Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          +ZKe1DImzcZZNkCK/acA3aYJfshkiI2zNV0Da/WNxy0=
Subject key identifier:   4D:84:B7:EB:19:36:95:90:F1:0B:F6:A3:A7:4B:2E:B6:7D:D1:26:45
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       018F41C614B96EC407AD7B50CD5ED5FCEE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          0E7D
Signing time:             Sat 04 May 2024 04:04:11 +0000
Manifest this update:     Sat 04 May 2024 04:04:11 +0000
Manifest next update:     Sun 05 May 2024 04:04:11 +0000
Files and hashes:         1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: gjJBE7JHUbAPFkamiuVzf85WfrWubNO5GUL965bEsEg=)
                          2: oLW-609I3Khtnvap7_JOvzS8Dh8.roa (hash: GI/K2R5uwKu2CJW1QernmTXeDLBsXY3zPyYVecZRek0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c6:14:b9:6e:c4:07:ad:7b:50:cd:5e:d5:fc:ee:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: May  4 04:04:11 2024 GMT
            Not After : May  5 04:04:11 2024 GMT
        Subject: CN=4d84b7eb19369590f10bf6a3a74b2eb67dd12645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:5d:c5:6d:c1:7f:72:64:0b:d8:c3:c3:2f:
                    74:65:77:ac:0a:cf:63:99:9f:32:00:9b:9f:cc:45:
                    b7:2a:ae:b5:3e:6e:20:6d:34:46:48:30:f3:e6:aa:
                    0d:d5:94:87:c6:94:1f:50:b6:7b:f4:32:06:c5:19:
                    93:1e:43:e2:ef:1b:78:f2:70:8b:cd:a7:5f:7e:f5:
                    4f:6e:ee:92:a1:95:11:9c:2c:19:b9:1d:99:4c:3c:
                    71:6d:7c:f6:32:69:91:fb:5a:88:ed:3e:bb:d7:32:
                    52:e6:32:19:cf:cb:97:b3:88:31:ad:b2:73:40:ce:
                    52:54:1d:37:8c:27:b3:fd:35:4d:58:76:23:ac:23:
                    5a:50:c2:f5:8b:b6:d1:2c:5a:77:46:c0:62:98:38:
                    29:f8:2d:1a:33:0c:85:8b:95:a4:5d:37:48:07:c9:
                    0c:2f:c9:52:6c:c9:c4:57:d4:fe:f1:14:7d:54:0f:
                    50:fc:bf:75:f5:b7:56:d4:0d:54:35:00:99:72:15:
                    7c:38:04:6c:9d:6c:46:94:54:8a:a0:78:56:d3:19:
                    54:b3:20:14:4d:c2:fc:a6:18:ab:ad:24:00:09:ec:
                    cf:54:e8:e2:21:73:b1:69:db:28:c3:4a:3c:53:a1:
                    63:f2:d2:06:70:04:51:12:02:82:0b:21:af:7a:44:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:84:B7:EB:19:36:95:90:F1:0B:F6:A3:A7:4B:2E:B6:7D:D1:26:45
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4e:ab:e3:57:99:89:a5:be:40:3b:30:bd:99:ee:50:8a:34:
         34:6d:d7:3a:cb:f6:a5:d4:2e:e2:c9:a3:b2:9f:e6:eb:41:a7:
         f8:24:2d:2e:7a:98:39:43:4f:3e:5c:86:c1:4d:d3:1e:33:f4:
         4d:c4:9f:90:a6:f9:2b:2b:93:01:2c:bf:dd:3f:e8:6d:4d:9d:
         8c:14:c8:c6:33:73:4f:68:8d:08:3b:a9:8a:b6:a5:16:bd:c3:
         dd:a2:fb:71:de:eb:2d:9e:28:71:a0:25:56:1f:51:9b:f5:89:
         04:7c:d6:49:0d:bb:9c:fa:f8:37:b8:ce:de:70:31:48:86:cd:
         3a:aa:84:ac:f9:4b:ec:e0:0d:56:1e:ab:86:44:07:78:b3:2e:
         d3:6a:c6:8d:5c:f6:51:0c:91:39:f8:47:ac:cd:0d:02:f1:e4:
         1c:01:03:3f:e9:8e:9e:37:6a:48:68:4b:08:a8:69:71:1f:34:
         ee:7e:7b:c4:84:54:a8:d0:ea:aa:5f:ec:42:2e:4c:d5:19:60:
         14:ce:ea:c9:28:6d:10:e5:7a:ef:69:03:d9:cd:e4:0b:06:85:
         ba:49:73:94:c4:7e:51:e9:4c:c8:b3:c8:b0:bf:21:df:16:76:
         cc:f7:cc:1e:36:29:43:9f:29:d2:62:e5:6b:85:92:c0:c4:6b:
         98:19:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:57:07 2024 by rpki-client on console-fra.rpki-client.org