Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File:                     3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier:          0UmJ4dnedhmHHW5+454NzfR0CViKqTfQpxJRqgy+9EU=
Subject key identifier:   05:40:38:7A:A3:2C:31:CE:08:9A:49:2F:6B:5E:F8:27:93:FC:DA:A7
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer:       /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial:       018F86DA5C559E2DB2991A6D32984EE70659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number:          DD
Signing time:             Fri 17 May 2024 14:00:08 +0000
Manifest this update:     Fri 17 May 2024 14:00:08 +0000
Manifest next update:     Sat 18 May 2024 14:00:08 +0000
Files and hashes:         1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: /FlZZeyIoCLsHp8JyrmfFgLV6ygBFcaW7KtAnEqTH2g=)
                          2: PwFYWPmRTUJ8rvWhf_8RlcfPE4A.roa (hash: P21e9DVOSHQ4GHD7hy1XiiFY0cmd7/YJpZim3z8rvI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:5c:55:9e:2d:b2:99:1a:6d:32:98:4e:e7:06:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
        Validity
            Not Before: May 17 14:00:08 2024 GMT
            Not After : May 18 14:00:08 2024 GMT
        Subject: CN=0540387aa32c31ce089a492f6b5ef82793fcdaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:5c:b2:8e:8d:c2:95:40:81:1b:65:62:87:
                    3a:55:f2:ad:45:18:76:7b:54:09:ce:fb:92:2c:d4:
                    78:54:67:ba:d7:7a:83:91:d2:51:10:98:2f:54:1b:
                    f6:5f:f4:e4:40:6b:99:c8:ca:e8:72:58:cb:94:29:
                    b3:ce:b7:11:a0:12:b1:93:6e:b4:cd:39:2d:28:e6:
                    f6:2b:8c:29:6c:84:ec:d9:b8:40:04:57:1e:8f:92:
                    39:7d:73:ca:9b:6d:87:30:01:9a:e4:a0:c5:b2:8b:
                    ab:6b:72:1f:42:24:9b:08:27:3a:cc:04:21:5c:a7:
                    1a:2d:97:9e:3c:52:b3:00:22:ca:fe:0b:10:04:55:
                    71:e7:19:9b:e3:7f:bd:26:23:55:e1:c7:08:b2:1c:
                    1d:4d:e6:5e:67:92:e4:f4:c6:08:67:62:9b:c5:aa:
                    93:d5:c9:2d:49:16:76:86:37:57:31:0f:d7:b7:ed:
                    99:69:88:d2:c0:c7:d5:6d:44:68:e9:bd:0d:61:a8:
                    13:76:29:d4:e4:41:70:b8:91:62:7c:4b:14:3f:c0:
                    a5:cd:10:74:da:f4:1a:44:3f:28:ed:70:4f:83:38:
                    a3:61:49:15:76:9c:3d:dd:fd:43:7a:1a:65:e0:cb:
                    97:d3:60:b4:24:6e:30:47:06:5b:d0:53:dd:02:cd:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:40:38:7A:A3:2C:31:CE:08:9A:49:2F:6B:5E:F8:27:93:FC:DA:A7
            X509v3 Authority Key Identifier:
                keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:40:b8:ae:7a:fa:21:41:5b:c4:ff:3a:43:18:32:40:2f:b8:
         27:eb:bb:7a:89:0e:c2:9b:0e:59:10:b2:21:41:4d:56:df:7e:
         96:51:48:ae:3f:dc:58:34:94:86:c8:d5:b3:6e:c7:8b:95:5b:
         67:f7:a0:91:6a:73:cf:d9:da:7c:5a:01:ac:fa:70:c8:a2:05:
         b9:7a:38:c5:94:e0:62:8f:2f:ba:ca:8c:3c:1e:9c:2a:91:73:
         a2:72:97:f1:4f:f0:aa:65:d0:36:e8:6e:2d:2c:72:af:70:c3:
         f6:1e:cc:8c:bd:c8:d1:93:6c:10:df:3b:be:81:39:2b:77:eb:
         2b:58:2a:1f:77:89:66:59:2d:33:ca:c0:7e:9a:86:0a:94:64:
         3a:02:4f:53:13:79:89:f3:77:58:4a:05:50:57:4a:1d:7f:52:
         8f:7b:99:54:9a:cf:da:4c:ce:de:dd:30:51:1c:7a:ea:cd:e1:
         04:6a:ba:a6:63:33:03:c5:fb:88:29:b6:88:be:40:e9:8f:7c:
         71:ff:07:53:cc:64:aa:10:e2:f4:d4:ed:a0:2e:5c:fc:cc:64:
         db:5e:63:36:06:83:26:64:39:0a:da:f1:c5:95:0a:a1:2d:e2:
         6a:f2:b8:2b:78:8d:d1:44:a6:7c:f1:de:04:cc:12:71:33:b7:
         a7:fa:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:47 2024 by rpki-client on console-fra.rpki-client.org