Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          aVEIlC7Ha2aLKyAP/ynXyVpE7K7f3NxW9W4ViqBOSLQ=
Subject key identifier:   54:84:EA:86:6C:7B:E9:AD:E1:82:ED:A3:C4:86:62:4E:3A:2D:1C:36
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       018F3AE5F27D29989BB0F63E9D5C47773E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          0F10
Signing time:             Thu 02 May 2024 20:01:39 +0000
Manifest this update:     Thu 02 May 2024 20:01:39 +0000
Manifest next update:     Fri 03 May 2024 20:01:39 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: fhLQjgUS0UpZ5F7nPTwnmColHhjPzgTOcD9vP1zhN0w=)
                          2: E29alEaBSBrDIKMkZQbZ4YOCKdo.roa (hash: KOVvjFUJOXo/oJFP6BOPp7d14c2OC35zcWE8EDIBZVs=)
                          3: PmHHooxBw1NYljT-koSa_wKYbc0.roa (hash: XZGEI2Wk3sjnfq2glsWPCr0KxBsMzo20gZV+BOUbVPQ=)
                          4: WA6YQzDc6pMLz5iK3NzVlALfLDY.roa (hash: BsMEs0NNvNbUhiHmX7GftlUb7RA8YuPDtiCbHjp9+CY=)
                          5: hwKR5Xtzzf-dRsHBL5OmbaGDkfU.roa (hash: omcBw7v+Kd2AxEnd/Omq43+nFBTrErwi0zpb+WQjB9U=)
                          6: kSO2nPPEF1ZOLt-fnBkVdmoJk_w.roa (hash: R0vwu65QLGugH4yTz8ty6Nici0gv7UYMx7blNAC5Df8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:f2:7d:29:98:9b:b0:f6:3e:9d:5c:47:77:3e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: May  2 20:01:39 2024 GMT
            Not After : May  3 20:01:39 2024 GMT
        Subject: CN=5484ea866c7be9ade182eda3c486624e3a2d1c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:09:1f:d8:8b:90:ca:b7:ca:6d:72:96:11:
                    76:65:c1:9b:ee:99:a9:be:48:06:d0:6c:92:1e:36:
                    f4:7c:fe:2a:66:13:81:b2:cd:99:0a:c9:fe:99:bf:
                    92:cb:7b:8b:f2:a4:a7:18:0b:81:36:77:ae:d3:09:
                    57:6e:ad:70:5a:bc:7c:88:a8:f2:93:ce:e2:e0:65:
                    3f:4c:5e:1d:d4:7e:99:0f:58:a6:02:44:b8:d5:05:
                    d1:71:a2:39:2d:d5:47:aa:39:c1:c6:d2:62:87:2b:
                    e9:aa:4d:3a:61:c3:3e:23:7e:96:81:02:fd:89:1c:
                    7f:52:fe:d5:f4:30:51:6c:7e:89:16:c4:38:24:37:
                    1f:0f:5a:e9:00:ce:d7:a5:3f:0c:91:d4:ef:9e:38:
                    79:50:bf:56:ee:7e:c3:bc:33:60:80:42:94:5b:f5:
                    fc:8e:51:02:da:94:f6:cc:a1:1c:f3:15:6d:d8:c0:
                    61:61:e0:b0:4b:a1:72:9e:28:8d:26:0d:7d:cc:55:
                    36:a3:10:e1:ee:49:3d:b7:99:0b:95:0d:7a:89:f5:
                    8b:4d:f6:45:f4:fd:d5:80:8f:35:09:04:0b:91:9d:
                    bb:51:e4:d1:a0:82:56:bd:30:77:54:58:58:b0:13:
                    94:b6:ff:68:86:7f:0a:34:75:13:4a:6b:87:e8:46:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:84:EA:86:6C:7B:E9:AD:E1:82:ED:A3:C4:86:62:4E:3A:2D:1C:36
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2e:8a:7d:44:07:64:06:45:39:91:d3:6c:08:e0:09:95:64:
         ab:cc:51:24:70:e9:9e:99:ea:93:34:4d:f1:31:f0:5a:46:b8:
         b6:a5:d8:25:35:a2:de:48:4c:0c:a2:b7:ad:e4:c8:91:81:62:
         7d:28:e0:dd:41:99:e0:90:96:d5:6d:05:0e:09:c0:d3:c9:07:
         61:58:8d:40:f0:33:14:67:01:68:60:e2:d9:94:ea:c5:9e:3e:
         8c:9e:69:c6:77:db:8b:55:6d:0b:7d:c0:42:3a:d7:52:a8:4c:
         02:6d:d1:b7:b9:56:b3:5d:6b:cf:1e:22:61:6b:72:b6:77:53:
         a9:e8:e3:8b:fd:1f:39:ad:fb:cf:17:09:dd:6d:a4:bf:c0:c9:
         62:88:93:88:96:a1:88:5d:42:81:3f:aa:b3:6f:9b:93:6b:d9:
         4a:39:b3:ef:ca:9f:29:5a:b6:db:18:ce:a8:1f:22:eb:2e:21:
         8f:b6:e0:61:14:bb:98:10:03:b0:76:71:ee:1c:40:bc:8c:0a:
         d4:67:79:56:cd:24:98:be:c0:4d:ab:f4:a2:ed:73:38:d8:c7:
         8a:3f:4f:92:cc:05:f5:eb:86:e8:ac:ea:e1:b6:1d:a5:18:17:
         aa:eb:b7:1a:8b:c4:d0:43:6e:69:ea:a9:07:40:1d:be:3e:99:
         1d:2d:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:27:45 2024 by rpki-client on console-fra.rpki-client.org