Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
File:                     3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft (raw, json)
Hash identifier:          hUQSc6GnyBQMWtDlEhxekQsEMzJJ7g+71CcZ+U7EEOM=
Subject key identifier:   72:F4:2C:CC:DF:63:21:AE:4C:B0:58:75:3E:6D:D4:2B:18:14:D6:99
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       01901DEB9F52EBB7E7A7C851646D18237515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:01:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:39 +0000
Files and hashes:         1: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl (hash: oYRblQzAA4LQP6/uGow1P9kvUhODgJ+aH+1r68nj2iY=)
                          2: ahO8QOj9tu4XWu4jPDukNwLM5q8.roa (hash: RvwkF91KGDlUpvFiH6iy062nXWMOSw4qKxr9IRwreLo=)
                          3: cMq8Ff-JaahL_nsWsI3-w2dELlw.roa (hash: m4gkWIPtPSyMcOb1vWgDIvmzL1srIsZ7uOsKkeZL3Sw=)
                          4: dRczkNlE78tPt_hRF0-ei8z9uOg.roa (hash: 3wpEvifJeVFBwSclWgIJxMroNJeS1ss3CuAYbK4EOro=)
                          5: guBCxuAjcs1_KA9l5RcoFD1228c.roa (hash: WhnOkMWwmh6tFXXvJGCjk8RUe6s0iPiRdT0ZokinuBc=)
                          6: zxb1h_Xw2DsmGfhtRdTOzwqL8EE.roa (hash: DPz0diWKC/Z5lRhNZMmwYM1YLeo410Gh7yCFj8zZgvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:9f:52:eb:b7:e7:a7:c8:51:64:6d:18:23:75:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: Jun 15 22:01:39 2024 GMT
            Not After : Jun 16 22:01:39 2024 GMT
        Subject: CN=72f42cccdf6321ae4cb058753e6dd42b1814d699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7f:5a:32:1a:f6:4f:82:c2:1d:85:08:cc:06:
                    fc:06:c7:a8:a5:88:12:50:13:40:bf:57:7d:61:47:
                    67:4e:a2:d1:3c:74:96:32:22:98:1f:9c:b6:13:7e:
                    42:75:40:ac:cc:96:d5:77:3f:9c:3f:44:3d:fd:f3:
                    41:98:28:0c:3d:50:43:20:2d:11:d6:75:38:e6:f1:
                    14:ec:c6:c3:1b:94:57:fb:ee:4f:50:8f:67:7e:20:
                    c9:09:f5:c5:62:8d:80:e1:6b:2d:97:17:a8:ec:6d:
                    3b:b0:26:29:34:be:11:bc:e6:a2:8a:19:77:a5:8f:
                    30:a0:d8:48:60:be:e7:51:2d:5e:53:df:71:3c:87:
                    fc:33:05:b9:d0:ea:db:8a:36:77:49:a7:94:55:1c:
                    c9:a9:7e:2e:c7:8a:bb:d5:bf:ab:7b:dd:ec:76:f8:
                    08:2a:51:81:b6:30:60:9a:91:9d:3b:5c:88:29:b5:
                    65:59:aa:d0:64:bb:6a:ef:24:cd:f6:91:05:73:39:
                    32:a3:8e:58:8f:e6:e5:58:b7:b9:45:7b:17:32:a1:
                    7f:6f:f4:33:ce:71:df:b9:90:ec:87:61:b4:da:f3:
                    21:23:58:be:93:20:86:cc:ae:23:ef:0f:75:aa:4e:
                    84:6e:31:04:50:a3:a2:09:b7:29:be:29:86:57:20:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:2C:CC:DF:63:21:AE:4C:B0:58:75:3E:6D:D4:2B:18:14:D6:99
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:6c:73:3a:b3:d5:b0:d2:7b:ac:9f:02:95:41:16:41:e4:
         68:f2:a9:46:8f:a1:6a:de:c5:b9:30:60:b7:89:5d:34:10:30:
         71:17:66:47:dc:36:75:3a:a4:2f:fe:9e:d7:64:c9:cc:5e:94:
         f7:b4:45:d8:fb:53:70:b8:0f:ff:dd:50:8f:60:2a:3d:4b:f5:
         37:f9:6b:55:72:48:82:14:57:03:c9:43:1d:88:6c:0b:e4:f1:
         06:24:bf:49:f8:b0:d8:71:9f:1a:ab:f4:cb:15:8b:da:41:89:
         03:5e:59:89:95:a9:17:50:20:69:ab:b9:e5:f4:52:d2:36:e4:
         47:ef:e8:8f:21:bd:8c:ee:56:4d:32:6d:b3:97:ff:2d:3d:89:
         b4:f7:14:89:6e:0e:59:0f:67:f5:45:77:28:4f:0b:de:12:62:
         7c:79:a8:19:61:58:00:db:22:b6:36:07:80:e5:65:96:ef:5f:
         fe:d1:b7:93:a6:1c:45:6e:c1:16:de:7f:ed:ca:dd:80:ed:57:
         75:4c:6f:57:cc:ac:68:e5:91:aa:87:6e:02:9c:1f:3e:89:aa:
         c4:ae:77:19:45:1e:6e:c4:cf:b5:e7:42:e8:38:70:e4:a4:c4:
         56:4f:c2:74:df:91:29:2f:12:23:f1:2d:71:19:01:ec:ae:fd:
         36:f4:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:49 2024 by rpki-client on console-ams.rpki-client.org