Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          EA+zgLeey9d2OCdmmotwPTScpGwumD1xgal8Uak9K9U=
Subject key identifier:   A6:08:E3:B9:33:91:A5:D9:AF:49:45:9D:04:9E:E4:9A:FC:9C:50:90
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       018F5137F6FB0B6A389EBA10C9E56B50D8C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          115D
Signing time:             Tue 07 May 2024 04:02:53 +0000
Manifest this update:     Tue 07 May 2024 04:02:53 +0000
Manifest next update:     Wed 08 May 2024 04:02:53 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: bNsAIIpE4OiiXObGf28Fjuyk5d2bjMyfcnT/jTyvIlE=)
                          2: kTot1H-igedygwZEVkLYd4H219o.roa (hash: Q6oT54eVVz2Gl88QCswHjdLY0THjcgqqe/EgEQT5CC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:f6:fb:0b:6a:38:9e:ba:10:c9:e5:6b:50:d8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: May  7 04:02:53 2024 GMT
            Not After : May  8 04:02:53 2024 GMT
        Subject: CN=a608e3b93391a5d9af49459d049ee49afc9c5090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:1c:d7:66:63:fb:cd:98:f4:dd:a4:eb:27:
                    15:58:7a:e1:87:e5:c1:4b:19:e9:35:dc:eb:6e:e3:
                    29:21:89:e5:38:16:c3:7b:c7:7e:b6:4a:86:df:22:
                    48:cf:99:a9:7e:c2:e8:b0:e9:4a:79:c3:21:85:b4:
                    42:e2:e7:ca:b3:49:83:78:d6:1b:96:10:30:0f:4e:
                    6c:bd:3f:7f:a8:7f:49:38:ee:bb:22:b6:3b:43:93:
                    f0:a8:da:4e:5a:92:bc:12:18:e1:98:da:4b:a7:4f:
                    9f:ed:a8:c4:f2:ed:36:6a:56:d0:5c:e3:84:92:87:
                    79:1f:b8:8b:aa:91:71:47:24:5d:60:a2:c9:0f:3c:
                    89:49:99:e7:e6:5a:4d:44:9f:a6:1a:f9:7b:23:71:
                    07:bd:df:84:c5:82:20:0f:af:23:04:14:68:1b:f4:
                    2e:bc:ee:ad:bf:bf:ff:f4:d9:eb:5a:3b:08:d4:41:
                    80:f8:bd:49:4f:23:e8:85:f5:32:db:0f:f7:20:a8:
                    e1:7d:bf:25:44:94:b1:8e:a2:3a:20:1b:38:bf:2e:
                    25:d8:18:d2:98:d1:48:77:cd:b1:c7:2f:6b:ad:27:
                    f6:4c:cb:89:da:ec:82:05:c7:3e:70:7e:7c:88:0d:
                    e6:dd:ad:69:e3:f2:14:4d:99:4a:fa:6e:6a:85:08:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:08:E3:B9:33:91:A5:D9:AF:49:45:9D:04:9E:E4:9A:FC:9C:50:90
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:53:aa:77:11:8f:49:60:0d:dc:1d:86:44:c1:c3:81:15:
         5d:37:53:ec:7b:57:54:3e:df:63:78:b7:70:a3:e9:0c:1a:c4:
         bf:04:29:50:ca:b7:56:80:1f:1f:a6:e4:b8:b9:3b:b2:a8:cf:
         86:08:0a:2d:6e:ac:06:3a:27:c0:bb:a9:45:48:5a:da:6b:59:
         9a:33:ad:9f:89:2c:31:b6:02:6c:ac:8a:67:dc:2e:0a:d3:d2:
         49:1c:44:12:47:90:ff:52:7f:2d:8c:12:e8:df:60:d3:52:3a:
         c6:e5:28:d5:26:6d:35:af:1f:93:ba:40:08:91:a9:9d:f8:38:
         5f:6b:ec:1a:b5:3a:4c:47:d2:5e:2c:a9:15:50:d1:a8:59:5f:
         af:e3:e6:42:b2:9f:cd:2b:c2:20:5f:ff:b3:e7:4a:59:1e:2a:
         fc:0f:ff:13:5f:d4:35:f2:3d:90:ee:cb:eb:66:aa:40:f7:92:
         ef:aa:66:14:6d:41:85:4f:d8:be:3a:f5:db:80:70:aa:aa:1f:
         cc:a2:67:00:50:37:7e:f1:0f:97:21:95:ad:4e:a4:03:f6:15:
         71:68:6e:aa:78:5b:58:2d:84:07:20:60:14:27:d4:cd:22:31:
         49:df:c0:f9:f1:bf:18:cd:22:32:4f:35:ba:4d:c4:ea:2b:32:
         03:f5:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 05:00:14 2024 by rpki-client on console-fra.rpki-client.org