Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File:                     3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier:          elT6Y6aY8776/JYhk7KsWqADUCvIVjNUPAIP5Ronqjg=
Subject key identifier:   E6:18:3C:A5:D8:C0:84:0C:89:77:08:7C:59:A2:E7:FD:B2:63:64:06
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer:       /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial:       01901DED1A98472E9BABA466D52F81A05D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number:          0926
Signing time:             Sat 15 Jun 2024 22:03:16 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:16 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:16 +0000
Files and hashes:         1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: b6HuD3aMojZA8Ks7a0uEwinQIPrXVX5xO1KEs+KdkxI=)
                          2: K___JX0xaoQjOYiwyFAtK2CskcM.roa (hash: XeKZgwBGpzwaLfoHwKRW+mGFA+zgojE1MftLCNkwqAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:1a:98:47:2e:9b:ab:a4:66:d5:2f:81:a0:5d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
        Validity
            Not Before: Jun 15 22:03:16 2024 GMT
            Not After : Jun 16 22:03:16 2024 GMT
        Subject: CN=e6183ca5d8c0840c8977087c59a2e7fdb2636406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:b4:32:18:d6:c1:4c:d5:67:05:cf:7a:87:
                    88:13:3f:92:28:ce:04:78:a0:06:60:4c:2f:51:f0:
                    ec:b8:4b:d0:47:7e:35:fe:da:27:21:33:4c:c3:f6:
                    4a:52:d7:22:b8:c3:01:16:b6:cd:19:10:8a:7b:da:
                    d5:15:b0:7f:d5:eb:75:ef:5e:21:16:10:bd:df:ce:
                    1f:36:65:2e:57:11:c7:6c:3f:92:f7:7b:eb:a7:85:
                    5e:6b:92:25:6c:f3:54:3c:ff:af:bf:d0:4a:e3:14:
                    6d:cb:68:19:1b:56:74:39:43:b1:43:6e:9a:d0:0c:
                    7f:06:5c:0c:d5:28:56:39:47:5f:a1:87:ae:30:94:
                    b6:8f:da:42:f8:6d:0f:96:c1:ef:da:86:42:08:8a:
                    bc:4a:27:71:ac:d7:dc:0d:8b:68:18:3a:26:fa:76:
                    d5:e5:74:5d:45:91:5a:b1:fc:c5:37:5e:ac:48:d6:
                    82:18:c7:ef:e5:d8:e6:c0:e9:55:47:2c:5d:cb:f1:
                    26:34:c5:9e:2c:17:45:37:da:18:38:c5:ff:83:4d:
                    2d:1d:93:53:3b:c6:ca:4a:22:cb:e0:e9:00:4e:c1:
                    1b:36:cf:38:d2:cb:9b:fe:54:13:03:e1:2d:9b:aa:
                    99:eb:dc:ef:d1:15:8b:4c:88:e9:91:6c:ba:34:2e:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:18:3C:A5:D8:C0:84:0C:89:77:08:7C:59:A2:E7:FD:B2:63:64:06
            X509v3 Authority Key Identifier:
                keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:31:dc:b9:0f:92:5d:1b:92:a2:06:40:7d:a8:5e:cf:12:eb:
         2b:c3:42:11:09:c9:04:f2:f9:51:28:ae:ee:91:d8:38:d8:5b:
         b7:fb:02:65:a0:cc:4c:61:0b:bc:15:83:e9:8b:42:c3:c6:28:
         09:f5:3f:00:97:d3:bf:59:8a:e9:e4:08:f0:69:2f:4b:d9:42:
         d9:7e:90:e4:34:18:0b:af:8e:11:60:fb:5f:c2:13:56:a3:4e:
         03:22:83:66:fa:8d:1c:39:52:84:f6:63:37:b7:a0:6c:78:69:
         b1:2c:30:c2:62:d9:c9:75:90:dd:14:bb:b4:3f:c7:de:20:e8:
         a8:44:94:65:35:7a:34:fc:e6:6b:00:44:cd:c9:9d:ec:b1:b5:
         9a:37:12:33:c2:d4:49:23:d0:e0:62:47:d0:c6:81:33:2e:29:
         af:90:ed:ca:2a:9d:9e:76:5c:80:6c:e7:db:f3:b8:a9:7c:bc:
         eb:67:bd:10:1d:e1:38:88:b0:9a:28:b5:62:6f:a8:54:49:00:
         49:7a:e0:d1:52:ba:83:ad:76:35:3a:58:1c:e1:f7:b6:04:4c:
         76:45:ad:ca:91:5a:1a:48:af:d0:e4:f4:7f:54:5f:a2:a0:52:
         fc:ef:ff:54:2d:32:83:54:77:25:9c:32:2c:e8:f4:a9:a9:71:
         c2:39:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:32 2024 by rpki-client on console-fra.rpki-client.org