Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File:                     3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier:          h0q/ENwZqSuoJ277sa6HABmCb0a1eM287OjKZiP+eNw=
Subject key identifier:   0E:CB:3C:71:95:49:6F:1F:44:78:6B:5C:41:61:B9:4B:6B:59:1C:D1
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       01901E58AA1264C25052C5EA1058D8796C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number:          07EE
Signing time:             Sun 16 Jun 2024 00:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:45 +0000
Files and hashes:         1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: wIrIWVygsXnEWpRy9kICJIE87D9WgUVlOH3dzdlEAOQ=)
                          2: yi68ksjZSxftGGKxmFVOJ8JLGIY.roa (hash: q27SVbtD8dV8gGpU8IQIm3xk773/BNVV61YBP2LzWzU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:aa:12:64:c2:50:52:c5:ea:10:58:d8:79:6c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: Jun 16 00:00:45 2024 GMT
            Not After : Jun 17 00:00:45 2024 GMT
        Subject: CN=0ecb3c7195496f1f44786b5c4161b94b6b591cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ed:7a:73:ac:64:6c:c0:c5:f8:73:35:79:e1:
                    8a:1b:67:59:30:f1:17:5f:73:a1:38:0b:58:30:59:
                    db:ce:0b:01:8c:09:39:bd:39:f8:06:82:81:aa:3b:
                    8b:60:ea:e3:79:5a:8c:07:2b:47:6f:2d:ad:76:c5:
                    aa:e0:d0:49:2c:e8:35:5c:5b:cc:c4:16:0d:fa:a0:
                    44:be:ac:01:75:01:73:69:13:dc:ad:c7:6b:51:62:
                    b0:4b:2d:9f:93:7b:83:8c:45:83:1d:fc:db:b3:5c:
                    18:17:0a:ab:9f:4e:6f:48:3e:0b:1e:25:83:47:ca:
                    e3:f3:dc:29:a5:d3:ac:56:1b:5c:ec:31:02:b9:8e:
                    31:91:6d:65:21:e6:4c:8d:fa:a2:7c:55:06:3b:2b:
                    64:e8:cb:7b:c0:64:0f:55:65:75:45:4d:de:ad:e1:
                    9c:57:74:46:84:3a:26:30:37:c5:37:ee:33:7b:e8:
                    f2:9b:4a:c0:aa:90:27:ba:d3:a5:f2:41:81:ab:40:
                    f8:16:1a:85:d4:ca:6a:07:e3:eb:83:fe:27:a3:6c:
                    14:31:c7:d1:ed:64:a1:ed:d4:d6:ab:87:5b:7b:3e:
                    2d:af:9e:40:52:c8:7f:76:58:b7:54:5d:60:23:9a:
                    14:5d:c2:fc:68:1f:f0:d8:3b:dc:d6:d0:df:68:83:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CB:3C:71:95:49:6F:1F:44:78:6B:5C:41:61:B9:4B:6B:59:1C:D1
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:8e:7d:1f:2f:24:35:22:29:c7:77:ad:ba:9a:2b:f9:5d:
         5c:c5:9e:3b:85:a7:6d:8c:81:b6:ea:a5:6a:2f:66:82:19:76:
         01:2a:89:1e:5f:04:e1:d4:a8:0f:e1:45:07:1b:13:4b:19:d7:
         bc:b9:1d:75:d7:31:50:5d:9b:99:d6:27:b8:c9:dd:c2:89:f2:
         04:3e:19:ac:14:51:2c:63:e4:67:ba:d5:c8:fc:1f:45:c3:63:
         ce:d2:ca:13:ad:bd:e0:66:8a:40:b2:9c:2a:0b:df:d9:c9:5d:
         3f:62:aa:29:a8:8d:f5:b8:6d:46:5b:a1:23:6e:71:cc:77:27:
         7f:fa:cf:c3:65:0e:01:59:16:02:39:ac:ed:e0:3e:74:34:23:
         75:57:93:c0:8e:c4:5f:33:31:bb:a9:72:e9:2c:f4:e7:46:2d:
         4b:4c:d6:4e:77:c6:2a:20:b8:9b:05:b0:15:cd:cd:31:7f:32:
         a7:88:cb:fe:b8:a8:5a:dd:ee:16:54:2b:c0:d4:32:c0:fe:94:
         4d:ef:1b:ec:ee:0d:57:66:6d:01:f4:2e:e0:08:84:68:4d:50:
         52:3d:14:c3:b0:e6:8e:39:5b:17:eb:3d:26:7c:29:42:f8:ea:
         3d:81:8d:7f:82:26:06:9e:be:ad:9c:04:37:a8:97:a2:cc:dc:
         b9:ea:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:45 2024 by rpki-client on console-ams.rpki-client.org