Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File:                     AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier:          2si3m/s3NPrUGc9nGMRgI56uSinT1LqE0AdBmvfXVos=
Subject key identifier:   D0:CE:12:34:3C:13:A9:E7:30:08:EE:68:FE:D6:6C:E4:24:AF:73:0D
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer:       /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial:       01901EC6F4F5CB96F62C195C22488DCE7CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number:          06E3
Signing time:             Sun 16 Jun 2024 02:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:13 +0000
Files and hashes:         1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: /H47gkxRG+RiZ9LnF7Jlr+rY0cxq87ezPEvjSM+QDkE=)
                          2: fDEOKxcueNBpTJHpeQqzIj8JSMo.roa (hash: SH6PGH8t4ErBmQm5X6GU/+OuN4lt9ndBNH4dWe/kQ08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:f4:f5:cb:96:f6:2c:19:5c:22:48:8d:ce:7c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
        Validity
            Not Before: Jun 16 02:01:13 2024 GMT
            Not After : Jun 17 02:01:13 2024 GMT
        Subject: CN=d0ce12343c13a9e73008ee68fed66ce424af730d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:02:ef:cb:5d:ec:6b:ff:72:fa:b6:1f:99:
                    cb:8a:49:cd:ed:a7:fa:6a:4f:56:61:e0:c5:5e:8a:
                    02:ae:f7:2f:ce:aa:5c:45:9b:28:13:30:31:cc:f0:
                    8a:85:f8:99:af:7e:6c:37:f1:ad:a0:62:b9:c8:d3:
                    ab:21:db:c6:4b:ca:0a:38:33:4a:f2:e5:f6:61:5b:
                    4f:db:86:7a:49:6c:e8:25:aa:bd:e5:e1:61:74:d9:
                    21:8a:a3:0a:7b:cb:e1:a9:e4:ed:00:07:82:3b:70:
                    87:20:16:a9:7e:26:ad:26:fb:66:e5:a2:f4:9c:3a:
                    99:eb:bd:68:99:55:9d:5c:20:ea:2a:e4:a6:9e:35:
                    67:e0:60:e3:0b:5f:94:0d:d9:14:9c:c6:8a:6f:c9:
                    60:07:2c:f7:c9:b3:3c:48:e1:10:e6:6f:61:f6:d6:
                    18:39:e2:27:3d:58:2e:54:44:b7:13:3e:1b:9c:93:
                    74:d4:3e:69:a1:3e:ad:94:13:16:b6:68:24:7f:8a:
                    2e:47:d5:9b:e8:60:86:26:52:84:ec:77:ee:90:7e:
                    09:d1:84:92:2b:7d:30:70:f9:8a:d1:42:33:6c:6b:
                    aa:9a:3c:5e:08:18:1d:dc:f8:b2:c5:ef:1b:a8:13:
                    13:09:4d:c4:eb:6a:2e:de:fb:93:39:ba:df:28:bd:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:12:34:3C:13:A9:E7:30:08:EE:68:FE:D6:6C:E4:24:AF:73:0D
            X509v3 Authority Key Identifier:
                keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:ee:81:a5:f1:8d:2e:db:81:4c:cb:4d:29:40:a7:b7:52:
         1a:49:f9:6b:c0:6f:39:38:04:7b:e1:40:67:a5:c4:eb:d8:08:
         cd:85:61:d0:75:23:39:fc:f6:a7:d3:3d:fc:99:2c:ab:f0:5f:
         a6:27:f3:02:c1:42:86:22:3c:0a:b9:62:3d:45:ed:50:b2:24:
         87:d8:d1:f6:21:cf:5f:6e:d7:a8:af:23:bf:77:5d:ad:e7:56:
         be:e2:d8:f4:8a:af:6d:ab:72:7b:40:09:82:cc:f1:ba:29:45:
         27:97:66:55:b3:ff:b6:13:7c:46:f6:b0:e9:3c:7f:bb:b3:2a:
         2b:77:12:c3:90:90:e9:38:e9:6a:24:fe:a6:33:3c:78:57:b5:
         17:07:6a:e4:20:12:e6:29:a8:3a:fe:c5:15:4c:d8:2c:84:9f:
         8d:a1:b5:b3:e0:f3:56:8b:6b:62:cf:c4:fb:da:c1:a3:11:7d:
         10:d4:a8:4f:49:75:c7:c4:09:dc:65:3a:1a:1c:e6:29:00:8f:
         61:91:eb:3d:26:f6:d4:e9:ff:ec:24:79:31:64:33:df:73:bc:
         65:5a:4a:f7:b8:58:38:36:43:a9:0b:8f:6e:ee:b7:d9:d5:b3:
         c9:bb:b4:ea:16:3e:f2:90:df:b3:4a:d2:d1:29:64:25:23:12:
         31:cf:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:13 2024 by rpki-client on console-ams.rpki-client.org