Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File:                     3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier:          EheU5rX7Uy1ruLn/vm0oe6kJd1c2jYwmOWkfwxwbt6c=
Subject key identifier:   15:38:75:F0:28:F7:0E:03:B5:33:F7:37:73:D1:49:0A:06:63:3E:A1
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer:       /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial:       018F9202DE6C8859D2B130BA1D05A15C4FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number:          0960
Signing time:             Sun 19 May 2024 18:00:12 +0000
Manifest this update:     Sun 19 May 2024 18:00:12 +0000
Manifest next update:     Mon 20 May 2024 18:00:12 +0000
Files and hashes:         1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: PuzcPjIuQkPINxrB23ZuogdrnAFDXpS47afzZ+eD5bg=)
                          2: A95RnXsr7QN_CzCptsxQiztG88Q.roa (hash: 5k6E7uOKqxXTnFZpe+efQ7wjv6Z9sIcexo0C+YHM7Yg=)
                          3: SznUuWQXY42y86-2y9O4J3VaL9E.roa (hash: DKAxOfGUZHljgYta1c/W9dzKmlbhy9oxWOvCTaV2SYE=)
                          4: xCfTRuUS3uwyEmrVx2w1GJrMFKg.roa (hash: 34fBiPxM8cORffxmx2+b8/RXm5L8WztubAuK7vSGYPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:02:de:6c:88:59:d2:b1:30:ba:1d:05:a1:5c:4f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
        Validity
            Not Before: May 19 18:00:12 2024 GMT
            Not After : May 20 18:00:12 2024 GMT
        Subject: CN=153875f028f70e03b533f73773d1490a06633ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:77:91:a4:b1:6f:ef:3f:65:26:2e:85:51:70:
                    3f:87:9d:4e:f4:8a:55:5d:8d:2a:a5:fa:3d:1c:56:
                    d3:53:5d:9c:4e:97:be:e3:26:11:4b:25:63:de:1f:
                    31:d7:e9:35:45:6f:c2:87:7d:14:1c:73:b5:24:f1:
                    d5:f8:65:de:89:16:8f:d2:19:b2:ce:12:83:35:0f:
                    93:a8:7c:9b:32:cf:44:94:60:af:2f:95:0d:2e:55:
                    62:a8:0e:0a:a9:24:6b:87:1c:3a:50:30:bc:67:ef:
                    0e:38:21:33:0f:ca:02:52:68:4a:20:27:59:02:31:
                    b7:69:68:1e:ec:36:56:85:9f:71:62:95:d9:aa:e3:
                    52:29:07:c4:f8:8f:c7:0a:73:bc:84:79:62:3a:e2:
                    28:34:2b:84:73:df:3f:71:40:0e:d7:44:ab:19:35:
                    9d:02:79:df:29:7d:cf:92:48:ed:ea:f1:a0:a5:63:
                    be:91:d9:c4:33:27:78:45:6b:21:51:c1:fa:89:fb:
                    10:9a:37:71:ca:53:0a:32:48:07:a8:a0:9f:5a:f9:
                    31:ec:13:c1:5a:d8:00:36:3a:f7:98:f0:95:7b:17:
                    57:6d:48:1c:dd:fa:99:43:c6:06:58:b9:ee:64:32:
                    c4:e9:2b:f6:2c:9b:7d:ce:fe:04:42:53:a4:9e:60:
                    84:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:38:75:F0:28:F7:0E:03:B5:33:F7:37:73:D1:49:0A:06:63:3E:A1
            X509v3 Authority Key Identifier:
                keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:93:f7:d4:41:d7:84:d3:ad:14:45:f0:15:2f:aa:35:5c:69:
         ad:80:88:8b:a3:30:2d:51:a6:79:33:45:78:5a:bb:ed:34:a7:
         95:69:5c:63:52:15:93:af:03:bf:fa:4a:33:d2:e9:cc:4b:2d:
         c5:35:79:42:b6:d4:a6:f5:fc:50:04:bc:49:26:e1:b6:31:17:
         a7:5f:89:b5:7e:19:ec:58:6f:f4:b9:7e:0f:eb:7a:e1:e1:34:
         68:ef:64:dd:87:42:07:a3:15:5a:5e:49:e6:89:3e:00:7b:76:
         33:e7:c3:63:dd:6d:48:9d:08:be:a9:79:21:a6:8e:bf:34:47:
         9c:5f:c2:94:a3:a8:2d:a2:24:0f:91:01:dd:65:0c:27:c5:aa:
         9a:0b:4d:6d:ab:c4:02:1f:2a:67:91:30:da:3d:8c:04:33:29:
         c1:95:45:6b:ad:f3:8c:d7:c3:d7:14:cc:16:6a:be:c6:28:2f:
         68:22:08:a5:6f:4e:6e:25:16:5f:d1:07:3d:2c:d2:f3:4b:f4:
         8c:e2:ed:b8:fc:fa:a4:a7:ff:05:b5:bf:d0:a8:95:4d:9e:52:
         ff:65:4e:0d:4d:a6:ee:64:82:f7:8d:8c:4b:c6:86:b8:89:52:
         8c:a9:a5:b7:ee:ed:c8:71:53:d0:72:c0:6e:c4:6b:28:b8:9e:
         a9:f3:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 19:46:12 2024 by rpki-client on console-ams.rpki-client.org