Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File:                     DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier:          Rl+UjznJUvduoQToW+FQMLtbFPt5EMMHGtdlob8hkw8=
Subject key identifier:   FD:92:E9:93:5C:B6:97:B6:37:0C:30:77:0C:C4:E0:9F:FE:59:E8:98
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer:       /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial:       018F3DE6AC37C0380B70F4E3C70106FB21D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 10:01:18 +0000
Manifest this update:     Fri 03 May 2024 10:01:18 +0000
Manifest next update:     Sat 04 May 2024 10:01:18 +0000
Files and hashes:         1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: vbFh8RMdzcxTW8UOX/A2dvuRf1Yu7eiF7ooZjAygYXE=)
                          2: NFCcevKMkgTCf5f4hrVVsI9FuSg.roa (hash: HRbmiXexD/sABa0ReC0SJBq0Ut+RQPjQkLMM4naPSD4=)
                          3: VpCuVE4Z70OI1yZHeD_zABjx7mo.roa (hash: 0b3D2ZxaYIzAMTTUiGidwXth2OnHGpmq/WCuG4OTTrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:ac:37:c0:38:0b:70:f4:e3:c7:01:06:fb:21:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
        Validity
            Not Before: May  3 10:01:18 2024 GMT
            Not After : May  4 10:01:18 2024 GMT
        Subject: CN=fd92e9935cb697b6370c30770cc4e09ffe59e898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:da:cd:15:e1:1f:41:f5:60:05:c6:f2:02:
                    39:bd:f9:7e:36:8a:23:a2:5b:19:dd:ad:e8:ae:06:
                    6e:00:e7:d1:4e:25:7a:e2:ec:f9:58:e6:51:a0:fd:
                    d1:39:21:ca:ac:4a:aa:3f:54:09:19:e3:62:10:81:
                    94:71:17:e1:16:9d:94:7f:e6:f9:15:16:dd:5d:4a:
                    71:8a:b6:90:7d:c4:07:b4:d8:11:ec:90:81:7e:31:
                    bf:6b:75:17:62:1e:22:a2:09:69:f8:26:dc:72:b3:
                    fd:fb:bb:c5:76:0a:50:c1:ff:c5:30:5d:5c:a2:90:
                    e9:f5:96:4b:bd:8e:cb:48:a6:40:45:b2:6c:59:08:
                    20:17:47:58:d0:e0:01:98:4c:3e:45:99:57:fc:30:
                    5f:e9:cf:70:b1:08:90:a3:68:58:ca:fa:f9:7c:f3:
                    8c:5d:40:fe:09:8d:31:01:6a:6d:62:84:76:f7:3f:
                    40:b4:09:cd:69:3c:e1:65:56:2d:a5:ff:ff:eb:04:
                    87:fe:62:f7:33:12:bb:c1:94:50:3c:3e:5b:a4:48:
                    7d:ed:e8:2b:89:fd:ef:09:e0:60:6c:64:8e:a1:d5:
                    7d:4f:a0:a1:1c:8d:60:dd:fb:01:9f:93:6b:5e:e6:
                    04:ba:d1:2a:8d:d2:1c:fc:99:d0:91:a9:e4:20:15:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:92:E9:93:5C:B6:97:B6:37:0C:30:77:0C:C4:E0:9F:FE:59:E8:98
            X509v3 Authority Key Identifier:
                keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:b8:e7:61:51:6c:4f:8b:7c:dc:d5:a0:a6:d6:32:39:b5:
         aa:cf:ff:76:08:a5:90:83:2b:87:3b:d6:59:4d:33:a5:08:3d:
         a6:19:50:bf:47:64:82:48:6d:d8:c9:2b:eb:84:f2:6f:4d:78:
         15:48:ee:70:e4:d9:7d:4c:76:a0:06:92:cd:87:8d:b1:b7:32:
         d1:bb:3f:98:fe:ee:85:d5:17:f1:b8:4a:94:74:b5:a3:1d:bd:
         f4:27:03:1e:d2:02:60:ae:e7:d6:3c:3f:1d:d0:b7:47:a2:52:
         59:47:df:29:04:d8:4f:69:33:e2:a3:b8:9b:f3:91:b7:d9:41:
         11:8c:fc:08:36:8f:bf:19:3e:24:7f:97:2e:ba:52:3d:76:97:
         99:9d:8a:91:0c:1b:20:b1:18:18:94:e7:65:40:1d:ce:5d:74:
         6a:c7:4d:b5:d4:a1:11:f9:99:60:7f:f9:00:ef:df:f4:16:ab:
         7d:9e:36:91:99:ef:da:35:fd:c5:0b:d1:08:53:07:76:33:47:
         7c:80:05:72:a3:a4:cc:9f:83:da:b5:f3:c4:41:3b:0e:24:75:
         d4:33:75:22:b9:70:6d:f0:fa:a4:63:5a:aa:03:01:0b:50:8b:
         c0:9f:f4:53:7e:e8:74:a5:5e:50:4f:3a:e4:46:b3:76:a8:90:
         79:2e:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:53:26 2024 by rpki-client on console-ams.rpki-client.org