Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File:                     1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier:          9yd0Df6WrGVgEit6BS+xknI2u6b2SFwTx4w97Avup5Y=
Subject key identifier:   32:C4:76:0A:BE:B4:21:29:51:3F:FA:B8:5B:3F:77:28:40:2B:39:06
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer:       /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial:       01901E8FBA7252AC8BDB849864A988DFA0E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number:          06FE
Signing time:             Sun 16 Jun 2024 01:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:54 +0000
Files and hashes:         1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: HCwREyKwv4bn/9GNDor3DZZF63ihGqqAMtGDoBQYjXA=)
                          2: N55sy6v_9W2s9TQP9WPCjO9slbo.roa (hash: UpskQoINGA88EjJGIVkrMvpMtXX4M3J0WJoIXz5Ixwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ba:72:52:ac:8b:db:84:98:64:a9:88:df:a0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
        Validity
            Not Before: Jun 16 01:00:54 2024 GMT
            Not After : Jun 17 01:00:54 2024 GMT
        Subject: CN=32c4760abeb42129513ffab85b3f7728402b3906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:68:b0:ca:4e:4d:09:df:3d:09:d7:6f:87:53:
                    82:41:e4:6d:98:91:85:bd:6e:75:55:51:db:09:47:
                    01:83:1e:fb:92:ef:42:45:71:c0:39:e6:44:e9:35:
                    58:29:8b:42:9f:da:86:fd:76:26:b1:b5:f2:28:85:
                    d2:f8:4b:0c:7a:07:0f:98:4b:c0:16:f2:46:6e:d3:
                    90:95:53:4e:f8:4b:71:0e:91:80:9f:9b:37:b9:4e:
                    79:cb:02:65:af:2b:77:30:b6:04:03:6b:4a:a8:8a:
                    03:37:ec:79:b4:47:80:b7:bd:04:a9:a6:21:5f:03:
                    ef:ff:bd:f9:e7:85:81:85:80:14:ea:ce:79:3f:19:
                    b5:66:3e:a8:e8:9a:73:b1:07:a0:7d:72:be:d3:e0:
                    ba:42:43:e6:ef:8c:8e:21:1f:70:b0:7e:4a:31:ab:
                    f2:a1:87:13:79:01:cb:e1:7a:3c:69:1c:ab:b8:04:
                    e8:3d:6b:e1:6e:36:fa:4d:3d:17:6b:93:c2:ba:04:
                    76:38:f6:85:43:62:83:23:b1:2a:77:a0:a0:66:c4:
                    8a:6a:9e:f1:a4:ae:0b:91:3d:2f:fb:b5:99:a0:bd:
                    b9:0b:08:b2:a5:f6:08:9d:ae:47:99:e3:a9:80:0c:
                    52:87:64:8a:47:83:5b:6f:99:86:86:b2:08:94:8a:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:76:0A:BE:B4:21:29:51:3F:FA:B8:5B:3F:77:28:40:2B:39:06
            X509v3 Authority Key Identifier:
                keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:77:20:13:22:d5:11:44:53:59:70:19:0a:e8:c8:fc:d1:8d:
         7a:3e:61:49:81:3e:3d:7c:33:cd:d3:04:53:08:6c:36:b9:4c:
         9e:16:1e:68:6a:ac:0b:19:c2:d4:f4:b4:84:37:da:4d:b5:d9:
         d3:a2:b0:87:73:18:41:1e:21:cb:a3:8d:41:75:89:10:e2:06:
         55:34:c0:47:5e:2b:5f:eb:90:38:9b:8e:b7:0b:6d:bf:98:c2:
         52:17:57:fa:9f:4d:df:cf:fd:69:0a:09:aa:bb:6d:96:03:52:
         9d:bf:a7:46:d8:de:88:d8:3f:93:c8:c6:c9:00:63:88:44:c3:
         bf:08:f4:db:0c:6e:a5:06:b6:62:72:40:31:2e:b6:9b:bc:db:
         80:74:f4:b3:69:59:ff:4a:f3:7f:0e:37:27:2a:d8:ea:85:00:
         b0:0d:a0:ea:61:53:28:65:7a:2b:37:17:53:38:0b:f2:0f:d8:
         33:98:9e:69:84:d5:e0:16:5a:03:88:f8:c2:cc:d2:cf:32:3a:
         8a:6c:e2:09:fd:dd:52:b2:ba:d3:54:1a:56:34:72:fd:f6:2c:
         b1:89:43:70:07:1b:0b:ad:a5:d2:3c:b6:29:24:20:ee:09:1e:
         4a:52:4a:4e:28:6c:f2:2a:7b:92:ed:ed:1a:32:ac:1d:9b:2b:
         35:3c:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:29:46 2024 by rpki-client on console-ams.rpki-client.org