Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File:                     _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier:          0AiKZ3gIWnb6yGclVzwmg04SopocDM6p093tT2nCLFc=
Subject key identifier:   A9:5E:44:B6:E5:28:92:D3:32:13:6B:B0:CA:19:EA:93:D0:00:6E:7B
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer:       /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial:       018F882428A3A40AEF13453ADD93ECB369DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number:          08B2
Signing time:             Fri 17 May 2024 20:00:21 +0000
Manifest this update:     Fri 17 May 2024 20:00:21 +0000
Manifest next update:     Sat 18 May 2024 20:00:21 +0000
Files and hashes:         1: 41Pif-TKczBdJYZUIX5PwT40VHY.roa (hash: Gha/tM/uot0nP+BbzFnPS4LnvHBFim1hcx5ujKHhQZ4=)
                          2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: N/2MD9ifseQnm4yWK/lRroZSwUeE1+VN89fXdO0v+Zg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:28:a3:a4:0a:ef:13:45:3a:dd:93:ec:b3:69:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
        Validity
            Not Before: May 17 20:00:21 2024 GMT
            Not After : May 18 20:00:21 2024 GMT
        Subject: CN=a95e44b6e52892d332136bb0ca19ea93d0006e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:b9:43:5a:b7:b1:76:37:3d:b9:f0:0d:16:
                    09:33:ee:e1:3d:4b:c2:85:83:89:4e:1b:20:38:77:
                    1b:61:a8:b3:8c:9e:c0:b8:bc:ac:c8:e7:ca:8b:8c:
                    05:da:a9:30:62:18:95:fd:0f:ed:f2:a8:15:fb:bd:
                    50:ca:a6:1e:b9:33:29:ad:72:8b:88:e2:d2:97:10:
                    56:2c:18:a1:b3:c8:5c:0a:f8:06:6f:bb:6c:6c:76:
                    0c:d8:81:8c:0b:1b:74:2b:91:30:f1:49:39:c9:64:
                    ed:89:53:13:59:99:2e:55:48:68:33:0d:55:fc:01:
                    16:f4:ab:6d:1c:1c:24:03:22:d2:46:b9:c8:91:cb:
                    cf:53:31:f8:f2:20:44:15:07:bd:76:5a:0f:b1:ac:
                    5c:8c:fa:7b:13:5c:ab:a0:6b:cf:4b:03:69:e0:67:
                    41:d7:da:87:e0:a7:ed:c9:45:9a:40:aa:9a:39:9f:
                    4c:25:9f:7a:7c:78:01:0e:43:63:08:d0:62:cd:c0:
                    7a:7d:23:13:37:f7:1d:28:fe:b7:52:d8:ae:98:46:
                    08:d2:da:45:9f:71:90:7d:81:19:53:92:20:69:ec:
                    cd:3d:1e:5a:24:fe:f6:d5:13:30:43:43:2e:49:f3:
                    cd:52:ef:3e:75:36:c8:4c:48:b1:b8:6e:60:c7:89:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:44:B6:E5:28:92:D3:32:13:6B:B0:CA:19:EA:93:D0:00:6E:7B
            X509v3 Authority Key Identifier:
                keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:4c:ff:cc:26:bf:16:f9:a7:53:37:92:9e:c4:32:c0:04:48:
         2d:bb:67:fa:b0:4b:43:ab:2c:17:1c:85:90:60:5c:a4:e1:26:
         94:34:d1:83:23:fa:8d:48:e1:b7:07:92:ff:54:85:ab:5d:48:
         37:86:7b:df:1d:29:04:55:08:5a:2b:c8:a0:fb:7c:29:27:70:
         ed:76:71:8d:d2:e2:78:f2:74:8f:bd:80:a3:54:20:2d:8c:4b:
         3d:ee:e3:de:08:73:42:3b:7d:c7:15:6d:f2:08:9d:79:25:6a:
         2b:90:81:eb:49:86:ae:d3:4e:98:3d:25:62:69:93:8e:7c:70:
         c9:56:a1:c2:61:42:f9:d8:6b:80:46:09:98:1a:53:68:69:7d:
         e9:9c:df:30:ed:24:2e:da:46:34:d6:bc:8a:10:b7:0d:db:89:
         53:c8:31:d4:2a:fe:69:17:0c:99:71:07:6b:20:c7:f3:ce:25:
         2b:5f:c1:c6:87:e5:52:d5:b2:b4:43:99:51:fe:d5:d2:ec:80:
         29:8a:36:4b:49:87:43:c6:f2:49:4c:23:3a:74:ca:59:bf:4f:
         2e:65:e4:ef:af:4f:59:ad:06:56:00:e4:b3:07:57:da:d1:f3:
         6e:67:71:18:f8:b1:bd:09:ac:e9:03:dc:01:3c:bb:85:af:7d:
         1d:4b:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:20 2024 by rpki-client on console-ams.rpki-client.org