Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File:                     3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier:          TTwRkh4oKJhf6Opd+ZbbxqczEkH90VoPn/4SXsi5wZk=
Subject key identifier:   8F:5E:27:1F:87:7E:57:53:16:7A:A3:6B:C6:F2:B3:E7:82:40:B3:C8
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer:       /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial:       0191FB2303B081BBF51ED328431F350F1FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number:          C1
Signing time:             Mon 16 Sep 2024 14:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 14:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 14:01:01 +0000
Files and hashes:         1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: LhmlMVnwZc88GuORCnN7NRyKWpeWrf4TcOfAZWYV7HU=)
                          2: LIXLEvF_0n1irAVDtovpIRDGCFE.roa (hash: /eyS/79inTQmZR1HgLbn/58tLe9HbD4S0IuUUZmErNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:23:03:b0:81:bb:f5:1e:d3:28:43:1f:35:0f:1f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
        Validity
            Not Before: Sep 16 14:01:01 2024 GMT
            Not After : Sep 17 14:01:01 2024 GMT
        Subject: CN=8f5e271f877e5753167aa36bc6f2b3e78240b3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:52:78:5a:1f:53:25:ea:24:4b:92:0d:20:
                    0c:f2:95:d9:28:b1:ed:0d:30:53:55:b8:cd:46:11:
                    58:ad:71:10:88:81:13:8f:42:51:2f:7e:d8:5d:71:
                    36:b2:8d:69:10:88:f0:26:ad:af:5f:33:94:b3:78:
                    ba:6f:45:dc:a5:cd:fa:5d:f2:b1:ad:20:6d:e6:55:
                    d2:b4:33:03:c2:96:3e:58:50:e8:92:bd:ec:0b:03:
                    13:ae:5f:c6:d1:0e:09:88:a7:03:4a:9d:d4:9f:19:
                    2d:23:66:77:60:a3:0a:82:c6:c7:83:97:89:9e:74:
                    de:9c:07:b6:2d:4c:da:6d:36:59:ff:11:1c:ff:58:
                    93:d6:cf:ac:4a:40:d9:2e:e6:49:a1:f1:ba:c0:61:
                    88:9c:53:01:ee:98:e1:51:7c:6d:35:d6:05:ed:24:
                    ce:05:23:c1:5d:00:8f:72:ed:eb:6f:7d:2d:c2:2d:
                    cb:6f:22:3e:ab:56:dc:31:be:0d:e8:7d:bc:d3:67:
                    94:af:52:ff:f2:01:27:c1:3f:45:ca:15:73:e1:79:
                    0b:2c:64:d5:61:b8:b5:d3:67:5b:33:f8:c5:ea:3b:
                    13:73:ba:d6:bd:ba:a3:cd:a9:cb:4c:76:0b:c1:00:
                    77:9a:ad:0b:a9:60:52:6d:4c:98:ac:d0:11:f9:c8:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:27:1F:87:7E:57:53:16:7A:A3:6B:C6:F2:B3:E7:82:40:B3:C8
            X509v3 Authority Key Identifier:
                keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:c0:cd:de:b1:dc:14:b9:b9:5e:3f:5f:24:a4:4d:2c:59:
         d7:ab:8c:44:63:71:3a:4d:00:ca:87:34:20:33:7a:4d:5b:e1:
         e7:2b:69:d1:1e:0e:01:80:75:12:68:f5:e7:d9:ea:b2:b9:54:
         9e:4e:d6:fd:d0:76:b6:a6:91:5a:f4:a7:bd:ed:29:ae:ea:08:
         88:f1:1d:d8:55:fa:5d:15:c1:f6:b9:4d:eb:14:4c:b8:8e:5d:
         a3:21:ff:85:12:f1:f4:50:3f:63:be:9a:76:77:d9:cf:5f:16:
         ec:ca:2b:43:09:97:60:93:9c:e9:b9:94:db:8f:52:4e:35:00:
         dd:19:2d:4d:d3:8e:49:dd:56:bd:8a:fd:a1:9e:61:de:b7:b7:
         d1:e0:b1:39:8d:53:06:4c:5d:de:b5:b3:84:68:0a:a3:86:d2:
         5a:6f:8d:8b:1f:a4:5d:26:9e:f0:79:6e:4b:05:57:b3:d2:b3:
         6b:59:3f:41:6e:40:78:8d:4a:fa:3c:43:cb:c4:c3:dc:4d:da:
         76:4e:da:27:a1:d9:29:41:dc:9c:13:fd:38:12:75:98:52:dc:
         3f:46:98:d6:68:60:74:1d:26:c0:a5:46:b0:a8:f4:da:78:4d:
         fd:f3:c4:03:78:a0:0c:90:30:e4:9f:ca:6f:76:7e:c7:b1:dd:
         55:36:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----