Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File:                     3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier:          82TuHeJ/xcH8hNAqBGOXLqQ6sQSeTcew2K/DhLauIgA=
Subject key identifier:   C0:97:3A:4A:B9:A9:1C:2A:BC:B7:69:E1:E0:3D:57:59:A3:05:FE:D6
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer:       /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial:       01901DED6134A7365F5C3E29CDA00795C4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:34 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:34 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:34 +0000
Files and hashes:         1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: 4g6YKj8f2UcSolm91bQA4/zFChPkEJcDGimOixxHDno=)
                          2: NZb3HyPVI_VSF2frXSYsx9jf8Z0.roa (hash: F3h+T2MMsQMXsTkFfX5gTaULgMtsRu/0M8JOJI+yUD0=)
                          3: XB5WK-EENPpEebEtuSfkYZ_nD7c.roa (hash: UkPIXxJyAu0j1gHghftFaoWoJpr6/4NTguw83oiWeQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:61:34:a7:36:5f:5c:3e:29:cd:a0:07:95:c4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
        Validity
            Not Before: Jun 15 22:03:34 2024 GMT
            Not After : Jun 16 22:03:34 2024 GMT
        Subject: CN=c0973a4ab9a91c2abcb769e1e03d5759a305fed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:2d:c4:70:c5:71:8a:92:47:71:53:12:f9:
                    b2:ca:cd:7a:1a:92:1f:0a:53:3d:31:a7:cd:dc:0b:
                    7f:76:d9:db:d8:fb:b6:cd:fd:9f:80:fe:5f:44:82:
                    88:90:b7:e7:ea:82:f6:a6:bc:56:e4:83:97:f6:98:
                    d7:71:1c:96:8e:0f:50:ca:6b:2c:9a:6e:5b:2c:0d:
                    32:29:81:42:c6:7b:f2:16:7e:36:9d:81:25:2b:e1:
                    c1:d7:4f:7e:46:43:93:47:c5:45:65:da:06:77:ce:
                    d2:ee:d4:95:be:b7:c8:c6:53:1b:3e:4b:43:27:12:
                    a1:92:ce:5a:50:c1:99:a9:7e:ed:44:3c:b9:ca:fb:
                    e3:3f:c9:9b:82:42:41:23:05:c8:93:ed:04:86:fa:
                    b4:e1:32:58:80:0b:1a:0e:f0:a5:ff:ad:0e:15:2f:
                    7e:5d:c2:61:4d:ec:10:bb:5f:81:f7:05:28:48:6f:
                    aa:d9:07:aa:21:d4:91:66:a1:16:c1:1d:41:80:86:
                    4b:6d:22:31:ce:80:64:14:c1:e2:2f:06:e9:24:a6:
                    9b:9b:8d:48:10:fe:10:82:d8:1c:ae:4c:65:53:7a:
                    c0:28:4b:00:23:f8:51:d5:67:af:d5:d3:61:a9:37:
                    c7:70:70:d1:c1:27:9e:31:d8:9f:84:92:a8:0d:fa:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:97:3A:4A:B9:A9:1C:2A:BC:B7:69:E1:E0:3D:57:59:A3:05:FE:D6
            X509v3 Authority Key Identifier:
                keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:bd:92:24:71:68:3a:4d:f8:04:7c:12:ce:e5:e2:c9:d2:
         eb:1e:57:0a:f1:89:bf:63:4e:d9:8a:40:dd:2c:9c:d8:3f:fd:
         c5:c4:be:a7:3d:47:db:40:e1:58:77:20:1c:1d:e6:c8:29:a0:
         fa:35:c0:11:29:7e:22:f4:d8:b4:d8:2c:f1:ec:88:c8:58:1a:
         76:1d:20:76:27:66:9d:ad:92:88:1b:93:46:b9:49:c3:8c:d0:
         8b:64:28:d6:a7:65:fc:9a:5d:c0:b8:bb:d3:6d:63:3a:01:76:
         1c:03:a3:32:64:98:cc:19:5d:2b:7e:4f:a5:72:ca:bb:9d:b8:
         1e:3d:e5:43:05:08:37:14:dd:b7:94:8d:24:fe:84:23:5a:08:
         86:cc:e0:96:5f:19:ca:fd:01:58:bd:a4:3c:cb:d6:88:bb:46:
         1a:ad:17:60:67:50:e6:21:ac:48:ad:3e:f8:44:34:52:4d:68:
         df:97:2a:51:b7:eb:85:5d:57:20:14:4f:47:1a:35:33:07:af:
         8a:e8:c3:38:fd:f2:13:6a:bd:42:96:71:5e:88:b4:51:23:94:
         be:8f:2c:cb:40:e0:98:4e:d7:37:a0:52:f2:5c:33:f0:b3:3f:
         a4:e1:69:2d:1e:86:a7:ff:bc:2c:41:86:48:a2:ff:0a:17:1a:
         db:17:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:23 2024 by rpki-client on console-fra.rpki-client.org