Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
File:                     B3NNjbW2txqCyQHr304M7EKZ6VY.mft (raw, json)
Hash identifier:          KXHZuR4nnQWlQwIhQCIg9DjeN/UMKiDkKaIFuoz/MZ4=
Subject key identifier:   39:1D:1A:DA:F8:29:06:B8:17:4A:0D:D9:82:B7:39:E6:82:2A:E1:50
Authority key identifier: 07:73:4D:8D:B5:B6:B7:1A:82:C9:01:EB:DF:4E:0C:EC:42:99:E9:56
Certificate issuer:       /CN=07734d8db5b6b71a82c901ebdf4e0cec4299e956
Certificate serial:       018F88248EB7E634A18AEC18ADCB21268DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
Manifest number:          0110
Signing time:             Fri 17 May 2024 20:00:48 +0000
Manifest this update:     Fri 17 May 2024 20:00:48 +0000
Manifest next update:     Sat 18 May 2024 20:00:48 +0000
Files and hashes:         1: B3NNjbW2txqCyQHr304M7EKZ6VY.crl (hash: 48P0cT94AdjzSxLwQSN0Iz8RJnVHw9Ezp8GSLK5h6gs=)
                          2: TkOkmurtkcqJLYhrU7Aou10KSeA.roa (hash: ourIAKcAXMk6R+tQfeBogZgpaZXAEfw+r1BnBPigRwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:8e:b7:e6:34:a1:8a:ec:18:ad:cb:21:26:8d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07734d8db5b6b71a82c901ebdf4e0cec4299e956
        Validity
            Not Before: May 17 20:00:48 2024 GMT
            Not After : May 18 20:00:48 2024 GMT
        Subject: CN=391d1adaf82906b8174a0dd982b739e6822ae150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:36:c6:03:57:ff:90:af:24:2e:b1:7b:55:
                    3f:59:d3:6d:73:8f:9c:06:98:21:00:f4:c4:8d:45:
                    00:e6:04:85:4c:97:d4:1b:b9:6d:71:9c:f7:9d:23:
                    c1:d7:5e:01:7f:58:08:03:52:67:9e:0b:01:30:10:
                    92:07:de:5f:b4:0a:37:86:6f:7b:a5:23:46:25:f7:
                    85:2d:4e:fb:f1:a8:43:98:fe:3c:10:84:e3:84:8d:
                    0b:72:40:55:ab:bf:2e:96:71:81:01:01:19:8e:bd:
                    c5:0d:d0:e6:5d:ea:03:7e:82:61:e2:b0:c8:08:47:
                    ca:e9:a5:58:16:9c:8c:dd:18:5d:37:bc:bd:ce:47:
                    79:cc:4b:e5:1b:a7:1b:69:80:f4:89:6c:05:a0:9f:
                    61:e5:ce:b1:b1:77:98:3b:9a:f6:0b:24:54:c8:c0:
                    fe:f9:83:b4:c0:06:fb:62:17:05:37:85:a3:26:bc:
                    b5:2b:5b:7c:a7:48:96:3a:6b:eb:95:a0:7e:ca:15:
                    3e:4b:81:8f:dd:1b:54:64:cd:ad:59:e4:5d:76:27:
                    e0:4c:95:80:6e:0d:e4:71:6f:fa:95:c4:da:23:26:
                    56:01:df:93:f6:5f:d1:8d:e1:c5:2f:9f:e8:a1:89:
                    b7:ee:85:1c:9a:6e:04:17:d0:ee:c2:17:d5:44:58:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:1A:DA:F8:29:06:B8:17:4A:0D:D9:82:B7:39:E6:82:2A:E1:50
            X509v3 Authority Key Identifier:
                keyid:07:73:4D:8D:B5:B6:B7:1A:82:C9:01:EB:DF:4E:0C:EC:42:99:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:88:6c:45:d7:90:1a:76:3d:ae:da:4b:cc:d7:40:c0:74:
         a7:77:1b:80:68:1c:87:45:c6:34:ca:9d:ab:3d:c7:4a:4a:a2:
         05:c1:09:fe:95:e0:e1:3b:2f:0b:90:a3:0d:e0:e1:90:f6:2b:
         bc:a0:58:46:4f:aa:f6:76:38:1e:75:38:17:6e:31:5e:1c:fb:
         b5:82:17:3f:dc:b9:32:bd:eb:e0:f6:30:78:6d:3f:cb:f2:60:
         88:ef:9b:a1:c4:81:20:d9:a1:06:c4:59:3b:eb:67:b6:52:69:
         97:2c:6b:97:50:9f:4b:09:b2:59:f3:a2:e4:cf:ad:6e:d6:e6:
         b2:c6:63:cf:b4:20:56:0e:5f:d7:d0:21:36:8b:58:10:f7:9d:
         a6:ec:52:3a:63:4b:f7:42:04:26:07:60:f3:4e:59:82:b9:3a:
         f1:0c:f0:74:01:40:a2:7d:b1:87:af:c6:10:d3:56:fa:cf:ef:
         7c:a7:d3:f4:c5:db:55:05:77:67:ec:f0:ec:24:ce:c2:b4:59:
         a9:ad:eb:f7:15:42:5d:b7:ec:29:13:00:49:23:cb:40:d1:7d:
         d9:7b:09:df:b1:7a:c7:61:d4:9c:b0:b8:86:6b:3b:0f:8e:32:
         2d:46:66:ca:72:17:43:d8:d9:ba:79:16:28:cc:6d:49:d6:5c:
         dc:11:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:05 2024 by rpki-client on console-ams.rpki-client.org