Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File:                     3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier:          BghpS3ShFN5Ft3AYHRQ7lcCuR4gWRdSlmbm/r7lNx1A=
Subject key identifier:   97:F1:19:A5:37:D0:AE:17:38:73:72:31:C1:ED:17:CE:80:65:F9:14
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer:       /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial:       018F3A0B118A493514DBE40072EB2330D4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 16:02:34 +0000
Manifest this update:     Thu 02 May 2024 16:02:34 +0000
Manifest next update:     Fri 03 May 2024 16:02:34 +0000
Files and hashes:         1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: nGUxBz9nEdiqOiK4NHzs8blAjwWkQXF2AHOg7shDLKQ=)
                          2: ekwLAwwRwqFKJgoaIS_Xa1lUb3E.roa (hash: kp6AvqDzVHjlEeaoQ9+y1Xu3SqJsppEKJ2qJp+1GnZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:11:8a:49:35:14:db:e4:00:72:eb:23:30:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
        Validity
            Not Before: May  2 16:02:34 2024 GMT
            Not After : May  3 16:02:34 2024 GMT
        Subject: CN=97f119a537d0ae1738737231c1ed17ce8065f914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:ef:f0:a8:1d:0d:19:7f:5e:fd:a2:e8:4a:
                    6b:d9:3f:19:eb:c8:d3:33:30:a8:47:cc:24:10:63:
                    a6:38:94:72:2f:c1:b6:be:d9:74:30:5f:30:2d:b5:
                    c4:d2:df:88:3e:eb:34:16:e7:46:16:e4:d9:05:b4:
                    5c:af:b1:2d:a1:41:c6:25:fd:5e:0a:4b:3f:4b:0d:
                    8c:61:28:88:61:e9:ff:bf:11:20:ea:04:e6:eb:37:
                    ff:ec:c4:d7:9f:f1:f8:2c:63:64:02:a1:42:27:bf:
                    b2:69:46:a3:7e:f5:c6:1a:59:15:f2:bb:3b:4d:04:
                    3f:e6:0e:fc:c6:ad:9d:2c:24:59:78:a8:80:8a:48:
                    f8:23:71:c4:82:66:0f:95:ca:38:e5:91:80:e2:58:
                    ae:2d:3c:66:58:fa:04:ec:69:e1:5c:0f:2c:b4:aa:
                    74:cd:25:5c:c0:1a:5b:82:62:f1:35:2d:b6:7e:c2:
                    c5:32:b2:11:5a:3b:25:9d:56:bb:1f:46:33:8b:dd:
                    50:9f:da:54:43:99:3c:f3:ae:2d:10:0b:00:dc:82:
                    58:05:9e:de:41:f6:f0:e6:d9:68:71:06:b9:cb:91:
                    ff:6c:0a:01:24:8f:14:db:6c:d7:8a:75:2c:de:ee:
                    aa:06:d2:fd:b6:76:ee:93:11:94:d4:4c:6d:6a:c5:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F1:19:A5:37:D0:AE:17:38:73:72:31:C1:ED:17:CE:80:65:F9:14
            X509v3 Authority Key Identifier:
                keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:c1:ca:09:ca:b9:a7:65:00:13:d0:7c:7b:aa:e9:ca:f7:
         f8:ff:e2:8e:2d:b2:dd:b1:dd:a1:23:f2:35:15:64:ed:d9:e0:
         a7:87:4c:f4:b1:85:7c:a7:f5:bf:a1:dc:99:cb:e6:5f:66:b8:
         66:e8:cd:42:9a:85:b9:76:3f:fc:cf:d3:ed:07:cb:ce:87:62:
         07:9b:11:05:b2:c2:0a:1a:a0:a3:04:aa:90:5c:2c:b0:62:b2:
         40:f8:e1:7e:d7:e8:47:03:ad:1f:b7:d4:1e:a3:99:cf:2e:26:
         6e:26:d6:66:89:af:5f:ce:b7:61:70:68:e5:56:58:10:b6:79:
         03:4a:30:d3:c2:43:07:4a:3a:6e:45:31:29:91:f2:c3:85:47:
         87:d6:c7:1f:1d:31:72:3c:41:8d:5c:9c:a8:56:7a:71:8d:57:
         3c:32:4b:e1:55:c7:47:1c:08:ce:74:f9:a2:fb:16:81:68:8f:
         5a:2c:c0:be:ef:7f:dc:d1:6b:9d:c5:8f:d4:5d:43:c2:76:bc:
         f0:ad:ec:9f:7f:05:fc:53:3a:9a:bf:7b:ed:e8:0c:68:7e:6e:
         4d:54:af:7a:af:c5:b3:ae:e6:56:21:8e:c3:ce:18:16:0e:b7:
         3a:94:29:30:d5:a3:6f:96:c1:d6:01:ec:1a:fd:7f:5d:c0:19:
         fd:0b:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:18:43 2024 by rpki-client on console-ams.rpki-client.org