Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File:                     3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier:          pZaDGdUPAxcJqT4ydpf0jRIfqVHAJg2d4WQek93wcKs=
Subject key identifier:   51:96:2C:EE:6C:F2:82:53:D4:41:69:2B:77:74:CA:31:8A:35:A2:1B
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer:       /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial:       018F46EA3E1E1DB391D0414AC9B3BFA8D915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number:          1154
Signing time:             Sun 05 May 2024 04:01:47 +0000
Manifest this update:     Sun 05 May 2024 04:01:47 +0000
Manifest next update:     Mon 06 May 2024 04:01:47 +0000
Files and hashes:         1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: zCam9/DstgXikUv2QWHhCHlpX02N2xvOfS/zI7XaPz8=)
                          2: 46yzQ7mkHOlhNvAzVGPLNjIwfFo.roa (hash: Ch3/LweyXKEtSGDATHRZ+Io5xwHGLxm0WXZd4h1Wjho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:ea:3e:1e:1d:b3:91:d0:41:4a:c9:b3:bf:a8:d9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
        Validity
            Not Before: May  5 04:01:47 2024 GMT
            Not After : May  6 04:01:47 2024 GMT
        Subject: CN=51962cee6cf28253d441692b7774ca318a35a21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:f6:9e:a8:58:1d:77:c5:ab:41:ba:85:42:
                    e4:15:8c:86:70:4a:7a:4d:47:22:f2:e9:d3:dd:e3:
                    41:9d:c5:4e:ba:72:f0:23:2e:81:76:77:87:b5:2f:
                    14:17:be:50:67:e3:ad:f4:bd:be:24:b0:b3:e5:b0:
                    25:41:fa:9f:c9:92:04:19:13:9c:dc:d6:71:df:56:
                    c2:d8:ba:3c:a3:f9:12:3d:00:fa:8b:f8:0f:60:9c:
                    34:f4:09:5b:c5:5c:e2:93:7c:21:66:e0:1e:41:5f:
                    b9:ae:b6:c2:81:fa:2c:2b:69:29:42:03:3a:f2:4c:
                    47:90:b5:bf:e7:dc:6d:1e:88:61:95:ac:7f:2d:86:
                    9d:57:ff:fc:0c:e2:07:ff:9d:a3:6c:17:b3:04:17:
                    21:3e:5f:1f:31:d5:08:9c:85:c5:c6:1d:7b:55:55:
                    dc:40:c4:38:40:fc:32:88:c4:a4:12:db:cf:65:da:
                    4b:85:b9:71:47:e9:28:4a:0a:72:9f:b7:9f:d1:16:
                    f1:cc:79:c1:11:40:96:51:61:c5:c5:e0:b3:4d:79:
                    e4:6e:b7:5c:96:9f:4e:bb:0e:f6:e6:16:02:17:88:
                    fc:d6:f5:de:63:5b:ce:97:a1:a7:3c:98:e4:ff:d3:
                    13:2f:3d:7a:61:eb:a4:14:b8:7a:03:d7:a8:47:21:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:96:2C:EE:6C:F2:82:53:D4:41:69:2B:77:74:CA:31:8A:35:A2:1B
            X509v3 Authority Key Identifier:
                keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:38:10:11:07:0a:f9:f3:4a:5b:42:c8:f4:12:3c:bc:28:a4:
         6b:4b:04:96:40:1a:b7:de:75:52:2c:e4:31:c8:c4:68:46:30:
         9d:87:e3:85:66:3c:64:05:0f:51:3f:5c:30:8d:ca:ea:aa:fa:
         89:aa:6e:3b:6f:ea:ce:92:9c:54:97:f6:fc:c2:54:bc:5f:3b:
         fb:25:32:4e:41:31:65:3d:12:2d:0c:e5:35:a9:5e:07:7e:fa:
         32:9d:ca:4f:4d:54:d7:74:d2:a2:64:ab:af:62:67:2b:6b:26:
         44:42:71:88:6b:09:68:31:31:d6:7f:14:09:ba:43:3b:72:5c:
         81:c6:93:a0:c5:35:1f:98:b5:74:02:04:a7:4d:90:93:04:e4:
         06:6e:f8:9b:e3:61:fc:02:9b:58:bc:3c:3a:39:cb:f8:dd:14:
         08:07:fc:50:10:fb:f0:e2:ee:ad:23:bd:69:ac:fa:a4:26:07:
         f7:6d:9f:09:af:74:c7:fe:1d:b4:b8:48:73:b7:02:7d:51:e1:
         82:57:0e:1d:cd:ec:ff:18:02:bc:d2:3c:d4:45:f7:34:76:68:
         32:cd:88:db:0f:e2:16:4c:23:ca:67:d4:cc:c2:b6:20:d2:2d:
         5d:c4:2f:ad:7b:50:08:98:a9:87:98:7f:b1:b1:6e:26:6a:c3:
         2f:1f:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:43:17 2024 by rpki-client on console-ams.rpki-client.org