Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File:                     3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier:          dj+xh0bjOvHRC8/EcABGLOWPj0vdxkNvZ1mW6d6tNZ8=
Subject key identifier:   61:C4:9A:D8:BE:F5:D9:95:FC:67:BF:43:8F:52:6D:1B:74:82:80:7B
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer:       /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial:       018F91950830E8C1A2496E4A4EFB225A4D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number:          1194
Signing time:             Sun 19 May 2024 16:00:14 +0000
Manifest this update:     Sun 19 May 2024 16:00:14 +0000
Manifest next update:     Mon 20 May 2024 16:00:14 +0000
Files and hashes:         1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: x6hbEJPe/ldmba8YfrGpJ1G94pv35T6vGLoS5dPb6+c=)
                          2: PsAR0eJYZRoDuSY6wKdS06GWVjw.roa (hash: vp2l0iXrZ9pora5Ba9R478et6j5GrCUJwiKjjUbFGlc=)
                          3: hV2Xtv9LLOG3QrWNrdpwrY03Cc4.roa (hash: +RxEpkF+nQGW7duN2cgKkIgZEhtoJMpE6yRT42E1TpU=)
                          4: qnO7iQ5Hm5C-Vhxd8qMAEwqa43E.roa (hash: IcC05MaYPd89LOfptNlzGmt6G+mkEEEp1ADhuuy5SRc=)
                          5: y8tfOUwZZaU_rM2LhDa0qa_dEZY.roa (hash: aZHGUKYGqog9q7Ei/pH1aWnRF5gMbtpORb1YG6mYNEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:95:08:30:e8:c1:a2:49:6e:4a:4e:fb:22:5a:4d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
        Validity
            Not Before: May 19 16:00:14 2024 GMT
            Not After : May 20 16:00:14 2024 GMT
        Subject: CN=61c49ad8bef5d995fc67bf438f526d1b7482807b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:f5:f5:6a:66:99:30:2f:87:9b:c1:a8:64:
                    09:bd:5d:ad:a3:25:c3:19:71:8c:5d:1e:4e:20:f6:
                    be:4e:83:8a:6c:fc:f9:a4:0f:5a:66:29:7d:90:4b:
                    a2:a7:40:46:eb:77:f8:c0:4d:ee:0e:12:7f:d4:54:
                    f7:ff:52:a3:63:89:fd:3f:c4:5c:47:cd:b3:b2:29:
                    21:be:9c:18:c0:76:ba:f7:25:99:f1:ea:93:54:90:
                    07:dc:a7:c8:2c:a4:7d:4d:09:83:4b:37:80:10:05:
                    34:a2:7d:74:24:4f:44:61:eb:6d:58:85:11:3f:4e:
                    a3:94:71:40:6c:bb:d3:ee:7d:2f:4b:5b:e4:dc:a3:
                    eb:f9:fc:c4:87:32:90:16:23:42:3e:65:b5:0b:41:
                    c0:e2:c7:0f:53:f8:91:2d:50:b7:86:8b:66:cd:8e:
                    be:60:e0:86:e9:42:86:1a:35:f4:6b:14:8d:f4:87:
                    88:bd:51:01:73:3d:3b:18:91:f6:6b:93:d9:67:d4:
                    64:f4:0c:db:77:2c:59:8b:b7:5a:51:21:4a:0a:98:
                    34:a7:10:a8:1f:bf:c7:96:61:b8:d7:45:5e:ba:52:
                    ea:37:ad:cc:94:4a:52:26:08:99:7d:66:6e:c2:2d:
                    f6:cf:3a:39:82:d8:e1:1e:8a:80:5f:7f:ab:df:2e:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C4:9A:D8:BE:F5:D9:95:FC:67:BF:43:8F:52:6D:1B:74:82:80:7B
            X509v3 Authority Key Identifier:
                keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:76:9a:21:06:1b:9b:de:bf:2c:24:1b:c3:e9:f3:35:b1:
         68:3a:f4:fc:c6:78:65:58:98:6d:bd:ca:2e:03:48:b3:c9:7e:
         8b:2d:e5:9e:2d:92:45:57:1d:cb:e0:3b:52:8f:52:7c:29:d7:
         20:a5:1f:b6:bf:41:78:48:7d:d3:fc:db:39:c6:c0:92:ee:f2:
         33:6a:f0:7f:b2:ff:c0:7d:4e:5c:46:a7:d5:18:43:6b:77:42:
         85:8a:0f:2d:d4:76:b2:17:52:1f:d7:15:7a:a2:18:83:0a:e6:
         90:42:da:ee:ac:6b:b7:24:ee:e1:13:10:19:39:3d:57:c9:92:
         ff:27:7a:2e:17:94:db:2f:b2:4c:fc:30:5e:c6:7e:52:ce:2d:
         e5:05:b5:b0:10:92:e0:33:42:44:5f:45:2a:93:72:7f:43:39:
         da:7b:ad:03:a2:dc:a2:e9:ed:b8:22:ae:57:26:f1:c0:5b:0a:
         6f:9f:ee:a0:7c:b5:d6:53:96:f4:59:aa:e7:29:51:ac:e9:ee:
         81:30:35:98:16:27:ca:fe:ca:45:4f:8f:55:f0:4e:58:02:3d:
         db:6c:a5:38:59:7b:b5:c7:b1:50:a9:b7:25:f4:f7:0e:90:5d:
         81:1f:4c:3c:e9:1d:c6:01:fe:48:1b:36:32:57:fc:53:f4:35:
         76:f9:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:47:42 2024 by rpki-client on console-fra.rpki-client.org