Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
File:                     3US-a6WvErbxcHhT3NrL2n5CISs.mft (raw, json)
Hash identifier:          yiij64caXBLLdAob9koymA6NHE+ds1uNHzST/e/LBNM=
Subject key identifier:   69:26:80:27:20:36:72:3A:9B:44:00:21:C0:5F:3D:71:09:BB:7C:FF
Authority key identifier: DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B
Certificate issuer:       /CN=dd44be6ba5af12b6f1707853dcdacbda7e42212b
Certificate serial:       01901E8F8F2342A565F3D2DFC4A675255490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
Manifest number:          02E3
Signing time:             Sun 16 Jun 2024 01:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:43 +0000
Files and hashes:         1: 3US-a6WvErbxcHhT3NrL2n5CISs.crl (hash: IulSPZWObiCKyGG5nkP2bO7w8aGpEQqy7+lA/kdUaNI=)
                          2: vaoIeoP5NxGbvxQkGM7yeHfRNBQ.roa (hash: 96ah2hnF9/msbPNKe26/Uqc4+HOkFux8zriQgiojiIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8f:23:42:a5:65:f3:d2:df:c4:a6:75:25:54:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd44be6ba5af12b6f1707853dcdacbda7e42212b
        Validity
            Not Before: Jun 16 01:00:43 2024 GMT
            Not After : Jun 17 01:00:43 2024 GMT
        Subject: CN=692680272036723a9b440021c05f3d7109bb7cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:8e:e8:8b:f8:d6:ee:92:06:a3:59:2b:88:
                    ef:54:52:3d:82:3a:a3:cf:1e:cd:ba:92:f6:30:dc:
                    a2:65:34:08:2c:52:e6:a5:80:e7:13:46:85:bd:4c:
                    18:eb:c4:95:f9:91:b3:ed:42:c5:3a:f5:4d:4e:57:
                    23:7b:17:e2:ab:25:58:3d:2a:6d:76:c4:53:8c:b8:
                    a3:ba:04:87:48:43:72:58:4d:37:c5:52:5b:0b:3f:
                    7a:d0:a4:f0:7e:1d:c3:a4:1c:1c:46:f3:ab:cd:a3:
                    a2:c2:87:62:d0:d2:a0:16:63:de:e5:bc:bd:23:0d:
                    3a:20:73:38:13:28:80:b2:07:c1:11:c9:20:20:03:
                    e2:61:4a:21:e7:85:e0:f0:85:c5:bd:63:65:33:f8:
                    88:a9:85:4f:d8:9b:76:d1:ed:9f:85:54:75:27:fa:
                    27:3c:01:1b:71:54:71:08:9b:a8:eb:f2:21:a8:77:
                    47:c8:23:18:4a:a6:5c:ec:da:ed:7b:c6:72:6b:67:
                    27:8a:e4:e1:17:9a:4e:67:c7:21:35:f7:19:23:15:
                    65:6e:4f:4a:86:aa:c9:48:19:66:49:f5:b4:81:0a:
                    fb:dc:15:39:4f:b0:53:9a:3b:d6:d2:f8:38:b0:11:
                    2d:34:f4:7f:1c:3d:6e:68:6d:10:00:6c:3d:46:5a:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:26:80:27:20:36:72:3A:9B:44:00:21:C0:5F:3D:71:09:BB:7C:FF
            X509v3 Authority Key Identifier:
                keyid:DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2d:42:07:f0:9c:09:59:55:6d:21:40:07:dc:e0:4d:d3:06:
         47:cc:a1:ae:0e:de:10:e0:98:2c:1c:c7:85:75:44:25:7a:b7:
         e5:51:8d:29:8a:c9:86:58:1b:bb:4e:6a:69:85:38:c5:48:6c:
         b7:e5:90:db:c3:2a:ae:5c:84:7b:27:79:f1:6b:5e:4e:49:ea:
         b2:80:20:c8:18:a5:5b:47:d1:3d:bd:e6:1c:98:c4:d0:36:bf:
         39:e9:b9:00:61:2d:31:5c:dc:61:13:09:68:b1:4d:9b:2b:24:
         4c:4d:3c:00:1a:fd:bc:09:b3:54:27:80:a4:ec:81:37:07:aa:
         50:4f:07:a6:74:52:e3:6e:fc:9b:b2:88:b7:4b:6f:13:6e:fe:
         29:54:f4:b1:0f:3a:50:bc:2d:55:71:2e:29:60:ed:bf:db:4c:
         1d:8f:99:a5:62:a9:2c:87:8f:71:44:67:6d:93:4a:11:91:d9:
         30:e4:75:e2:95:71:63:3d:de:26:d3:e1:ee:63:61:18:d8:5d:
         48:67:bf:78:c6:fb:bb:28:d9:d8:f1:f4:da:12:bf:81:4e:35:
         74:80:cb:43:ac:5b:1f:ad:43:56:3e:91:85:68:3d:8c:a4:ad:
         25:e2:1a:5e:ba:9d:40:d4:4d:7b:5d:37:e3:12:e5:2a:fd:5c:
         89:8e:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:15 2024 by rpki-client on console-ams.rpki-client.org