Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File:                     MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier:          X6qWaBVXwYHysoYE29C3Ar+2KysPllnlSuM6Cq0MbNY=
Subject key identifier:   BC:49:B0:E3:D1:DC:8D:5E:5B:F4:75:98:36:12:8D:1A:C1:B8:A9:C8
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer:       /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial:       018F874A32D77F8A551BD61F3144B08EE20F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number:          0321
Signing time:             Fri 17 May 2024 16:02:17 +0000
Manifest this update:     Fri 17 May 2024 16:02:17 +0000
Manifest next update:     Sat 18 May 2024 16:02:17 +0000
Files and hashes:         1: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: fhVPQDueesAJAaF/GxsXHRzsrSsS2EAZNX3zocHg78s=)
                          2: XjhX2RWMLw-HTRDK9-d8pbtlRec.roa (hash: nbVSKB0FHX6MmK2krZupIghrP/PWByhQcaWUjeHBueI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:32:d7:7f:8a:55:1b:d6:1f:31:44:b0:8e:e2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
        Validity
            Not Before: May 17 16:02:17 2024 GMT
            Not After : May 18 16:02:17 2024 GMT
        Subject: CN=bc49b0e3d1dc8d5e5bf4759836128d1ac1b8a9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:97:23:b8:8d:ad:74:f9:42:43:8c:3f:6b:
                    96:90:2e:c3:dc:af:4c:49:c9:60:76:44:da:a9:78:
                    51:4c:a5:c3:d7:8c:d3:80:ad:3c:96:e5:b6:ef:af:
                    59:ed:40:0c:31:38:71:35:5f:06:38:16:4e:4d:a4:
                    0a:ff:36:d8:68:1f:a5:b8:7e:22:a7:8d:8a:b8:45:
                    d7:80:ef:8d:1a:61:1f:db:c4:bc:64:8a:0b:90:4a:
                    00:0b:52:60:b9:2c:e0:e5:f6:37:60:c6:98:f3:9b:
                    1c:03:63:b8:c3:2f:21:7a:4c:16:d8:1c:d2:96:4e:
                    92:21:d1:46:01:b1:2f:50:91:4e:62:ba:58:04:55:
                    98:5a:e8:3a:32:e4:b9:bf:80:2e:76:8e:3b:df:95:
                    ae:ac:e1:20:8a:47:f2:e3:3e:d4:80:75:cd:74:26:
                    b4:95:a4:97:a4:fe:f2:1f:21:57:5a:3a:fb:65:78:
                    b0:ce:e1:80:3e:4c:91:19:9d:64:c2:38:dd:98:2c:
                    38:b6:d5:b6:ac:71:7b:f1:e2:e6:86:7a:de:50:21:
                    f0:0c:cf:dd:e9:59:d9:95:d6:12:b3:c7:30:2f:09:
                    54:6a:15:07:01:ca:d3:d5:ab:e9:50:25:82:cd:ef:
                    be:91:a6:a6:d0:64:2a:1a:4d:e1:02:66:40:be:d0:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:49:B0:E3:D1:DC:8D:5E:5B:F4:75:98:36:12:8D:1A:C1:B8:A9:C8
            X509v3 Authority Key Identifier:
                keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e6:49:92:f2:5e:45:0f:11:74:71:a5:91:3c:6b:30:68:5a:
         69:f2:c4:01:4f:60:de:4d:0e:8f:81:b6:71:68:51:9a:57:03:
         d9:85:a3:a5:d3:cf:9d:77:65:41:3a:e9:71:ca:c4:b9:76:ea:
         66:26:d8:d2:91:d9:2d:0e:21:85:8d:57:03:b7:50:9c:83:dc:
         55:04:60:4e:55:d2:07:7b:bf:4f:98:07:07:16:17:22:75:06:
         46:11:2c:73:a5:a3:fd:43:ca:48:32:64:e1:79:88:ac:e3:19:
         10:43:01:0f:ca:42:a7:73:61:6e:60:a7:8c:1c:df:6e:72:15:
         55:46:db:28:37:36:1c:b4:d4:82:e3:fc:2d:90:ff:7e:27:cc:
         ce:3e:24:60:dd:b1:4b:41:c1:d3:9b:0f:4c:1d:4c:0b:82:d2:
         5c:d7:bb:30:e5:2e:fc:cb:b7:df:d1:5c:f9:1f:d4:bc:1f:f5:
         55:9c:d3:48:1f:46:de:71:e9:96:c7:fe:df:ab:58:a2:b8:9e:
         4e:4e:b4:89:54:bd:e9:c0:0e:7e:81:1d:44:93:26:e9:a1:c1:
         b3:45:ca:3c:d7:14:e3:81:06:fc:13:17:5c:7e:f6:5a:0a:b5:
         c0:57:46:ca:c1:d8:d0:e3:67:8c:05:a7:f2:95:1e:86:2c:f9:
         5d:66:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:39 2024 by rpki-client on console-ams.rpki-client.org