Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File:                     3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier:          SmHeP6KNgbZIUSgXTIf/RTRN1d6EfHGIsVJrljcfNMg=
Subject key identifier:   73:2F:6F:BD:41:4D:46:48:08:3C:C4:E1:80:52:BE:B4:80:8A:A9:C7
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer:       /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial:       018F87B64C4FBE82B67EFD995B395C06CBDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number:          01EB
Signing time:             Fri 17 May 2024 18:00:22 +0000
Manifest this update:     Fri 17 May 2024 18:00:22 +0000
Manifest next update:     Sat 18 May 2024 18:00:22 +0000
Files and hashes:         1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: AvQ6tOCMOw+7TEcMcGKcRQ4MsmcP4MBx0dpEKM3R9/k=)
                          2: ZF1NBVygwczrv-VrbnsMrwKxoPE.roa (hash: /o12xb9vdZSayHPZ8WzqR3hjycfpesp9WuNC4Et2XGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4c:4f:be:82:b6:7e:fd:99:5b:39:5c:06:cb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
        Validity
            Not Before: May 17 18:00:22 2024 GMT
            Not After : May 18 18:00:22 2024 GMT
        Subject: CN=732f6fbd414d4648083cc4e18052beb4808aa9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:c6:da:86:89:de:81:ae:17:79:45:6c:e6:
                    d9:eb:15:2e:37:73:3c:47:67:ca:09:81:e3:32:88:
                    c1:65:e0:0d:2f:bc:8f:7c:a2:82:de:b7:b6:6b:72:
                    bb:67:8e:b9:d0:da:ec:8e:e7:09:85:bb:25:0b:40:
                    4e:9b:e4:de:3e:ba:6c:97:42:33:d3:d7:69:40:c2:
                    da:84:96:5c:97:31:b9:8b:b6:5f:b7:88:79:8c:21:
                    53:26:75:6e:b4:5b:45:c1:44:99:28:f7:b9:72:ae:
                    66:0a:18:d5:6a:40:ae:cd:0f:72:54:80:79:d5:60:
                    36:c8:ee:01:b7:15:a2:f7:7f:db:37:ec:47:a8:4c:
                    55:c1:66:1a:56:7a:4b:a8:7a:f5:7c:43:46:76:9d:
                    bb:85:fd:8e:69:2e:cc:7d:38:89:3e:f3:ac:66:11:
                    a4:33:32:eb:d3:68:87:10:15:1d:7b:40:94:22:95:
                    35:bc:83:00:81:c5:db:7b:31:e2:69:96:70:6b:eb:
                    8c:af:be:1b:82:62:3b:39:24:0d:7c:f9:d5:a5:b8:
                    f4:d3:71:d0:06:4d:b9:5f:fd:83:10:75:23:93:00:
                    79:13:d9:76:ca:88:55:d2:f6:5d:bb:07:8a:4f:dc:
                    af:81:a2:77:ec:75:64:9e:0f:ad:4b:57:34:28:3c:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:6F:BD:41:4D:46:48:08:3C:C4:E1:80:52:BE:B4:80:8A:A9:C7
            X509v3 Authority Key Identifier:
                keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:58:b2:f0:71:a7:68:24:73:9d:a9:2e:e0:08:d6:b7:9a:e6:
         34:13:93:fc:4c:98:9f:13:ad:48:22:5a:f8:fb:2b:d2:16:eb:
         90:ff:63:46:a2:88:93:37:e5:e8:e0:ff:9d:8c:ee:08:9f:cd:
         a3:5c:8a:75:db:4b:d9:d1:3f:c7:cd:e5:c5:b7:3e:ab:3b:40:
         df:71:a5:6c:8d:b0:d8:c1:84:0e:6d:d1:02:47:70:fa:25:29:
         81:bc:69:29:3c:d3:ea:81:3d:83:43:94:e0:f0:b1:8c:d5:b6:
         d3:1e:90:c3:52:66:16:04:42:e5:ca:f6:0e:d4:a6:bf:b5:99:
         76:de:78:1f:36:78:3f:28:52:ba:50:19:54:9d:40:c5:69:49:
         4c:97:a0:d2:f6:52:c8:7a:23:32:0d:d1:70:7e:03:26:b8:cb:
         62:55:41:92:c7:8d:d3:3e:ef:8c:7b:93:e1:97:60:c6:30:ed:
         46:2e:c2:a6:a3:f2:aa:c8:15:a3:f1:2f:f5:a1:91:a5:23:84:
         c6:3d:e3:c3:16:8f:0d:1c:2d:6a:79:af:f2:08:65:76:4b:95:
         6d:77:30:e3:11:90:c1:87:d4:df:58:e7:16:bb:cd:13:32:81:
         89:89:02:65:4a:61:03:d8:16:df:18:81:cb:ee:07:a3:be:07:
         f6:be:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:21 2024 by rpki-client on console-ams.rpki-client.org