Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File:                     PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier:          k6CzJT7Vk86cmAp8N+lGQ54sOAzlJagCQF2NAaXGNEQ=
Subject key identifier:   96:F1:67:07:36:25:82:AE:FB:55:14:7F:A9:B9:9E:1F:42:1E:60:1A
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer:       /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial:       01901EC66E8FAA0EF9E4935547D0A24C07BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 02:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:39 +0000
Files and hashes:         1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: M6w9ixvIyodYnhKZmtx5iiJueNPyv684fbjnzpKOILE=)
                          2: qRp5jN7Ipfthiin5xppDik9uiLI.roa (hash: fsTlvB7JUVxfsitCfgyEQqbjXai2/3dkBtGssl4iU9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:6e:8f:aa:0e:f9:e4:93:55:47:d0:a2:4c:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
        Validity
            Not Before: Jun 16 02:00:39 2024 GMT
            Not After : Jun 17 02:00:39 2024 GMT
        Subject: CN=96f16707362582aefb55147fa9b99e1f421e601a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9e:3c:bf:2b:f2:01:0f:2e:01:d0:73:b7:29:
                    ed:b2:38:eb:f9:2e:61:46:e6:1a:a0:11:e9:89:7a:
                    4e:b1:60:ac:37:fa:ad:73:70:91:0b:7f:00:e6:c9:
                    65:88:e1:4a:4d:57:89:48:6e:20:45:ed:9b:80:a3:
                    75:ab:49:4e:21:dd:6b:a2:ab:de:57:b6:16:1d:e6:
                    ba:a1:ee:58:42:32:6a:52:31:9b:c3:5b:a3:cd:69:
                    80:6c:70:e8:31:f8:24:18:66:81:b8:96:ae:ab:22:
                    bd:5d:bc:48:e8:49:32:04:2b:df:64:26:75:d0:cc:
                    06:60:5b:b3:78:de:c9:ce:e8:b0:12:0f:14:20:8d:
                    47:b6:02:8d:23:6c:5e:51:9c:6c:1e:68:e6:86:29:
                    9c:fb:97:6c:7c:a5:e1:b2:74:2f:d8:80:d7:20:ee:
                    28:2b:40:aa:3e:79:df:42:1a:29:3c:d3:4a:92:cd:
                    9b:99:b2:c6:98:af:36:ec:b2:be:d1:15:9c:14:aa:
                    e7:99:dd:cd:09:a9:f1:75:cf:c9:0d:57:a3:b3:e4:
                    a0:d8:6f:e8:52:ea:f6:99:46:69:0f:8a:c1:3f:b7:
                    48:f4:1c:65:37:e2:57:70:e8:f9:bb:d8:2e:fb:91:
                    73:c7:15:f3:14:a9:72:bc:c0:ec:8e:38:1a:e4:c8:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F1:67:07:36:25:82:AE:FB:55:14:7F:A9:B9:9E:1F:42:1E:60:1A
            X509v3 Authority Key Identifier:
                keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:dc:bb:fb:4e:d8:f3:0d:fd:e8:b2:c9:41:11:d1:55:c1:97:
         46:99:41:d0:5f:e0:7d:1a:af:ed:9c:4c:19:d4:74:6d:45:ac:
         51:d7:cc:af:31:eb:5c:03:3a:a7:f2:6b:dd:8e:7c:03:ad:dc:
         44:74:d9:96:31:e0:f4:26:30:08:a2:51:41:5a:4d:88:b3:3d:
         f0:b8:e2:39:53:d4:b1:45:cf:43:9d:f1:bb:84:bf:11:71:eb:
         4e:14:ee:f1:c3:76:88:97:b5:52:d4:76:e3:9e:76:03:fb:e8:
         9d:8b:7b:48:ed:cd:64:5c:18:bf:c7:27:ca:bd:6f:da:f2:07:
         e6:32:f7:f7:56:d9:22:91:c9:8b:90:fe:cc:51:07:7d:79:04:
         d9:36:06:af:a2:47:ce:db:3e:5b:f7:b1:f6:b4:29:e5:9f:46:
         d8:ce:8d:51:5b:a8:83:c3:4f:ee:f9:86:21:61:62:c7:b1:34:
         a1:b0:9d:8b:47:30:13:ac:bc:ae:74:d7:f0:99:aa:8a:d9:7d:
         52:14:8e:41:1b:b7:e4:68:55:46:a5:e4:52:50:ee:d3:d7:5f:
         70:85:ff:c2:13:04:56:a8:2f:2c:11:00:f1:9e:72:5d:a2:e4:
         93:0a:f8:c6:02:83:de:44:c9:4b:82:99:54:ea:4d:7a:02:c4:
         ac:df:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:53:50 2024 by rpki-client on console-fra.rpki-client.org