:db:88:46:a1:e6:f9:93:51:7f:f7:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:34:73:16:A0:8F:10:DA:2D:B9:07:38:0E:AB:F4:F0:53:61:6B:AC
            X509v3 Authority Key Identifier:
                keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:b2:38:73:56:37:13:8d:a8:1f:09:c6:13:89:ea:02:b9:
         db:a5:8e:1d:b0:98:9f:f4:59:f3:00:11:27:e3:a3:6b:14:81:
         b3:6d:f7:d0:33:a2:26:0f:14:fe:5c:87:64:06:c4:4d:eb:97:
         a8:93:90:b4:49:40:00:58:a4:0c:27:66:a2:f2:cb:8d:a0:44:
         30:10:64:0d:58:e0:bd:97:cd:1e:31:e7:61:ab:89:b6:01:33:
         98:aa:44:d8:1a:19:b0:1d:d9:66:e1:6c:1f:64:e2:79:4f:b6:
         7d:29:f8:75:15:b1:27:d7:3a:ca:82:3e:b7:28:de:40:d7:fc:
         f4:fe:9f:ea:e7:78:8d:61:b3:0a:88:6d:24:26:fe:9f:77:5b:
         a0:5f:0c:fc:4a:72:c6:64:d4:e3:35:2e:4a:79:a5:cf:30:54:
         3b:cf:10:05:47:f0:18:41:dc:32:d8:5b:95:c2:b1:d7:08:88:
         e7:b0:1f:cd:73:c7:94:de:9b:c2:49:69:79:17:c5:e6:b1:25:
         40:3c:5a:0f:e2:1e:56:c8:3c:9e:b8:75:55:68:98:7f:48:78:
         20:6a:a0:fe:e0:c8:57:84:91:44:fe:c8:a5:9f:1e:40:3e:ee:
         da:02:8f:40:06:f3:30:e1:3a:2c:09:a1:f9:eb:79:2c:44:55:
         bf:a3:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:00 2024 by rpki-client on console-ams.rpki-client.org