Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File:                     3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier:          l+UTYEiNQfHjSQKaRJ+5y501BJsAKrR5bxZW7qMNBk0=
Subject key identifier:   49:E6:FD:B8:5C:C7:68:B0:C9:2A:FD:9B:92:F9:31:0C:4C:A9:F0:7E
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer:       /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial:       01901BFEF87B761EA89B4EB859B83B13AE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number:          1156
Signing time:             Sat 15 Jun 2024 13:03:32 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:32 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:32 +0000
Files and hashes:         1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: ASh4LskUlsmJYr/+qYiZF+SZ+IHHTDUW+lgWHZ71nn8=)
                          2: FQew73I1tcPKd7CADYPf9aukLvo.roa (hash: g9U2vzatyyFjrlVqcqfitSqpzUK3PHVbQsUAROxeHxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:f8:7b:76:1e:a8:9b:4e:b8:59:b8:3b:13:ae:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
        Validity
            Not Before: Jun 15 13:03:32 2024 GMT
            Not After : Jun 16 13:03:32 2024 GMT
        Subject: CN=49e6fdb85cc768b0c92afd9b92f9310c4ca9f07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:ff:7c:4d:de:dd:ff:cf:e9:30:3a:9b:28:
                    da:3b:46:64:ba:74:ac:7d:cd:d0:42:fa:57:5b:ae:
                    e9:44:a7:96:8b:a0:37:6d:93:bb:9b:17:16:a4:d7:
                    a1:2a:69:db:9d:b9:53:96:16:e0:9e:1a:59:5d:5b:
                    3e:9d:8a:e7:9a:22:4d:29:a6:57:dc:ed:5d:a3:07:
                    dd:a2:b0:40:94:0e:80:60:d9:56:61:fb:ef:1b:58:
                    95:92:12:ad:4f:d5:54:37:43:ff:c7:66:c6:fe:af:
                    a6:8b:5b:82:e3:2c:31:d8:fe:25:fd:76:3a:70:4f:
                    59:dc:70:28:91:1f:d6:4a:2e:df:04:2d:25:94:46:
                    49:f3:bc:45:28:b1:56:3f:d1:b5:a6:6b:c9:83:24:
                    26:e7:d3:f9:2d:ac:06:dc:eb:20:a4:62:b9:6a:4e:
                    f1:7b:c7:0a:ad:d7:b0:5a:da:75:10:6f:66:90:f6:
                    ae:0c:6c:85:8f:b6:8c:e2:6d:c6:76:e9:1e:32:03:
                    c9:c7:bd:81:bd:89:86:1f:21:bb:06:ac:77:ad:26:
                    49:27:b4:0d:bd:77:81:ce:f7:fe:c0:15:75:23:3b:
                    1c:36:f0:30:f2:cb:00:35:7c:e3:03:74:29:2f:1a:
                    01:e5:cc:31:62:8a:7f:70:f0:61:1f:c1:6a:22:76:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E6:FD:B8:5C:C7:68:B0:C9:2A:FD:9B:92:F9:31:0C:4C:A9:F0:7E
            X509v3 Authority Key Identifier:
                keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:f0:9b:be:1b:06:3e:a3:fa:39:3c:5b:3a:6f:f4:a9:cf:
         26:d6:5d:db:81:99:43:ff:d4:b9:40:d5:9d:01:e0:f6:a6:79:
         c3:52:25:9c:bc:8c:45:6d:f0:2d:fe:af:0f:ba:3f:f0:56:27:
         81:2e:f4:75:c8:c6:0b:b7:80:d0:1b:5f:44:2f:db:d4:61:93:
         8e:a5:6c:a0:11:99:9b:6e:f0:bb:ec:53:dc:3a:46:58:f9:34:
         02:16:0d:2c:10:64:76:f6:4d:a4:b2:c7:6c:f6:e2:34:0f:82:
         36:69:50:a2:eb:96:35:2b:12:bd:fb:6b:ec:98:d0:af:c9:50:
         96:6a:e0:9e:7b:5d:d0:e5:a4:79:cf:d0:73:11:05:5b:06:18:
         0a:1c:fb:13:a2:2e:8b:de:b1:9c:2f:aa:92:23:50:d0:e3:78:
         4f:f5:61:58:f2:14:c3:91:63:32:a3:cd:6c:eb:a3:a8:c1:03:
         59:ac:5d:7e:a6:fd:fa:4b:7c:af:de:96:cc:5f:21:cb:e2:41:
         3e:76:30:33:35:df:fb:e3:e1:ab:ce:7c:ca:b8:b3:a2:1f:10:
         65:80:1f:12:87:54:60:90:0e:1e:7d:5b:08:b4:b1:12:a5:e0:
         ad:95:1d:83:63:cc:e0:0b:e7:3b:d0:a3:4c:51:70:97:7a:2a:
         56:68:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:50 2024 by rpki-client on console-fra.rpki-client.org