Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File:                     1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier:          OKQRKALxcTe3JAZar3lcocSENqzsZRX9MX+LMv7Iv4s=
Subject key identifier:   3F:62:98:89:38:7B:BC:8E:8D:64:09:3A:C1:90:A7:8A:3D:EF:C8:AE
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer:       /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial:       01903DE3ECE3DB9732D89E45B6CAB22FDA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number:          B4
Signing time:             Sat 22 Jun 2024 03:01:05 +0000
Manifest this update:     Sat 22 Jun 2024 03:01:05 +0000
Manifest next update:     Sun 23 Jun 2024 03:01:05 +0000
Files and hashes:         1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: BQdhCzNwZli9+/MQsGTW87/2oh5w71OiCDDWgTxV6c0=)
                          2: W9XtplxDVea_xmcL0EudPhDMZz8.roa (hash: APioojH5qla2z2jijMouuTw/D5QGxK16ZgyBQ01lNdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:e3:ec:e3:db:97:32:d8:9e:45:b6:ca:b2:2f:da:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
        Validity
            Not Before: Jun 22 03:01:05 2024 GMT
            Not After : Jun 23 03:01:05 2024 GMT
        Subject: CN=3f629889387bbc8e8d64093ac190a78a3defc8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:e2:c1:e9:7b:15:e9:fd:89:c0:12:2d:7b:
                    ed:2f:80:cd:bf:af:29:6d:83:16:d6:b1:ca:5b:dd:
                    9f:5b:89:1a:e9:c1:55:f6:a1:ce:3b:be:1e:16:8e:
                    ae:73:1f:a2:d4:83:92:d0:c1:b9:ab:76:ef:57:0c:
                    79:d9:e4:03:68:64:3e:3a:ca:80:0b:02:2d:ca:fc:
                    d2:c3:d3:a3:f0:49:19:a8:39:db:9b:3c:6f:a0:36:
                    c5:e0:a2:7d:70:63:b6:d7:8f:3a:1a:79:f4:f2:30:
                    c7:11:f4:2a:21:77:64:c2:d2:b9:89:b8:ce:a0:f7:
                    76:1f:09:10:67:ba:82:70:27:5d:08:a6:4b:d0:da:
                    09:b8:04:34:65:88:69:40:6d:aa:b0:aa:b9:b5:68:
                    f6:a5:26:73:b6:74:af:00:e4:37:5a:e6:a7:df:a2:
                    a1:61:7a:fb:04:12:f1:38:f7:92:33:95:16:7a:21:
                    f8:9c:ec:c3:06:66:ca:58:2a:41:a9:aa:f3:87:65:
                    4c:70:67:f5:86:d0:09:8a:45:e4:02:cd:82:d3:fd:
                    e7:e3:72:48:9b:98:1f:ab:d3:1f:7b:8e:5d:4b:c3:
                    d0:74:d4:6d:23:ee:c9:9c:8e:46:47:05:1c:eb:46:
                    71:47:11:57:06:f4:08:95:a6:09:60:de:04:ba:d5:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:62:98:89:38:7B:BC:8E:8D:64:09:3A:C1:90:A7:8A:3D:EF:C8:AE
            X509v3 Authority Key Identifier:
                keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:68:52:d9:23:33:55:cf:1c:37:c4:a4:56:b4:01:a7:8e:bb:
         4d:84:9e:a6:e6:5d:bc:a2:7e:4a:e5:5c:4e:a2:23:56:80:bd:
         f4:92:6b:b1:26:99:f4:b3:e2:48:28:c1:6b:96:26:4d:f2:6f:
         7c:0f:db:e4:c9:66:88:d0:44:29:13:4a:c9:20:14:ba:93:d1:
         47:d4:26:4e:37:34:03:dd:91:52:4f:0d:fd:60:5e:0d:a8:d9:
         35:6f:a2:35:4d:95:01:ba:77:42:d7:a8:c7:79:7a:11:64:d9:
         6d:3e:6f:61:de:70:4d:bc:3b:c5:30:6e:c6:7c:4c:43:e0:f5:
         cf:a2:df:43:46:51:68:4e:30:20:b9:8e:4e:84:ee:d3:04:d7:
         f1:1b:6a:fb:c7:96:3a:23:43:4e:c3:9e:a1:a7:70:92:f4:d1:
         9e:c5:81:00:3e:91:af:3c:6d:f7:e8:ad:20:e1:f9:a4:0b:77:
         0a:1e:12:d0:79:45:f9:2e:f2:f3:08:d3:33:fd:99:16:3e:f8:
         73:b6:c9:27:c4:0b:5d:e6:0a:cd:77:97:97:95:59:56:de:50:
         3b:13:61:26:da:5f:e1:f2:9d:df:64:04:b2:30:14:70:99:8f:
         b0:89:38:94:ae:26:46:a5:a5:d5:a4:67:c1:b3:50:b4:10:bb:
         3f:62:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:14:13 2024 by rpki-client on console-fra.rpki-client.org