Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File:                     Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier:          sgDPqSfs56jwhglQQxOF8kuedljU1whuli78J5ElaWo=
Subject key identifier:   1C:46:DB:F2:F9:39:43:FD:16:2F:98:DB:9A:29:EE:BB:1D:2C:5F:C1
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer:       /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial:       01901DEC116469B9E0A9F8A22E950AC83E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number:          043D
Signing time:             Sat 15 Jun 2024 22:02:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:08 +0000
Files and hashes:         1: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: 77+1JEojOKBTCHV/kOiyNX27HS3TkOyv1roZSjcIiWg=)
                          2: T0I9w-rdR3K6ibXx3zm2EtgYOAw.roa (hash: +uFTAqjbvCC+uvxrktyt0zlozk8eSM2yy995uMFUaKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:11:64:69:b9:e0:a9:f8:a2:2e:95:0a:c8:3e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
        Validity
            Not Before: Jun 15 22:02:08 2024 GMT
            Not After : Jun 16 22:02:08 2024 GMT
        Subject: CN=1c46dbf2f93943fd162f98db9a29eebb1d2c5fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:bd:3f:84:68:7f:03:fb:aa:1e:e7:2e:dc:
                    ce:20:c1:37:3e:f7:5a:87:25:c5:a4:6b:77:d3:68:
                    64:d2:ed:b2:07:a6:95:a0:2d:6d:c0:72:44:e1:43:
                    c0:fc:96:da:e6:81:f5:e6:4a:56:f6:ba:7e:88:19:
                    ca:f5:ce:e8:61:1f:3d:e4:fa:6f:ca:fa:b0:b9:16:
                    7d:e3:c6:49:2c:98:9f:27:38:4e:71:c9:08:68:5a:
                    84:08:da:cb:b3:38:32:0b:5f:37:5a:14:58:b7:1c:
                    c4:10:62:65:45:ad:f7:d2:00:d0:c0:79:fa:70:83:
                    25:1c:98:12:c1:51:ee:d5:2e:fa:06:51:84:36:1a:
                    18:89:ee:c9:13:f2:a9:22:14:72:e8:e8:2f:f6:dc:
                    98:e3:3f:02:d6:35:21:51:de:52:9b:fc:43:48:0e:
                    d1:70:2b:f0:01:45:a8:78:0a:bf:cf:ec:aa:fc:b4:
                    de:81:7d:f1:b2:91:e7:d4:fc:27:34:1f:02:0a:c6:
                    6d:a9:71:3d:0b:dd:60:51:88:bf:8d:1d:7d:40:be:
                    f7:e7:7b:ac:37:7d:d6:4e:c0:56:76:dc:1a:0f:be:
                    ec:ad:54:fc:5b:5b:55:69:07:96:ac:47:37:ec:ed:
                    69:2f:0f:00:1c:0b:20:9f:b9:be:9c:21:31:aa:ec:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:46:DB:F2:F9:39:43:FD:16:2F:98:DB:9A:29:EE:BB:1D:2C:5F:C1
            X509v3 Authority Key Identifier:
                keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:5b:24:dc:b5:c9:dc:5f:ea:54:e2:a3:ab:9a:02:f5:90:
         8b:b0:30:9b:c7:87:c2:fe:8b:19:44:3c:2f:f5:31:0c:52:c7:
         fe:ce:3c:30:a7:01:5b:6c:b0:30:fa:34:0a:ef:8e:da:91:c1:
         79:0c:53:1f:2f:07:07:f2:41:2c:59:df:98:95:d1:1b:eb:9f:
         19:de:12:4c:70:d4:7f:74:e4:95:c6:26:fa:c9:3c:d4:af:17:
         3c:1f:5b:21:33:3f:2b:a9:90:f5:1c:f6:ca:ce:f1:f8:9b:3b:
         a5:37:32:e4:3e:e5:6c:ea:6a:75:ea:c2:5c:05:35:df:85:4d:
         45:ff:02:a7:61:75:7c:79:14:17:69:e7:39:6e:d3:ff:4b:f9:
         8e:a2:e4:b6:b8:f2:8e:e3:d4:96:51:8c:1c:7c:d0:09:e4:20:
         75:db:bd:ac:01:6f:f2:b7:c7:5e:47:c0:11:15:60:f0:9c:7d:
         4a:bf:9a:52:1f:a4:16:51:3c:06:ba:51:8b:05:f4:f5:42:fc:
         dc:cc:d2:45:86:f6:31:56:2d:c7:c4:7b:ef:0d:c9:71:ff:4b:
         72:fc:6b:0d:70:11:73:4d:86:52:3b:1e:1c:55:58:81:a7:03:
         1b:74:5f:60:df:4f:13:eb:9c:36:1f:4c:16:0e:f7:c2:79:20:
         b9:1b:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:31 2024 by rpki-client on console-fra.rpki-client.org