Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File:                     3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier:          G5HmhI3MC4eg9pE9O6uw+WtoRODZfFQQhubCWK0U1Ak=
Subject key identifier:   44:9C:08:B7:3A:0D:74:E3:E0:B7:97:BD:C1:DC:79:75:B4:22:F5:4D
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer:       /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial:       019040ADA77ED17660D2F69612A0A4932C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number:          0979
Signing time:             Sat 22 Jun 2024 16:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:40 +0000
Files and hashes:         1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: L1jZdPKg2Eqo+J2deomHBOF3HGSZ3bqG3AKIStKqOz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:a7:7e:d1:76:60:d2:f6:96:12:a0:a4:93:2c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
        Validity
            Not Before: Jun 22 16:00:40 2024 GMT
            Not After : Jun 23 16:00:40 2024 GMT
        Subject: CN=449c08b73a0d74e3e0b797bdc1dc7975b422f54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:a1:57:80:ce:a0:28:e1:bf:45:86:fb:1f:
                    c5:78:50:8f:05:b3:49:65:18:00:2c:be:df:28:b3:
                    ab:2b:02:c9:5c:ea:ab:96:23:63:fd:82:86:2c:e4:
                    85:f3:1a:9f:b2:c4:de:de:65:a3:a5:92:f0:81:51:
                    c3:1c:9f:35:0e:cd:57:60:ef:be:8d:f0:6e:f2:db:
                    11:5a:fb:d9:27:2d:1d:ef:24:72:89:a1:d2:39:8f:
                    a9:57:c5:3d:0d:7c:a6:aa:ed:c3:3d:d8:e1:7a:07:
                    93:c1:14:91:c9:c1:90:4e:54:06:73:69:5a:31:e4:
                    20:61:7e:5d:3b:44:c2:77:78:30:99:7f:9b:41:66:
                    f0:8b:60:f8:6b:b8:4c:79:18:b7:b3:31:cc:6d:80:
                    d7:33:8c:6c:73:0a:f8:38:d1:a0:fd:50:40:b9:31:
                    09:ca:9a:2e:4e:16:ee:59:98:93:7b:2d:3d:b2:f0:
                    97:03:38:27:98:41:a5:44:5e:44:66:22:20:df:7b:
                    ad:26:f4:3f:98:48:bb:cc:2e:87:46:09:0d:57:07:
                    88:97:81:f5:82:15:d1:17:c1:6e:a2:e5:c6:2e:87:
                    b6:fc:f7:32:1f:ff:fd:e9:fd:e4:06:d3:d7:0a:fa:
                    55:a4:1a:13:7d:a2:ce:13:36:18:94:d9:e0:b8:bc:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9C:08:B7:3A:0D:74:E3:E0:B7:97:BD:C1:DC:79:75:B4:22:F5:4D
            X509v3 Authority Key Identifier:
                keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:91:46:41:b7:f0:1a:2e:cc:9d:13:da:9f:97:26:f9:78:
         33:6b:95:47:78:77:fc:31:f9:60:31:44:36:79:d5:c4:8c:9f:
         30:2f:47:39:5a:49:b8:86:98:81:9a:a0:a1:37:de:af:db:c5:
         ee:8c:20:60:ca:00:79:e2:b6:a5:8a:3b:2b:2f:e3:58:13:c9:
         8d:d4:c9:8e:2d:f2:bb:0a:45:0b:19:c9:67:50:e9:12:88:2b:
         6a:bf:f2:10:42:52:4c:01:3c:02:04:fb:0b:b6:a8:7a:f1:f9:
         d6:ac:e3:fc:0b:95:f8:69:f3:81:6c:e8:db:da:45:e4:45:18:
         c2:c6:bd:7c:40:80:aa:6b:f7:5a:73:49:60:63:27:e7:d4:09:
         3f:5f:a3:0b:e0:44:ce:43:39:0e:15:16:01:04:6b:a3:a4:2b:
         62:26:09:0f:be:67:03:d9:8f:86:1b:2f:f5:69:9b:d4:9d:a7:
         94:89:2d:d8:97:bc:48:c9:2c:12:06:7c:f7:5e:7e:fc:20:64:
         bb:e6:59:59:2e:64:c8:6f:78:30:f5:74:4f:01:92:68:91:64:
         97:58:89:06:c3:18:0a:66:49:36:63:3f:b6:7c:32:a5:03:8a:
         82:e1:f9:01:e8:bd:db:f7:49:ba:c6:d1:d3:79:1d:bb:30:80:
         e9:da:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:37 2024 by rpki-client on console-ams.rpki-client.org