Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
File:                     94tjVHSP4-hS4GSYKCwhVAB1_GY.mft (raw, json)
Hash identifier:          333eRPj1bbs52HBnxgODn41khF5HXOokT/CeSCs7/Vw=
Subject key identifier:   3A:80:C8:DF:A5:A3:87:EC:07:D5:06:51:5D:65:5B:80:15:86:5A:1E
Authority key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Certificate issuer:       /CN=f78b6354748fe3e852e06498282c21540075fc66
Certificate serial:       018F6F40C739F84692AF84B1BB39E379FCA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
Manifest number:          038E
Signing time:             Mon 13 May 2024 00:01:07 +0000
Manifest this update:     Mon 13 May 2024 00:01:07 +0000
Manifest next update:     Tue 14 May 2024 00:01:07 +0000
Files and hashes:         1: 94tjVHSP4-hS4GSYKCwhVAB1_GY.crl (hash: Ct7XmkcYajHM7+dsXzy3yqgtFtxRDLQiUtzW4xeZFHI=)
                          2: skxbN87EKfO25iOZwfa0FuP27AE.roa (hash: y8VVp5t2w/hkTVlpGOPnt5dGMU/7v9yDHLXtX0yAV74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6f:40:c7:39:f8:46:92:af:84:b1:bb:39:e3:79:fc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78b6354748fe3e852e06498282c21540075fc66
        Validity
            Not Before: May 13 00:01:07 2024 GMT
            Not After : May 14 00:01:07 2024 GMT
        Subject: CN=3a80c8dfa5a387ec07d506515d655b8015865a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:6f:62:fa:c0:42:2e:53:23:6f:34:0b:62:
                    90:49:a9:48:c2:49:d6:47:41:21:c6:cc:80:fb:35:
                    9e:2d:f7:7e:fa:2d:a6:4c:f7:b8:e3:00:72:44:af:
                    db:ae:95:b3:98:ab:f6:47:38:b3:d8:81:1c:be:67:
                    6b:5e:3a:48:74:61:18:45:d1:05:8a:08:1e:21:bb:
                    f6:83:ac:27:48:a4:e3:cc:57:75:7b:7a:70:50:c0:
                    10:5f:59:66:1b:2c:74:80:35:a3:56:7f:75:8d:a3:
                    aa:8a:ee:c8:e3:ce:74:aa:04:5a:e5:84:bf:e9:20:
                    92:43:92:0e:8a:8f:bb:17:bd:a0:3f:39:d0:75:9a:
                    82:1b:54:b4:c5:06:69:83:d0:c9:b8:ef:07:58:45:
                    19:ca:99:82:1e:bd:e1:ca:64:0c:b4:70:2c:5b:2d:
                    a5:59:82:50:b3:ef:37:31:89:62:c9:45:b4:6c:61:
                    88:d6:81:7e:8a:d8:fd:dd:13:3a:9f:57:c6:c5:dc:
                    39:2c:fe:71:07:f5:e0:a2:77:a4:79:f2:15:8a:bd:
                    84:04:2b:8a:e3:11:00:39:e3:0c:8e:b4:34:61:21:
                    4f:d4:40:6c:40:da:56:de:67:38:2c:56:c5:b9:19:
                    7a:df:71:e5:28:cf:89:0f:37:67:8e:4b:fc:f4:d7:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:80:C8:DF:A5:A3:87:EC:07:D5:06:51:5D:65:5B:80:15:86:5A:1E
            X509v3 Authority Key Identifier:
                keyid:F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:84:d9:53:9f:94:75:70:f4:c4:e3:0c:b4:20:f0:86:04:25:
         0d:72:f7:bb:e4:4c:b9:34:23:de:3a:02:19:de:bf:f9:a4:86:
         0f:a6:bc:09:1d:33:71:85:a8:3d:11:70:1b:5f:eb:49:61:43:
         c6:b1:7c:87:d3:c0:ec:0a:1c:38:98:a3:34:5f:71:0a:4d:9e:
         57:47:31:75:7f:11:96:84:db:e1:8a:63:de:e2:03:6a:de:c6:
         37:85:ce:fb:1a:91:a3:8e:0e:4d:cf:ab:f2:99:be:10:79:78:
         d4:f4:ce:e7:76:a3:00:68:94:b5:2d:19:7a:0e:73:fc:0f:7b:
         32:0c:36:fe:a2:5f:96:ac:fc:e9:4a:b6:f2:11:25:ae:37:03:
         a8:43:c8:01:08:3c:35:5e:43:e0:8c:12:ce:3f:45:ef:7a:cc:
         ea:a3:e2:7c:d8:98:d8:a2:32:4c:e6:5b:1a:86:8e:4b:dd:3d:
         fc:cb:01:1c:08:4d:29:a7:31:96:58:c5:90:50:b0:12:ab:68:
         c7:75:71:1b:7e:06:76:c8:77:0b:fe:fe:af:c0:17:e3:bf:e9:
         33:85:dd:aa:89:4b:e8:03:11:a0:81:e2:10:5b:56:c7:91:0c:
         f2:dd:1e:55:5b:08:6e:92:72:06:6d:63:b7:c3:a9:28:2a:c6:
         e0:a5:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 00:39:06 2024 by rpki-client on console-ams.rpki-client.org