Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft
File:                     3KCtsai3lwIPDseimptautQLZT4.mft (raw, json)
Hash identifier:          DDeE93s5d2CP7M504ytGDMjfgZv5BzL9yY3woqLbm3w=
Subject key identifier:   F9:7A:49:3D:98:67:62:79:27:52:98:7D:66:F2:FF:94:B3:E5:B9:A3
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Certificate issuer:       /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial:       018F55EF314528711DBFCB68E724ABD5093F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft
Manifest number:          0E9C
Signing time:             Wed 08 May 2024 02:01:30 +0000
Manifest this update:     Wed 08 May 2024 02:01:30 +0000
Manifest next update:     Thu 09 May 2024 02:01:30 +0000
Files and hashes:         1: 3KCtsai3lwIPDseimptautQLZT4.crl (hash: qB4d6tuws2zpsdVv6rRfJcaR6yNOb3KHrgBVPV7JKoA=)
                          2: RJPHi4UfLVVQ4xHpe8tTM4SNRO4.roa (hash: dOTSLMDpTF1t5bpzc8oTYmvPXAzi5ssP1A0AdSL2ViI=)
                          3: dYbNkP2f_Df2uxPOf7CEmKnF3T4.roa (hash: wI1uXZNbRGt0oS7TOdAXketR7ThvKx6z1q85aKWkfP4=)
                          4: jnz2GmGfv_VdS-L9BYFVZieLk58.roa (hash: zl85sHjKjo9qpU/wWL5PrVm5Ov3oLqYTXEEB8KIAozc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:ef:31:45:28:71:1d:bf:cb:68:e7:24:ab:d5:09:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
        Validity
            Not Before: May  8 02:01:30 2024 GMT
            Not After : May  9 02:01:30 2024 GMT
        Subject: CN=f97a493d986762792752987d66f2ff94b3e5b9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8d:9c:1c:17:41:49:88:4f:d5:54:27:eb:d2:
                    0b:c0:7a:8f:e5:e4:20:8f:e4:9b:de:b0:83:10:e3:
                    b5:6e:61:b9:8d:35:36:44:4b:20:1b:d5:ec:cf:91:
                    c0:7a:1d:33:55:b5:f5:a9:c1:27:0f:ea:c6:f6:30:
                    ec:17:bb:47:0e:81:ef:62:e0:31:97:d4:ed:a0:31:
                    3c:0f:e4:f2:ee:83:fd:d1:8f:66:dd:a8:7a:7b:d2:
                    a8:f6:e5:b1:c9:2a:43:ea:30:a7:12:e3:56:08:f4:
                    87:18:db:1f:36:f5:53:df:49:84:8c:ec:26:57:9b:
                    55:1b:9f:08:c8:85:c5:d3:c8:91:b1:93:24:19:7b:
                    94:70:8e:55:a3:b2:34:dd:e2:44:b6:d9:b7:9c:81:
                    7d:a7:c0:16:d4:dd:a6:8f:90:d1:c7:de:dc:44:12:
                    73:ac:2c:be:32:04:15:40:bd:35:f2:ac:e8:ef:d1:
                    07:eb:96:cb:a1:cd:34:11:bc:f9:b8:5a:b1:4e:9e:
                    82:4a:31:34:9e:52:25:40:25:54:cc:ab:bb:00:6a:
                    79:fc:bc:2b:24:0b:f8:ab:5b:84:38:10:da:97:d4:
                    9c:8e:df:32:f5:ad:2e:29:91:22:e8:a1:c7:77:06:
                    54:95:98:ee:6d:3e:09:1f:a7:5d:c8:69:48:5c:de:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:49:3D:98:67:62:79:27:52:98:7D:66:F2:FF:94:B3:E5:B9:A3
            X509v3 Authority Key Identifier:
                keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:33:93:4f:18:37:8f:0a:99:92:e1:34:d5:0f:03:fb:29:c6:
         79:74:7a:33:64:f5:66:10:73:17:e9:4d:7c:40:31:d6:fe:e3:
         e8:5a:86:58:6f:ca:3d:89:ab:9b:86:f3:0c:f4:7d:a0:b8:66:
         c2:c9:0d:99:20:26:5e:ce:d3:4e:ad:f9:ea:cf:29:4a:4d:e4:
         73:b9:10:c9:dd:5f:fa:80:af:0f:57:50:28:c2:77:d3:ea:fd:
         af:f7:05:a1:42:d9:0e:1c:14:91:15:8b:e9:92:c5:bd:f9:a2:
         c4:4c:fb:8d:d7:33:dd:60:cf:66:de:5f:37:dc:37:6e:34:5e:
         bc:46:33:24:7e:60:3b:9c:ea:62:5c:fb:68:89:f5:92:5e:bf:
         07:42:22:1c:2d:06:ba:02:af:c7:38:8e:0f:56:c1:e6:62:00:
         50:5c:c2:c3:a3:2c:46:13:2a:7f:65:f9:97:4b:e9:bd:d3:d5:
         76:47:ba:0c:8e:3f:4e:18:67:a0:40:52:12:65:e3:69:69:d3:
         b7:0d:59:f4:85:2c:f6:b7:71:3b:60:17:42:d3:5c:0c:c5:ad:
         ce:2b:ad:5d:1e:72:fd:83:ec:5c:9a:2f:14:17:e3:3d:f0:d0:
         14:c9:fb:d2:ac:e8:69:09:ca:f5:cf:bd:84:fc:1c:1c:5a:29:
         54:66:d9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:10:15 2024 by rpki-client on console-fra.rpki-client.org