Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File:                     3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier:          Wed0MMMDijlyt2G/6L/rxJUXi+TZm/EmLe4EfT6BEnk=
Subject key identifier:   19:60:C1:FD:C1:6A:28:2A:57:B0:F9:53:EF:C5:87:63:8C:19:42:2E
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer:       /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial:       01901EFD8CFF55D9C41BFFE81E9A7444E62B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number:          0901
Signing time:             Sun 16 Jun 2024 03:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:51 +0000
Files and hashes:         1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: xYBp1bbRkEWBPxR/0own1An/40XI206i3yoCNwsCx2U=)
                          2: NZQ0L-BPS0Y-K9fE7LOD7s8tw9w.roa (hash: Mj6bkc9gX6h0bSoz2c+PfFjRmWD71Z+l8mpfsa0iLDo=)
                          3: qYYoHQBXps4oUGQTzda-So0DrWw.roa (hash: IAoeW7qcOs0P8b9t8CYCI6m4FkhMZp6ouXyfWpL//pY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:8c:ff:55:d9:c4:1b:ff:e8:1e:9a:74:44:e6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
        Validity
            Not Before: Jun 16 03:00:51 2024 GMT
            Not After : Jun 17 03:00:51 2024 GMT
        Subject: CN=1960c1fdc16a282a57b0f953efc587638c19422e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:66:94:b7:70:62:7e:2a:ff:90:34:32:62:
                    42:53:e6:af:3d:2b:a1:6c:66:1b:68:4e:16:1e:ec:
                    96:e1:09:4c:6b:06:83:2d:9b:8b:dd:fe:a3:57:e4:
                    4e:67:5c:6d:83:a7:fe:db:7f:cd:71:9f:f0:bc:61:
                    c5:38:0d:49:5c:13:3f:e9:84:23:c1:94:ac:94:b4:
                    e5:da:85:0e:a9:aa:ba:ad:e0:f0:b8:6e:b9:89:d3:
                    ab:db:d3:95:24:81:6a:87:35:1a:5d:04:1b:39:26:
                    cb:82:fc:41:cd:80:7e:cc:be:6f:f8:73:41:0a:93:
                    b5:21:ea:b2:8c:b8:3a:a0:e2:58:d7:ad:fe:ad:5b:
                    76:d4:82:13:35:38:13:d5:37:af:8b:5c:de:16:66:
                    b6:e4:bc:49:d6:fe:d1:ce:ee:34:b0:85:ab:a9:85:
                    58:60:63:01:b5:24:93:fa:57:a1:7f:07:50:91:c1:
                    78:94:3f:9d:a8:d8:c9:34:12:5b:a5:cf:61:70:45:
                    d4:fb:f1:6f:7f:d3:14:0a:9a:9b:bd:99:aa:12:19:
                    1c:76:d6:1c:c5:a9:96:29:bf:3c:d7:56:f8:40:34:
                    ef:c8:e2:26:83:cf:8d:67:1f:26:c1:0c:b8:7b:de:
                    98:42:71:a8:57:47:39:d3:49:89:c6:33:10:2e:60:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:60:C1:FD:C1:6A:28:2A:57:B0:F9:53:EF:C5:87:63:8C:19:42:2E
            X509v3 Authority Key Identifier:
                keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a9:8e:cb:a7:c5:4f:f3:0c:f6:83:48:0b:64:50:61:7e:9d:
         c8:c4:01:8b:6d:52:37:6c:a4:9b:1c:10:4d:ec:17:40:09:09:
         6e:95:66:30:7d:b9:a5:ba:3a:66:1d:85:86:b3:5d:69:46:8c:
         2e:22:54:96:c8:c5:3c:d8:5e:3f:c9:c5:f4:7f:1b:bf:ee:6e:
         0e:5d:43:b3:e4:8b:55:14:78:6f:7b:91:4f:d9:b4:b4:3b:23:
         ad:f9:2f:b7:67:57:df:92:38:95:d9:be:b4:d1:be:fa:fe:25:
         5b:72:d9:b7:10:71:53:be:58:99:67:4a:78:23:6e:bc:a8:f9:
         ab:d0:00:66:82:c1:6b:17:7d:5e:b4:c6:90:be:4f:90:39:b1:
         4a:c1:1c:9c:5f:46:a8:ed:47:28:7d:01:7e:88:24:b7:04:22:
         36:7f:08:60:ef:39:c2:8d:bb:56:13:1c:52:90:ff:e6:b7:2c:
         3a:84:0f:6f:fb:b4:76:08:c4:0b:39:4d:44:3d:d9:3a:b5:60:
         c2:2b:f6:b3:92:38:c6:53:e9:ef:78:54:c9:04:9a:bd:e1:eb:
         af:91:41:64:ef:e2:6c:2d:7b:37:44:7f:f7:a0:e2:ad:3f:f4:
         35:99:fe:6c:51:a0:a2:a8:44:e0:7b:05:3b:e3:e5:e1:6a:60:
         f0:60:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:58 2024 by rpki-client on console-fra.rpki-client.org