Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File:                     3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier:          MIIBwi3PCdSB5iLMS40ddwn6BsVXxJVEbcZbm5T8aB4=
Subject key identifier:   D7:5E:60:A7:70:7A:6E:5D:B4:DB:C0:EE:65:2C:B7:F3:08:E6:A8:C7
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer:       /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial:       018F4DFEA26FC95B2E02E69A9661FDEA8486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number:          10EB
Signing time:             Mon 06 May 2024 13:01:24 +0000
Manifest this update:     Mon 06 May 2024 13:01:24 +0000
Manifest next update:     Tue 07 May 2024 13:01:24 +0000
Files and hashes:         1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: 5NsjxO91nK7PE6RcuUTMsOK0cW3iA8pnOhrggB/sK74=)
                          2: oFIy6aalwJN43_ICk21upBPQ2aY.roa (hash: EDGXxb+PE4dO5kOe3fdyodp1+vF1CX/8SnY+e8ef5D0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:fe:a2:6f:c9:5b:2e:02:e6:9a:96:61:fd:ea:84:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
        Validity
            Not Before: May  6 13:01:24 2024 GMT
            Not After : May  7 13:01:24 2024 GMT
        Subject: CN=d75e60a7707a6e5db4dbc0ee652cb7f308e6a8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:80:15:bf:2d:aa:c0:4b:e4:04:d7:ae:94:
                    39:04:6d:5a:c7:78:a1:a8:b6:6e:6c:75:bc:f0:b9:
                    78:fb:64:6f:dd:5e:88:3f:b2:3a:60:af:7a:c8:15:
                    6c:82:95:ea:d9:f4:9e:19:a0:ea:4a:da:ac:3c:b0:
                    88:bc:cc:f3:e4:59:fc:a7:32:a6:a1:24:30:97:a8:
                    ab:f0:5f:1a:ac:77:ac:68:08:d2:9b:c6:4d:f3:52:
                    3c:39:dc:74:e3:c5:ea:82:29:73:6c:a7:80:e7:86:
                    a4:e3:28:1a:e0:df:5c:72:a6:fe:6c:b5:82:e1:61:
                    54:1e:ae:ca:fc:06:95:12:15:b3:42:44:8e:d8:33:
                    d8:00:7a:14:d5:ca:3b:47:23:35:71:d2:01:d2:b7:
                    9d:e6:b4:e9:6a:ad:79:10:02:1c:27:3b:e7:ff:bc:
                    0d:e5:78:de:d6:d6:a0:7c:fe:14:44:9e:c1:48:8a:
                    00:d5:c2:e8:1c:fc:d4:db:b3:ec:55:11:94:be:f4:
                    42:82:bd:52:d6:0c:84:74:8b:5e:f8:26:fc:b2:bf:
                    bf:43:eb:5f:18:bd:50:b1:db:b9:b1:b3:4b:a2:9d:
                    60:8d:a6:aa:af:b4:1d:fb:bf:df:fb:0a:9c:11:b5:
                    ff:49:1e:04:27:86:64:ee:ee:54:15:7f:82:95:6f:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:60:A7:70:7A:6E:5D:B4:DB:C0:EE:65:2C:B7:F3:08:E6:A8:C7
            X509v3 Authority Key Identifier:
                keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:bd:a1:5c:43:4b:ca:ec:f4:b1:11:07:6d:9c:27:4c:2c:
         86:7e:db:68:84:8d:82:bb:45:41:81:d6:b3:d0:8c:72:f7:52:
         d9:80:43:df:26:0d:2e:b6:5e:6c:2b:91:c2:87:70:52:ab:c8:
         2f:ab:81:cd:87:60:fe:fb:b8:61:01:4a:b1:aa:38:1f:4a:1a:
         f0:51:69:82:32:c8:a7:66:37:98:b8:5d:3a:0d:b2:62:3e:93:
         6a:c8:f0:66:1a:2a:42:52:0b:4f:e0:30:8d:ac:fb:5c:16:cb:
         f9:3d:6b:31:69:d7:a2:09:c5:bd:e0:34:6b:22:00:f9:c7:99:
         ff:ea:d6:eb:29:c9:17:ba:72:74:1d:25:e8:fc:3f:0e:a2:9f:
         40:60:7e:11:3d:c5:7d:80:a5:aa:a7:0e:e4:10:82:ed:88:66:
         93:63:a7:e1:41:41:4d:84:b9:39:20:93:f5:07:f5:f6:5a:43:
         2b:a3:a2:1a:f6:fa:41:0e:54:5f:3a:7a:68:39:8b:47:57:a9:
         11:64:23:90:df:93:dd:17:0a:81:1a:0d:b0:5c:a3:6b:bc:46:
         88:83:36:e4:60:38:12:7c:e1:66:c6:88:da:c6:3f:11:42:4e:
         24:39:6a:22:d2:db:9e:91:9e:75:97:2d:2f:95:70:14:56:c0:
         eb:be:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:37:58 2024 by rpki-client on console-ams.rpki-client.org