Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          5/SF3ckdWhCgqttkvdVeFW4Dy1k1SzLoy+ayO+jQjQ8=
Subject key identifier:   F3:F7:B7:5B:BC:4C:AE:5E:15:9A:25:81:37:66:D5:20:67:50:16:67
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       01901BFD79A79E26342BBCA0E14B1029D734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          10F4
Signing time:             Sat 15 Jun 2024 13:01:54 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:54 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:54 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: BPdAPibQcMzd1R9dprt3DOCQLeL4SS2Zp4Q54OSVxNk=)
                          2: qB68wWlAfVE0WZem12ITO9mNfz8.roa (hash: RtR4J4LXdNwVG9AdzOsE/UeU6RzRxSIe/MZPPfyjL18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:79:a7:9e:26:34:2b:bc:a0:e1:4b:10:29:d7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Jun 15 13:01:54 2024 GMT
            Not After : Jun 16 13:01:54 2024 GMT
        Subject: CN=f3f7b75bbc4cae5e159a25813766d52067501667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:ca:03:b5:53:55:e1:81:38:b5:20:d3:3a:
                    4f:81:07:da:fe:a7:d1:6e:fb:ad:db:e5:a4:d4:84:
                    4c:51:65:7c:0a:d2:1a:03:3f:cf:62:d5:08:83:bf:
                    43:2c:08:24:a6:99:6d:cf:e9:b7:21:0e:f3:75:e6:
                    91:b3:98:cb:94:b8:6c:41:8a:c8:35:c0:95:57:b6:
                    3f:01:94:95:f7:84:a7:44:ba:e7:e1:d3:94:b3:25:
                    82:08:a9:05:8d:b5:40:fa:7c:24:13:db:a7:7e:15:
                    b6:6c:69:a6:e6:6d:40:b1:f3:39:23:33:8c:cd:a3:
                    48:02:14:7d:f3:f0:27:f9:5c:85:13:34:41:47:97:
                    77:9c:90:29:16:44:a7:28:c2:1d:6f:9f:ea:a4:90:
                    e3:a5:6e:fd:d7:a5:39:10:07:72:a9:46:f9:a8:8f:
                    f1:2b:27:34:ca:a2:d0:50:31:ce:c0:3d:d5:36:b2:
                    7c:5a:18:78:fd:76:91:ed:24:a9:47:d9:bf:7f:3f:
                    68:40:45:ba:e3:64:20:a9:1d:62:e2:34:07:b4:e3:
                    92:11:97:83:6f:96:32:c2:c3:92:3a:2f:a3:7b:b0:
                    a2:b4:b6:16:77:d1:1e:08:f5:32:e6:3a:9c:63:6b:
                    89:50:4f:61:01:1b:d5:94:a1:ff:3f:a0:8b:dc:f2:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:B7:5B:BC:4C:AE:5E:15:9A:25:81:37:66:D5:20:67:50:16:67
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:ec:30:b7:ba:31:09:9e:0d:c1:8a:91:40:1e:6f:13:89:
         07:f3:80:d5:2c:2b:2f:de:06:4c:f1:2f:ea:81:12:08:75:33:
         e4:77:a2:18:1b:fa:49:79:0a:71:8e:e9:d2:ca:2c:56:eb:ac:
         d7:f5:c2:72:35:33:fc:67:48:43:f4:ab:80:27:dd:8d:97:1c:
         2f:6c:f1:88:9a:9e:97:f1:61:c0:0b:84:bf:99:b4:81:c7:c5:
         80:db:12:68:7e:7b:10:ee:cd:83:09:24:78:67:0b:28:3d:40:
         4b:3d:24:70:c0:89:e5:ad:19:e2:ad:fa:b2:01:f7:34:e1:ac:
         16:32:18:cc:88:98:08:b3:fc:ac:10:3a:38:76:bd:81:d5:b2:
         39:50:c1:bd:aa:c4:d9:ba:ab:a3:0f:8b:85:cb:62:0e:82:e5:
         78:0b:75:72:11:b7:6e:4d:2f:33:38:42:3b:2e:01:41:59:cc:
         39:52:82:d6:37:51:c3:58:48:45:6e:fb:8a:b1:55:a6:d4:3b:
         36:ec:9d:d3:bf:03:a6:e0:d7:58:15:09:b3:ea:31:3c:d0:b3:
         40:fc:89:80:a2:11:ee:d4:f1:98:cb:a5:2d:22:ea:37:b9:80:
         d0:d5:bb:d0:a5:45:3e:75:3f:e9:39:7b:84:58:bb:6e:2a:2f:
         db:58:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:55:06 2024 by rpki-client on console-ams.rpki-client.org