Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File:                     3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier:          c+SqWToAEvu6rGN/II14F+L2DeCXesAherTcPMBjeJk=
Subject key identifier:   0E:41:50:5F:C3:D7:8E:16:80:28:29:E0:4C:59:9B:51:6F:90:CC:5E
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer:       /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial:       018F3C667B82D74FF385EB1D37D6E6DCDA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number:          0887
Signing time:             Fri 03 May 2024 03:01:40 +0000
Manifest this update:     Fri 03 May 2024 03:01:40 +0000
Manifest next update:     Sat 04 May 2024 03:01:40 +0000
Files and hashes:         1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: 7+UbZ5TxU2P0l8YmX73KDZe3oerGeFENRqAZopTOyNo=)
                          2: ewyIGd-N3tGRBOLrnEcxosUA25c.roa (hash: GV8O9tmb1Wwc9Cw0hyRAoBm8YWL3oWvoTgl2rqJQ2VQ=)
                          3: fPtxjrNJWuql8kZhZun76HUpYQM.roa (hash: 9OHVh+ifRyg2V3+jUqLQGmi9sm9+6UCkVbElWTP7uiQ=)
                          4: v3tj0PV6i_rcVhXAW-uYf9NymH4.roa (hash: WeAlbPRAok1ic0NLrTqiVa14veQRmOnNDG6KBYoZL8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:7b:82:d7:4f:f3:85:eb:1d:37:d6:e6:dc:da:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
        Validity
            Not Before: May  3 03:01:40 2024 GMT
            Not After : May  4 03:01:40 2024 GMT
        Subject: CN=0e41505fc3d78e16802829e04c599b516f90cc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:5c:23:4e:79:a6:6d:38:af:a3:af:7e:28:
                    fd:58:79:bd:8c:d1:c5:70:3a:5c:f5:67:3b:e0:0a:
                    eb:4d:99:c6:9b:3a:e3:00:6c:91:d4:b7:79:a4:4a:
                    16:b7:4c:bd:43:15:3f:e8:63:94:ae:d8:ec:cb:1c:
                    b5:bf:54:44:91:03:a1:e5:18:74:72:15:8a:47:1a:
                    b8:9b:69:d4:d2:c4:b2:f9:5c:f0:e9:9c:f9:7a:79:
                    db:99:20:35:ce:1d:4f:0b:61:6f:a9:f3:7c:26:4d:
                    33:34:6d:97:6d:f5:8b:ef:9e:7a:01:4f:f8:75:16:
                    b3:28:27:a6:3b:f7:30:8b:9e:05:0f:16:90:87:87:
                    1f:c7:28:74:38:33:d2:36:34:1a:7c:2e:5a:12:00:
                    a9:6c:55:b3:e4:eb:5b:20:b1:25:14:c6:43:e5:24:
                    82:07:33:c7:a3:27:34:c5:3d:6f:3c:c7:b6:ae:9d:
                    4d:0e:15:e4:b1:ec:bb:cf:50:0e:7b:d7:aa:62:9d:
                    7a:f5:7c:9c:d4:61:bd:12:52:be:9c:f7:14:3b:fd:
                    27:de:a0:2b:79:3c:92:95:46:32:46:ff:75:b8:24:
                    17:f5:66:7d:79:db:7b:ee:d0:c3:56:e7:97:de:86:
                    86:e3:ce:b9:95:af:68:32:90:a4:89:ce:1a:23:c1:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:41:50:5F:C3:D7:8E:16:80:28:29:E0:4C:59:9B:51:6F:90:CC:5E
            X509v3 Authority Key Identifier:
                keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:82:f7:d5:99:b4:e9:cd:3d:5e:be:aa:27:0c:83:b9:fe:58:
         1b:73:a9:7f:71:09:0f:a9:43:10:cc:17:79:13:4f:a3:40:3e:
         a9:e4:a0:0e:88:ef:66:7a:6b:16:7d:b1:c1:3c:0c:6e:cf:fb:
         8d:fe:c3:24:51:c2:be:17:62:ca:10:d7:ff:89:1a:d6:f5:2c:
         08:97:ba:1c:00:ec:3c:90:6e:12:13:39:a1:e5:b2:2e:95:67:
         b0:79:27:ff:70:92:53:50:9b:e6:45:41:42:8b:ed:2b:7f:5f:
         f4:07:54:bd:24:6f:23:f9:b9:c3:28:95:a0:3f:c0:28:61:f1:
         6e:6c:c6:2d:a3:b6:1f:8b:e1:88:1f:37:8d:d9:84:2d:a3:7e:
         5b:38:af:87:14:d4:a6:2d:7c:39:13:fe:8c:bc:20:dd:bd:56:
         28:1e:f8:d4:d7:f4:34:cd:f1:58:cd:5f:ea:5f:9e:1e:64:5e:
         d1:30:fe:7b:29:a5:39:ab:4e:eb:36:d7:f4:dd:b0:2c:ab:a2:
         d9:bf:18:d4:7d:c6:39:89:d0:a9:96:21:6e:7a:54:39:d7:cc:
         c3:43:ad:8e:ed:89:fc:a8:3a:45:35:39:7f:20:6c:66:55:cc:
         ca:fc:cf:ce:07:53:b6:43:43:e4:8b:73:07:87:5d:56:e1:2d:
         20:f7:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:50:08 2024 by rpki-client on console-fra.rpki-client.org