Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File:                     E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier:          81wZ/j+37zX1wexjQYfUqNNOIxBtLfySUsqNgEVf/X0=
Subject key identifier:   0E:03:E3:53:D0:27:45:C5:32:B7:6F:22:0C:3C:91:E2:CF:4F:16:C6
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer:       /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial:       01901E8FE89C7C4C1F90F60A816C8599C769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number:          0B2F
Signing time:             Sun 16 Jun 2024 01:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:05 +0000
Files and hashes:         1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: 27LMBUWnbCwXVLcEQmBTe7Eg53QY13yROq4DWFP0T74=)
                          2: T7PrL0rttSSmQeB4CdKdURSh7S4.roa (hash: SCvyQpQI8LYmmeghmn5VGQrmcAGg7L3lpGBLXRQZGR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e8:9c:7c:4c:1f:90:f6:0a:81:6c:85:99:c7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
        Validity
            Not Before: Jun 16 01:01:05 2024 GMT
            Not After : Jun 17 01:01:05 2024 GMT
        Subject: CN=0e03e353d02745c532b76f220c3c91e2cf4f16c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c7:ae:4a:54:69:ac:52:6a:47:ea:1b:e0:6c:
                    d0:2a:12:84:17:36:ad:24:fb:1b:70:cc:5c:25:5f:
                    be:50:66:31:ba:f8:c2:00:81:6e:f4:f7:69:cb:62:
                    e2:0c:16:5c:6a:09:fb:20:bb:15:82:29:5a:4f:97:
                    27:64:7d:0b:21:89:0b:12:7a:dd:f7:45:e9:6f:85:
                    2c:8e:69:9a:7e:65:53:9e:5a:5e:f4:50:2c:a6:5d:
                    ff:9e:36:58:b6:21:3e:d5:e7:4d:fb:57:eb:78:fc:
                    26:8f:77:06:1e:0d:22:92:ea:be:5c:8b:8b:4e:e3:
                    53:fc:4e:bc:17:b4:e3:7c:5b:e7:65:db:31:c1:f2:
                    4f:40:52:73:6b:af:cd:73:a1:a0:88:21:d3:51:30:
                    56:30:2a:b5:aa:e1:a7:57:13:e9:14:60:08:33:77:
                    df:05:44:40:b6:1a:28:5c:1d:f7:d2:e1:58:ed:c7:
                    f1:c4:9e:6f:77:c9:fd:8c:2b:fd:d6:9f:df:10:28:
                    ff:af:55:c3:68:0f:44:6a:06:7c:cc:17:4e:83:87:
                    53:0f:18:0e:aa:c5:10:95:f3:98:fe:20:99:27:db:
                    27:a5:1d:71:32:57:3d:97:a0:c7:45:e7:47:39:e6:
                    60:02:53:34:bb:cd:f0:36:51:a7:9a:28:33:de:6b:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:E3:53:D0:27:45:C5:32:B7:6F:22:0C:3C:91:E2:CF:4F:16:C6
            X509v3 Authority Key Identifier:
                keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:34:42:d4:73:ab:c7:77:8c:f0:b0:0c:dc:43:63:7f:7c:
         77:8c:f6:ff:c2:93:81:4c:eb:ba:73:99:0f:23:5e:db:31:7d:
         23:c0:06:00:9c:f1:87:b0:0a:ad:7e:d3:45:48:a7:f4:09:93:
         9e:e3:73:d4:2b:18:3d:58:c4:99:c5:99:c9:7c:0c:ac:27:f3:
         f1:1a:a7:e1:dc:39:7b:65:b7:21:ef:80:73:b0:f0:c6:80:f2:
         16:91:89:bb:a0:64:54:15:ff:cb:52:d0:3f:3f:02:59:69:1d:
         9d:72:d7:f3:60:a3:40:64:a2:f7:1d:97:9d:ba:4d:a4:23:dd:
         39:8d:8c:d6:b1:50:02:56:19:4c:3c:ef:4c:4b:5a:3c:ae:d7:
         f2:1c:1a:87:68:6f:2b:9d:51:86:ce:15:d1:5a:fa:77:63:8b:
         71:60:4c:48:f8:e5:a5:f9:64:23:eb:fc:42:bd:76:78:98:dd:
         91:78:79:01:47:c2:c6:e1:dc:9e:c2:ff:85:18:47:fe:9e:34:
         58:8d:17:96:1b:9b:99:f5:28:d0:6a:4d:2e:24:55:d2:f6:67:
         97:bc:ab:e2:fd:35:a7:f6:e4:3a:12:af:57:52:aa:f5:d7:e5:
         df:f3:47:41:64:7b:31:56:e8:5b:b8:dc:0d:8c:26:9e:3e:bb:
         eb:31:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:59:13 2024 by rpki-client on console-ams.rpki-client.org