Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File:                     557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier:          C8V8abU/cyo7XZa6XXlTd/oBJxguxjU98agN3Y2UqJQ=
Subject key identifier:   39:BD:1C:EC:32:84:81:E3:3B:34:FA:88:EB:8A:16:6B:DA:9F:F8:5D
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer:       /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial:       018F362DCDB8D44218B429233860BBD86D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number:          061E
Signing time:             Wed 01 May 2024 22:02:02 +0000
Manifest this update:     Wed 01 May 2024 22:02:02 +0000
Manifest next update:     Thu 02 May 2024 22:02:02 +0000
Files and hashes:         1: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: ojG6L7z6+T+t9TSjius6mFg046KEz6LLcQNIQh3HS60=)
                          2: P1BkrAeQScgfG1fKK0n01ie_UdE.roa (hash: xrd3lFjr5hprEBSwZmI2HYcYMl7RXwUuNhB3QmiOFHQ=)
                          3: yF2BJQw9sbUSbFyDkEFG__ojil0.roa (hash: feoWKBcQIV8z/YcU/pC5DIObz0fqKESmO4btxruJ4rc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:cd:b8:d4:42:18:b4:29:23:38:60:bb:d8:6d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
        Validity
            Not Before: May  1 22:02:02 2024 GMT
            Not After : May  2 22:02:02 2024 GMT
        Subject: CN=39bd1cec328481e33b34fa88eb8a166bda9ff85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:c1:42:8a:b3:d6:0e:4e:55:f0:9e:cf:dc:
                    c3:ca:b0:2f:a1:67:05:e4:63:cb:f9:75:02:78:30:
                    b4:4b:d2:6f:f8:b3:64:df:a9:60:0e:71:16:ff:58:
                    28:7b:3e:48:7b:3c:e6:9e:66:16:7a:e4:fb:ac:f0:
                    0e:97:97:c9:6a:47:41:b6:72:30:7d:5d:af:85:9b:
                    be:34:64:39:cc:bb:e2:47:56:54:03:78:7b:cd:6d:
                    f9:70:29:5d:28:20:b3:2a:39:94:ae:dd:aa:10:df:
                    5e:02:07:f2:9b:ce:ac:6c:a0:3f:db:d9:70:e7:b4:
                    24:63:93:eb:2c:e8:df:f8:c5:73:19:59:e8:a7:07:
                    13:07:b1:db:e0:0b:25:8b:1c:76:05:5c:6c:69:92:
                    1a:21:fb:16:4d:9d:42:2d:98:35:cd:03:b4:dc:76:
                    6c:70:23:62:d3:cb:7d:d6:b8:a0:7d:df:91:e6:c1:
                    c6:57:c6:c3:af:0f:16:6f:78:cb:3e:86:87:37:b8:
                    5f:9f:e3:34:e4:e3:d1:a9:6d:ac:05:c5:ff:8c:da:
                    5d:82:80:da:a6:36:f8:56:88:93:5d:50:0e:85:fa:
                    63:09:91:28:43:3e:ca:9b:0d:45:bf:2a:7b:a3:f9:
                    a2:ef:83:0d:b4:17:30:88:d9:1e:78:f2:3d:c7:34:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BD:1C:EC:32:84:81:E3:3B:34:FA:88:EB:8A:16:6B:DA:9F:F8:5D
            X509v3 Authority Key Identifier:
                keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3b:21:6a:44:cd:91:30:cf:e7:5a:bb:58:12:fd:35:fa:8e:
         0e:50:de:00:3c:02:9f:5b:7f:76:5b:40:a9:5a:3e:97:d2:90:
         b6:b3:bc:33:d5:d4:4e:04:ed:59:23:59:6d:7c:47:8b:fd:58:
         3d:f5:6f:e9:83:c6:3f:63:91:de:ee:26:4d:bd:ec:b0:68:c9:
         09:6d:6f:ec:7d:cf:b6:5d:0b:f3:45:a0:9f:fb:e6:ba:ad:b3:
         96:f1:e1:7c:42:23:67:87:69:28:36:a3:fe:da:d7:fa:75:24:
         e5:a7:85:9b:ac:a7:da:93:5f:77:25:d0:95:57:d1:51:d5:bc:
         b4:33:ee:2d:c2:00:fd:ee:f6:a5:37:b8:67:a5:e0:5e:df:82:
         f9:1f:00:fe:ac:47:0f:4d:65:6b:58:9c:85:80:6c:65:7b:0a:
         2c:01:e9:e7:7b:81:a8:d2:0a:fc:a4:d2:3b:3f:a6:82:0f:1a:
         48:48:3d:b9:bc:80:6b:ed:b5:5a:aa:34:11:0a:4d:3c:6e:25:
         38:be:c9:ab:3f:48:17:ab:40:9d:68:ff:d7:2c:25:e2:2a:ab:
         f5:cb:2b:f6:29:fa:62:a0:f0:6d:d5:bf:a5:e3:6e:28:ca:b1:
         99:78:87:48:17:b2:a3:85:41:17:b0:16:05:74:52:a3:0a:22:
         bd:e0:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:41:04 2024 by rpki-client on console-fra.rpki-client.org