Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File:                     rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier:          9/5fAnr/PJrD6NHUwu9FcHQz96cDFa6DBoi9cw+Vg8s=
Subject key identifier:   E4:84:2B:08:AF:75:21:3F:22:B2:9C:76:77:75:43:0E:5B:F4:5B:69
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer:       /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial:       018F874AA4ED9C1CF1AFA1A242B0C418369E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number:          0D3D
Signing time:             Fri 17 May 2024 16:02:47 +0000
Manifest this update:     Fri 17 May 2024 16:02:47 +0000
Manifest next update:     Sat 18 May 2024 16:02:47 +0000
Files and hashes:         1: Z1834X2M1YEYAAAIsY2KQZX5KvU.roa (hash: yj5GqDel4zXYI9gA5PHvvy/nGqsmnRG6evD4Rp8YDjA=)
                          2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: 99/Sr4rCUlZIPzjzi6+hK4haluv3EQYq2BDuqQjaXrs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a4:ed:9c:1c:f1:af:a1:a2:42:b0:c4:18:36:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
        Validity
            Not Before: May 17 16:02:47 2024 GMT
            Not After : May 18 16:02:47 2024 GMT
        Subject: CN=e4842b08af75213f22b29c767775430e5bf45b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:7c:fa:3f:ef:14:d4:76:93:78:85:fd:72:
                    b5:f0:38:d4:bd:7c:1c:a9:3a:35:be:b6:e6:7e:73:
                    ca:7d:03:3f:25:ba:03:d9:bf:fa:83:ba:f3:bd:68:
                    2e:b0:47:d8:4b:24:c6:02:d4:7e:92:eb:b4:70:be:
                    a8:28:54:53:be:b8:ef:73:cf:b0:50:5d:bb:63:25:
                    8b:2a:16:26:f5:24:4d:a2:3a:8d:3e:a4:ae:f0:41:
                    3a:43:75:66:5b:1a:ba:77:7f:f4:ed:e0:12:ac:05:
                    60:e2:e1:e7:be:30:48:05:34:21:ac:6c:f1:df:77:
                    c1:3f:ac:2d:87:5a:af:69:bf:4a:0c:39:9c:88:90:
                    02:22:34:db:f3:7e:68:e5:45:79:4c:5e:d5:41:96:
                    ad:72:9f:80:af:52:36:ef:cb:c0:3c:52:ad:2e:40:
                    88:4e:e1:ac:9c:03:c0:10:ac:cc:41:77:40:41:f7:
                    e9:d7:a4:ec:d6:df:fd:3e:4c:df:7f:cb:1b:a5:bd:
                    6d:33:59:a4:91:98:61:76:0e:b2:83:00:2a:67:5c:
                    09:89:77:84:5c:4f:f6:8c:2e:57:2d:2d:0d:ef:7b:
                    db:e9:8b:e0:78:f3:d3:6e:a7:0c:d1:6a:ca:23:9d:
                    25:22:02:c0:ae:50:d2:d5:21:ee:4e:07:11:e1:7d:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:2B:08:AF:75:21:3F:22:B2:9C:76:77:75:43:0E:5B:F4:5B:69
            X509v3 Authority Key Identifier:
                keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:bf:c0:2e:c1:46:17:f0:a4:6a:65:f7:5e:99:5e:93:83:be:
         f9:c0:46:2e:57:26:b3:df:22:38:7f:c0:a3:0d:15:2a:25:82:
         dc:62:ee:f8:e0:1f:41:be:b0:84:f8:b7:59:3a:26:3d:ad:44:
         a0:73:3f:8b:1a:de:2b:b6:4d:ef:2e:1c:02:59:37:9c:57:61:
         ef:13:df:a6:24:84:f6:3d:cc:d3:b4:d6:d8:4f:4a:97:e2:ff:
         5b:70:24:5b:fd:dd:0e:15:d5:05:6e:4f:7f:a2:81:a3:49:6e:
         e5:dc:9a:af:a4:e0:d9:09:de:67:e8:b3:79:e6:6e:e0:07:4d:
         33:ea:23:51:c9:33:c1:1f:10:b2:a4:5e:bb:04:ef:e9:93:51:
         f0:07:08:1f:45:0a:d1:b8:ec:6a:f1:ba:d1:ed:40:de:1b:f3:
         ca:32:2c:7e:ae:7f:5f:77:dc:6e:1a:9b:f1:7e:3b:cd:c9:ab:
         4a:e2:d7:f0:54:36:1d:1b:27:48:5a:1a:84:f0:a4:ea:b2:81:
         f0:cf:c2:2d:25:64:db:89:ae:5f:15:15:98:2d:06:34:99:cc:
         bb:aa:65:0e:c1:b1:eb:18:49:fa:7c:8e:e2:4c:a7:f6:8c:d7:
         ff:ef:8f:9a:62:67:49:5c:d9:86:9b:5c:10:ca:7d:06:f7:75:
         fa:4b:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:48 2024 by rpki-client on console-ams.rpki-client.org