Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          FhW8FEXesoCeL9MWa3T1oU4L3EJTP1S4SVpacs2MyhM=
Subject key identifier:   43:F8:98:81:69:8F:5B:F4:BF:EB:AC:5D:43:E9:DD:F2:C3:E0:28:E4
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       018F8824297A41BF8C462F160FA8D3F64795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:22 +0000
Manifest this update:     Fri 17 May 2024 20:00:22 +0000
Manifest next update:     Sat 18 May 2024 20:00:22 +0000
Files and hashes:         1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: Rzxh6xX0mLA+SrbekXg/GHNWbm6USGM4M5a8p9AWeww=)
                          2: pt6zw4hIVJDWAcxY0bzU-YY9ei4.roa (hash: aka2cRqPn+Bi5piL1W2OL0T+xEvvg30jbAfTUqiGcGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:29:7a:41:bf:8c:46:2f:16:0f:a8:d3:f6:47:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: May 17 20:00:22 2024 GMT
            Not After : May 18 20:00:22 2024 GMT
        Subject: CN=43f89881698f5bf4bfebac5d43e9ddf2c3e028e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:a0:22:b7:a3:7c:48:45:d4:cb:23:1d:f8:
                    8d:4b:40:47:ea:be:c4:4c:89:3d:a8:06:45:cd:9a:
                    cb:d5:08:d5:97:77:70:d7:27:c3:1a:e1:a7:eb:d4:
                    10:42:aa:65:43:9f:c6:70:bd:cc:a9:e1:de:64:57:
                    40:25:44:0d:8b:ab:8d:e2:64:6a:99:3e:f5:9b:dd:
                    53:7a:90:4c:5e:5c:ba:b7:c5:03:48:f2:de:ac:c5:
                    ec:d3:aa:27:0b:bc:f2:34:ec:0b:38:1f:ec:e5:29:
                    6a:26:d4:41:d1:72:ce:ea:67:87:4a:e5:92:7c:4c:
                    fe:f7:d4:8b:63:2b:25:4d:97:a1:ab:20:15:c3:9c:
                    cc:2e:29:7d:00:8c:a3:89:82:7b:b6:e7:b7:2e:49:
                    2e:e8:fd:b9:8e:9d:8b:c9:bd:ce:e1:6a:1f:86:07:
                    b9:94:60:1f:4f:75:57:e7:a3:c1:8a:50:28:00:ce:
                    23:47:a3:6a:d8:6b:82:45:ce:e5:5c:9b:20:3a:ff:
                    19:1c:6d:4d:7a:76:61:d3:2f:b5:c2:11:df:86:68:
                    33:57:f2:dc:b1:3d:72:42:42:6e:b6:04:27:55:f6:
                    45:fb:10:1f:76:ec:b4:6b:ba:a5:d3:77:f1:8e:d8:
                    72:10:b0:02:19:9f:88:7c:01:ce:a8:12:8a:89:43:
                    46:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:98:81:69:8F:5B:F4:BF:EB:AC:5D:43:E9:DD:F2:C3:E0:28:E4
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:e4:62:22:61:95:a5:4b:ad:1f:8b:71:10:91:64:1c:af:
         91:5c:d5:6e:06:40:4d:4b:d3:d4:ec:65:e4:56:ae:c9:2d:7b:
         32:34:31:05:96:1a:78:53:03:78:92:af:c1:94:f8:33:7b:07:
         f5:95:8e:c2:3f:78:40:09:1f:2f:57:bb:d2:89:b2:5d:74:43:
         a7:a5:c7:15:8f:6a:9d:3b:69:07:db:48:87:d8:72:59:8a:49:
         ac:19:57:6a:1a:3e:06:57:5d:ca:43:dc:37:ca:a3:e9:a7:47:
         45:0c:47:ab:3d:cb:97:64:9d:9a:98:a1:5c:e7:8f:3b:2d:40:
         8c:5f:eb:49:e3:24:11:99:ca:f5:a6:0d:66:ff:b4:bc:a8:d7:
         92:54:9f:4f:57:25:f6:0f:47:f6:71:46:93:99:61:5e:f3:03:
         0f:b2:4e:b0:83:90:ee:6b:81:6e:60:68:d5:05:c3:93:44:b5:
         69:97:c7:e8:84:66:20:bb:9c:f2:7d:83:da:12:42:c8:33:f7:
         04:f9:ab:37:77:8c:64:d2:53:3f:18:54:64:90:94:a5:f0:69:
         81:58:d0:71:ac:47:9e:81:8d:83:34:13:af:b7:64:90:a4:c6:
         fd:28:15:e6:b2:98:ef:ee:1f:c8:87:3f:49:d7:6a:70:3b:53:
         48:18:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:02 2024 by rpki-client on console-ams.rpki-client.org