Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File:                     3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier:          Otf7VVaAksgSQ74eZMn5Sk/kjEOzr9mhDhp0E8z/UT4=
Subject key identifier:   B5:30:72:5C:9E:AC:99:0F:7F:B2:50:7B:13:BF:76:40:99:72:AE:A0
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer:       /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial:       01901D0F50956CFAEFEA1615F3D5DC5FEF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number:          107C
Signing time:             Sat 15 Jun 2024 18:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:01 +0000
Files and hashes:         1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: y0h9YUNYc5Ym8kG7Nt8+9lACiNPNfNk8fEsRcc4qiRo=)
                          2: zFdXKQllvtSNtk52MTngccm4w9I.roa (hash: ppz6v+YPAYP3usFn2zNU7GGusnuMvABa5HLhuwjgJkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:50:95:6c:fa:ef:ea:16:15:f3:d5:dc:5f:ef:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
        Validity
            Not Before: Jun 15 18:01:01 2024 GMT
            Not After : Jun 16 18:01:01 2024 GMT
        Subject: CN=b530725c9eac990f7fb2507b13bf76409972aea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:f3:ff:91:84:4d:e0:a5:26:9a:25:02:3a:
                    86:e7:4a:01:86:33:84:ad:f6:89:e4:cd:4d:15:80:
                    ac:bd:c6:e6:95:0b:e8:d4:d6:6e:53:00:51:71:17:
                    54:15:8f:40:9a:0a:80:63:5c:05:f6:08:bb:b5:58:
                    0e:68:b0:a0:98:d5:70:49:d8:87:23:44:42:8c:ff:
                    27:32:6f:be:9d:67:de:c5:81:b9:20:fb:a8:d5:28:
                    49:a2:20:4e:2e:1a:a2:60:1a:65:5b:00:8f:5f:aa:
                    90:d7:31:35:a2:ec:37:bb:e0:6b:95:7b:90:68:0f:
                    3f:ab:fc:2f:29:64:03:92:7d:18:86:c4:0d:ea:6b:
                    3b:66:17:86:cd:af:b5:21:e7:dd:4e:17:e4:21:b5:
                    5d:bf:0a:6c:f2:4f:d1:3f:36:de:bf:bf:70:45:73:
                    9a:c0:af:6c:67:1c:6a:63:33:ab:39:eb:8e:b9:55:
                    9c:bc:2f:9e:be:77:f1:b3:58:7c:dc:3b:7b:b2:6a:
                    1c:3f:d5:69:70:77:bb:8d:cb:d4:25:50:35:32:aa:
                    d6:d2:0a:bc:4d:bc:e2:e9:f1:96:2f:56:28:9e:bf:
                    74:b8:3e:a0:d1:20:e5:59:9a:07:45:ec:14:8d:cd:
                    fe:42:0b:33:b1:78:04:8e:44:1d:f0:14:d8:5d:e6:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:30:72:5C:9E:AC:99:0F:7F:B2:50:7B:13:BF:76:40:99:72:AE:A0
            X509v3 Authority Key Identifier:
                keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:50:51:3e:e6:00:16:22:51:e5:ff:0b:9a:a0:2b:9f:eb:33:
         94:c4:cd:c5:80:b2:72:52:4a:4d:bc:f6:f0:be:33:59:db:37:
         de:fa:94:c9:2b:cd:d0:5a:f2:b9:e4:02:a5:cf:28:2b:16:ed:
         51:a2:1b:f5:b6:8e:de:be:b2:71:f8:c5:85:72:c2:84:88:1c:
         f3:8f:65:f5:25:5c:b0:9e:e9:9d:f6:69:bb:4f:67:12:1e:d4:
         44:36:8d:bc:30:7b:98:21:4b:01:6a:77:21:33:60:5c:2f:9e:
         b1:fb:a3:d0:9d:44:0d:40:24:63:87:72:e0:f8:0a:43:5d:2b:
         24:58:6f:c4:8a:98:b1:bc:7e:fd:4a:46:1c:cb:86:e7:ac:11:
         77:9a:97:c5:0f:5b:b3:25:d6:3b:0d:69:15:fa:eb:19:ca:4d:
         61:23:02:dc:36:f1:a7:55:c9:74:0d:40:16:92:7f:37:a7:73:
         26:2f:0a:7d:05:55:d7:73:55:eb:0a:32:a4:8e:ba:72:21:81:
         52:37:f7:fc:80:02:b3:73:4e:9c:43:ee:d6:7f:24:52:e1:0c:
         d7:ef:e7:c7:94:7e:ab:c5:4b:12:6e:1b:84:a5:88:57:2b:b5:
         51:72:60:9d:e1:94:20:92:09:2f:32:65:46:7e:cd:dd:34:85:
         a4:f9:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:05 2024 by rpki-client on console-fra.rpki-client.org