Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File:                     k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier:          ldCih1SdAwGKHqJNjW6i2Guz7SJFYpl+6K86gD1vcHA=
Subject key identifier:   3F:9C:0D:91:02:96:F6:82:65:DF:63:4E:EB:74:CB:B9:F9:3C:D6:E2
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer:       /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial:       0190429DF676492643F7B6E35BDAC9AB2011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number:          0A33
Signing time:             Sun 23 Jun 2024 01:02:46 +0000
Manifest this update:     Sun 23 Jun 2024 01:02:46 +0000
Manifest next update:     Mon 24 Jun 2024 01:02:46 +0000
Files and hashes:         1: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: ztyEQeL5/nXXui+DJQRx6fM3jtA0ScpqJDx+cA+l52Y=)
                          2: vSFrHdE5yQxJdJeGzEMuWnp9E5U.roa (hash: 67WpJMIoQ0bI5lvuDKx3m+hoHpr7MT3Tnm6JsCOmbTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9d:f6:76:49:26:43:f7:b6:e3:5b:da:c9:ab:20:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
        Validity
            Not Before: Jun 23 01:02:46 2024 GMT
            Not After : Jun 24 01:02:46 2024 GMT
        Subject: CN=3f9c0d910296f68265df634eeb74cbb9f93cd6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:27:fc:38:ef:a3:13:80:07:7f:62:5a:45:
                    70:03:f6:53:dd:0f:4c:99:0d:9b:d8:ac:63:3b:86:
                    06:5e:ca:ed:86:d3:10:34:66:a3:c2:85:d5:91:08:
                    7e:3e:30:5c:0e:82:e3:64:db:a9:0a:60:96:1e:52:
                    75:d1:4c:ef:b0:2d:9f:18:db:9d:2d:33:cb:48:8e:
                    fa:f0:05:ae:3d:e4:0c:76:41:09:d5:be:e4:34:67:
                    91:f2:74:10:92:ac:fc:f6:75:c3:64:7c:3b:a1:c3:
                    bf:7e:43:a0:bc:90:5e:5e:ce:4e:08:7f:56:dc:45:
                    b0:e1:31:86:44:c6:0d:18:1b:cf:01:b6:cf:73:59:
                    5a:0c:cb:ed:09:63:68:79:13:1d:a0:cc:93:eb:ee:
                    c1:c5:ad:10:8c:ee:d4:9e:59:3e:65:8e:b2:88:7a:
                    0d:7f:d3:f9:fb:96:da:28:e5:09:28:50:05:29:e8:
                    ef:5c:79:4c:58:99:f0:d1:e6:98:e7:4f:a0:a8:95:
                    61:66:8c:93:2f:2b:1d:21:c9:14:7e:13:bd:f5:6c:
                    59:3d:fb:8e:6d:37:74:02:a4:0f:84:0a:9c:c7:7e:
                    6c:2b:f8:f0:3c:5e:f0:ef:1b:17:3f:98:32:21:d9:
                    85:68:4f:3d:96:5c:30:82:ad:35:dc:34:36:71:53:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9C:0D:91:02:96:F6:82:65:DF:63:4E:EB:74:CB:B9:F9:3C:D6:E2
            X509v3 Authority Key Identifier:
                keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:56:17:c5:86:aa:0d:d8:62:fa:49:8d:5d:64:ea:8f:87:1e:
         34:1c:59:90:6d:94:9d:c0:5d:69:ab:c9:67:bf:62:f9:f9:dc:
         6d:82:08:3e:a4:97:20:fe:61:1e:7d:4f:24:4a:ca:40:d8:d2:
         41:0f:60:6b:8e:74:47:c6:40:10:50:bf:e4:c9:e5:43:43:00:
         ae:32:3e:ab:51:57:28:20:af:17:9d:98:7d:14:59:bb:0b:ad:
         f9:ee:fb:fd:97:40:09:80:1a:c8:6d:20:4c:7a:70:06:16:6b:
         2b:cc:80:7f:1f:19:f7:e5:5e:c9:12:d3:c3:59:3f:ea:5e:27:
         03:c6:68:0e:3f:69:7e:f1:7c:e2:96:26:c2:69:33:90:80:3d:
         d5:db:c9:61:53:20:66:ad:31:79:13:6f:e8:cb:4b:69:54:cc:
         e1:4d:a6:44:0b:e1:48:d5:78:04:be:de:26:0a:76:cc:94:10:
         c5:61:35:cb:29:b5:a1:67:ab:b9:e3:ab:f1:84:82:f6:c1:a4:
         80:63:a3:f6:72:5d:30:ae:87:0c:7c:64:a1:97:e9:4f:6c:55:
         36:73:80:f7:19:f6:74:0c:ae:57:90:06:c9:56:cf:88:2d:67:
         8a:2f:7d:d6:f4:63:00:fa:21:2e:15:e7:cb:3a:de:bc:ee:30:
         37:f2:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:11:10 2024 by rpki-client on console-fra.rpki-client.org