Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File:                     42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier:          vzvMxdIlFhKQnxUZHHXQ4Zgs7TSemBEFeG5T3TVxrwg=
Subject key identifier:   68:7D:D2:3B:D6:8C:34:A4:2D:EF:84:DE:F7:58:4A:D1:EE:AC:E4:F5
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer:       /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial:       01901EFDC221CB4D6656B2D6E71BF4A11A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number:          0619
Signing time:             Sun 16 Jun 2024 03:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:04 +0000
Files and hashes:         1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: /H4lsVDsX8f8zq4tYhpNUrgOBKc/Us18jB7LLzPtmqY=)
                          2: Ibyte-tjE3QUzwaz7tIHIx4O7Vg.roa (hash: f+M4uxkuB9wS0xBVznRZhg0WIHyPQdZz3TeUVc46eBg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:c2:21:cb:4d:66:56:b2:d6:e7:1b:f4:a1:1a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
        Validity
            Not Before: Jun 16 03:01:04 2024 GMT
            Not After : Jun 17 03:01:04 2024 GMT
        Subject: CN=687dd23bd68c34a42def84def7584ad1eeace4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:45:9a:30:0e:8f:f0:08:1f:85:d0:24:36:
                    54:f5:7c:9f:1f:3c:3e:bf:a2:03:2a:fc:3a:90:93:
                    56:a6:bd:10:5e:2b:21:31:66:e6:40:49:d9:ae:20:
                    23:6f:51:a9:ea:59:c8:5f:0a:52:bb:46:46:ba:90:
                    d7:c8:e1:82:61:19:21:b6:cd:86:9f:27:4a:28:c8:
                    aa:c2:96:e9:79:a2:55:93:9f:64:b3:4c:7c:06:1c:
                    79:27:e8:f6:1c:f3:51:cd:fa:fc:9c:72:e1:c1:ab:
                    a5:88:9c:08:a3:6b:a4:38:97:3d:58:54:4d:81:46:
                    78:6e:4a:b9:83:92:58:77:ef:3f:74:84:92:d3:89:
                    99:fd:c7:5f:e0:4b:c1:30:9e:0e:00:e7:a9:38:ed:
                    b8:08:fb:5d:09:d0:3f:3f:29:03:9f:9c:22:ef:dd:
                    4a:6b:d9:71:c1:5b:ff:0e:e9:eb:e3:81:22:17:48:
                    56:c2:5d:27:22:71:ea:3c:39:c6:7e:65:3e:f0:4d:
                    6d:33:ea:d9:a9:a1:b6:9a:6a:23:e2:f9:1b:dd:09:
                    28:9e:65:b7:1c:da:70:11:60:2c:dd:f1:4d:df:bb:
                    03:d6:dd:16:79:23:9c:13:7b:94:f3:0b:17:4c:4e:
                    ec:79:cb:f9:2a:f5:cc:3c:8a:67:9e:8c:d3:86:0e:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7D:D2:3B:D6:8C:34:A4:2D:EF:84:DE:F7:58:4A:D1:EE:AC:E4:F5
            X509v3 Authority Key Identifier:
                keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:f3:74:bf:14:97:d5:df:e8:f8:f2:7c:ad:06:59:1a:0b:
         bc:48:7c:6e:bc:f7:e4:44:ac:7b:76:70:38:b1:a8:48:29:30:
         4b:6a:01:8f:8b:92:77:05:69:b3:75:53:4f:2f:ee:1e:c9:0d:
         83:21:9f:67:5c:58:04:60:5b:33:be:c8:f2:34:9b:54:8a:6e:
         d1:eb:ac:ed:29:fa:f6:a2:fc:95:58:09:45:af:8c:fd:94:4d:
         76:df:7e:7a:7d:1e:4c:52:9d:40:6a:58:64:b1:15:c8:69:ec:
         60:b7:19:b2:41:95:ea:61:d5:78:4f:9f:59:e7:2d:e5:b2:de:
         9d:eb:b6:77:b7:00:77:bd:0d:79:cb:c6:62:af:35:b9:8b:4c:
         59:62:39:8d:0f:9f:9c:f8:60:3e:88:86:ff:b3:7b:0e:c7:00:
         22:1c:e4:b6:8b:82:c8:51:61:3d:72:ef:86:2a:2f:65:a2:01:
         7b:7e:57:2c:ef:3e:34:01:90:d4:29:e2:3f:fb:28:3a:be:8e:
         f9:e6:9a:9a:a2:0a:c0:d6:66:4f:2c:ee:0b:7e:6b:f4:f8:56:
         75:78:25:91:f2:c9:ab:cf:79:66:84:75:a9:76:b3:61:7a:99:
         d7:4b:c3:62:9f:3b:76:fb:dd:7b:69:dd:27:82:71:da:6d:04:
         b4:29:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:44:59 2024 by rpki-client on console-fra.rpki-client.org