Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File:                     3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier:          QF+bA5a080Eb/GN8TgqTbWyGIe0/UAVUpDYQZl+jKao=
Subject key identifier:   85:BD:2E:13:57:92:2C:F5:6C:18:71:53:F8:13:EF:FC:CA:DB:B2:CF
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer:       /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial:       018F38BFE5D1B032594C3480EF9915B7F66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number:          07AA
Signing time:             Thu 02 May 2024 10:00:50 +0000
Manifest this update:     Thu 02 May 2024 10:00:50 +0000
Manifest next update:     Fri 03 May 2024 10:00:50 +0000
Files and hashes:         1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: 4cioRkdGjOiNODXewZ9dwOzu7hCOwiDlNaDs9DdvOuo=)
                          2: fN3rTdrh0syzCY77OcscyOlTVXU.roa (hash: kN+6no1tncI4x1ZRbNmkFgEH4G/7HnDSvbL7htESz4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:bf:e5:d1:b0:32:59:4c:34:80:ef:99:15:b7:f6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
        Validity
            Not Before: May  2 10:00:50 2024 GMT
            Not After : May  3 10:00:50 2024 GMT
        Subject: CN=85bd2e1357922cf56c187153f813effccadbb2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:cc:85:bd:d7:89:10:a5:c2:e8:25:a2:69:
                    fd:c1:a3:cf:e1:0a:7a:8a:8b:76:a8:62:4d:6b:6e:
                    55:80:fb:25:ed:a6:d8:94:d4:9e:51:6d:52:8d:da:
                    23:d2:64:4d:5c:7e:4b:bd:19:22:26:a4:a6:03:38:
                    11:30:a9:fb:9c:1e:7d:84:e4:0b:18:aa:84:43:2b:
                    4c:e4:da:a2:9d:65:4d:9a:d1:ba:a9:0a:70:c4:ac:
                    2a:32:16:6a:37:fb:c4:ac:7b:75:ae:ac:a4:0c:0f:
                    d9:c7:bc:4f:43:b3:c2:58:4d:9c:1a:d1:e1:31:cb:
                    50:fa:3d:fe:66:60:8f:bd:22:90:24:2a:9a:4d:7b:
                    99:aa:27:95:b3:bb:fc:ed:32:d7:5f:05:b1:dd:26:
                    92:e4:ae:d0:8b:06:45:0c:cd:37:ea:90:c6:1a:0b:
                    35:32:26:51:ac:ca:b1:cf:cf:f3:15:f8:83:4d:6b:
                    bd:4b:d7:3e:f7:9b:f0:3b:5f:64:f9:06:33:5a:0b:
                    87:b7:85:3d:6c:07:dd:ac:f7:1b:d8:a8:cb:f5:a6:
                    ce:5f:a5:44:6f:90:32:fb:d4:8f:b0:2c:ed:ef:34:
                    6a:0d:7d:16:16:32:53:c4:79:1a:fb:73:c2:7f:ac:
                    37:4e:7d:92:72:6e:ab:f8:d8:fc:e2:06:9c:24:e8:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BD:2E:13:57:92:2C:F5:6C:18:71:53:F8:13:EF:FC:CA:DB:B2:CF
            X509v3 Authority Key Identifier:
                keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:ce:ad:a0:79:2d:91:7c:ed:e4:7d:71:42:fd:4c:03:ec:
         16:cb:08:eb:14:2e:58:41:f5:b3:f5:5b:40:46:5b:c2:83:c4:
         1c:01:91:ab:c3:28:04:25:e8:97:27:14:38:0e:41:3a:5f:5c:
         aa:bd:aa:fa:66:12:6e:91:a4:9c:3e:01:36:31:9f:54:e7:13:
         07:11:39:9b:6f:8f:0c:60:0a:f1:99:33:b4:f0:87:79:38:18:
         30:36:2b:d6:74:30:3b:a4:ab:7a:91:63:07:83:0c:07:76:65:
         3f:ff:01:78:df:1a:39:a2:8b:40:9b:15:3f:e2:70:93:05:01:
         fc:06:93:70:ca:77:37:e7:e1:99:6f:e1:ab:18:dc:07:82:78:
         54:42:63:24:9f:7b:c1:57:2e:86:63:6b:39:d8:a1:8c:fa:b7:
         4f:bc:21:71:f2:f2:32:ba:02:ca:8d:e1:80:f9:59:93:8d:4b:
         31:db:be:8b:5c:af:a3:e4:80:a4:63:51:61:7b:ae:c4:9f:dd:
         95:9d:60:82:31:09:bb:01:d5:1b:09:84:64:01:99:84:b2:a4:
         3c:53:48:a7:5f:70:71:93:65:f6:ec:3b:98:f1:bb:f2:15:a0:
         92:fc:3f:e0:3f:f4:d4:2e:7a:89:db:7e:fd:c1:24:f4:5d:a2:
         bf:cb:11:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:06:30 2024 by rpki-client on console-ams.rpki-client.org