Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File:                     rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier:          yXjbPfvSC6xri+y87EjNtrPVMtCvntlIfbn9xD+/r8I=
Subject key identifier:   A1:D9:94:2F:00:D9:F3:E7:8F:9E:F4:93:AB:AD:24:76:4B:C0:2A:FE
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer:       /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial:       01901E5945457661A312E0B573A021E92F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number:          0409
Signing time:             Sun 16 Jun 2024 00:01:25 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:25 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:25 +0000
Files and hashes:         1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: NR/07gw+qpLTMyLbND8YcxWl2MhmwixMKsxpW7VMTeE=)
                          2: vNzxqIjFLgdEmg_jQk6WmrQWpAA.roa (hash: 5D7W2Wv99GKbJW2t6TzRZkIYw1SllbyOisP7MSGT6oM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:45:45:76:61:a3:12:e0:b5:73:a0:21:e9:2f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
        Validity
            Not Before: Jun 16 00:01:25 2024 GMT
            Not After : Jun 17 00:01:25 2024 GMT
        Subject: CN=a1d9942f00d9f3e78f9ef493abad24764bc02afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:f3:58:6f:c8:b6:b7:d9:f9:f1:2e:98:ee:
                    ca:e4:00:48:69:24:13:45:c8:cc:97:02:71:70:19:
                    8e:7f:c7:9c:42:98:7f:6a:87:fa:59:6e:bd:6e:17:
                    67:85:00:4c:b3:53:b8:cb:f8:dd:d3:d1:e1:01:9e:
                    fd:11:ff:4c:ef:a1:4f:79:86:66:23:e8:43:01:c6:
                    43:0b:39:8b:00:57:79:55:9e:cf:a1:3f:f3:de:2d:
                    71:da:b2:e1:51:87:ee:b8:ae:af:d9:34:0e:69:fa:
                    a4:a7:5b:71:4d:fb:7e:0d:2c:9d:72:0a:e1:12:ca:
                    f7:4a:3f:ff:c3:dc:7a:77:81:78:39:f1:93:1a:0d:
                    97:fa:26:5d:15:11:87:14:39:a3:65:55:b5:03:b7:
                    1b:f7:16:e1:09:44:89:1d:10:2f:2c:79:4e:fe:84:
                    47:f5:60:c2:c4:c0:64:dd:72:86:09:23:f3:36:a5:
                    74:89:b1:07:32:b9:ae:70:7d:28:f2:85:26:33:ba:
                    ea:77:45:03:57:9c:98:cc:70:78:13:a6:32:60:bc:
                    5f:f0:de:a2:e3:69:76:b2:77:07:81:a3:f1:63:92:
                    89:59:77:ee:9b:4f:52:7b:0c:58:63:67:ef:54:cf:
                    6c:c4:9b:e5:d6:e2:47:c5:d6:26:48:18:bb:03:19:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D9:94:2F:00:D9:F3:E7:8F:9E:F4:93:AB:AD:24:76:4B:C0:2A:FE
            X509v3 Authority Key Identifier:
                keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:0e:e2:21:34:cb:dc:9e:ac:14:44:19:9c:a7:d3:55:c1:
         11:77:3b:41:91:40:35:a9:ad:57:b7:8e:85:69:d8:7b:7b:f0:
         0a:5f:b4:db:23:f2:5b:82:50:71:b0:9f:f2:1e:87:c5:58:81:
         fa:a6:dc:91:70:d8:a0:db:f1:5b:92:a2:fe:60:6a:7c:13:06:
         5a:5d:2d:83:1c:87:70:9b:84:27:6d:8f:6f:59:b8:18:42:84:
         b0:b3:01:6c:3d:1a:51:bc:95:1e:97:44:d1:76:a4:71:c9:ef:
         d9:5d:bb:4b:ed:ab:3f:00:f6:e6:e3:a4:de:eb:7d:0d:05:4f:
         5f:49:f4:6e:bf:a4:aa:dc:14:df:a5:44:87:7c:31:e6:fe:c3:
         1f:75:83:f4:69:96:ad:44:68:20:70:af:b9:0b:c2:95:76:f1:
         ba:c8:0d:64:21:a8:d5:47:d7:d8:83:85:86:a7:45:5a:38:e4:
         d6:fb:42:09:ad:1e:a8:f6:9b:fa:10:88:6d:54:02:be:1d:16:
         fb:3f:b7:17:ca:13:96:68:89:9f:54:24:77:b2:c4:e5:eb:df:
         5f:e7:bd:d9:3e:43:1b:73:7f:76:6d:a7:c8:4b:00:2d:b1:f1:
         14:c7:6d:e4:9a:02:0b:8d:6f:4d:33:55:4b:e0:d9:a8:8c:a1:
         e9:de:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:11:34 2024 by rpki-client on console-ams.rpki-client.org