Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File:                     3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier:          oHPu4D0yVYzbZYIw6rO4Jlv04j58w+DF+ygQ8ObTixo=
Subject key identifier:   D6:84:05:7F:B9:A2:D7:52:B4:B6:47:5A:D4:31:F7:36:49:16:B7:A1
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer:       /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial:       0190459D1A1FB35DC4F7E63AA45A9C6CC2CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 15:00:42 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:42 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:42 +0000
Files and hashes:         1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: sS91FULnuj5dOXmOJYHzD0lt4Ax4UPkP2XW67IAK6Zc=)
                          2: fzSUNgxMmiJxsae3BEa4N-LTcSs.roa (hash: un2qU9wtaHgHUb7qTNVo9D2d4E1Dlam4+cJziY3PWAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:1a:1f:b3:5d:c4:f7:e6:3a:a4:5a:9c:6c:c2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
        Validity
            Not Before: Jun 23 15:00:42 2024 GMT
            Not After : Jun 24 15:00:42 2024 GMT
        Subject: CN=d684057fb9a2d752b4b6475ad431f7364916b7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:0f:9c:33:02:25:2a:c9:07:33:bc:07:01:
                    6f:e4:9a:a5:6c:4a:8b:0d:6b:d3:5f:3a:0c:df:4c:
                    fb:f3:79:46:fc:fd:a0:9e:26:58:28:e4:c4:ba:b5:
                    73:8c:2f:ba:e5:69:cb:9f:76:c3:8a:2e:db:e4:0d:
                    44:17:d6:49:e8:cf:30:38:eb:95:cf:01:86:cd:a4:
                    c4:fb:9a:f0:e4:cd:75:58:b5:05:c1:fd:44:d6:15:
                    13:3e:8f:32:a6:8d:28:f7:d7:e1:65:30:03:a0:1d:
                    0f:16:e2:7a:69:dd:c5:4e:70:ae:11:85:47:f3:fc:
                    b0:91:21:a3:69:a0:17:e6:9e:4b:2f:0f:96:b9:e7:
                    77:f1:19:f9:3c:2e:e3:bb:67:4c:14:40:2f:c2:77:
                    db:4c:95:2b:4d:93:b8:5a:c4:9a:0b:a8:6d:b8:0a:
                    dc:3e:c4:ab:ab:d6:c6:ff:7e:a9:81:5e:57:b4:1a:
                    14:2f:4a:9f:dc:b3:78:c2:b4:62:93:5c:92:07:a1:
                    01:32:3f:3a:49:75:04:14:3d:36:05:4a:41:3d:9e:
                    04:8a:70:cc:d4:37:e4:5d:da:60:e9:9e:62:30:54:
                    cc:b6:5d:02:8c:81:5f:de:33:31:22:66:84:83:ec:
                    6a:40:65:ee:0f:eb:79:74:0d:06:27:fb:c9:33:ca:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:84:05:7F:B9:A2:D7:52:B4:B6:47:5A:D4:31:F7:36:49:16:B7:A1
            X509v3 Authority Key Identifier:
                keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:2a:12:a5:a7:dc:7f:a4:9f:80:36:cc:1e:0c:60:78:c3:
         8b:de:87:89:f1:10:e1:59:59:d6:8f:b3:89:8f:51:3f:c8:68:
         c0:90:c3:d5:de:bb:02:54:0e:da:95:28:28:64:c4:46:63:59:
         e4:0e:36:32:21:aa:fc:78:67:5d:36:e0:eb:2e:34:1e:82:5d:
         80:9c:26:dd:28:4b:f4:b3:33:bd:60:89:8b:19:91:ec:44:67:
         bc:f8:3d:37:a0:67:97:a4:b8:fd:d0:fd:74:7e:bc:f5:8c:e0:
         78:18:b3:19:88:3f:56:f4:d0:45:07:6c:01:25:3a:6c:bc:5d:
         06:8b:80:c8:12:ba:46:6f:d6:1d:34:60:c7:9f:b0:ab:f0:d1:
         f1:50:c2:cb:37:4e:b2:d5:34:a2:00:e5:13:40:d1:88:3f:05:
         29:c3:b7:6a:b2:8f:43:1d:5e:86:84:f5:f3:d8:6f:55:23:95:
         9d:72:1d:b8:7d:8f:06:12:00:bf:2e:0a:41:88:ca:fc:b7:bc:
         51:9d:94:e8:e8:b8:da:3b:da:2d:dc:60:6e:da:03:6e:23:1f:
         aa:2b:c1:a2:c1:58:a5:7b:d8:5d:98:f0:57:da:26:2a:38:eb:
         ef:36:16:25:c3:78:77:f1:82:38:5d:69:be:ea:fc:d9:7a:e9:
         0a:11:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:19:50 2024 by rpki-client on console-fra.rpki-client.org