Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File:                     3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier:          o63tl4MyRwveFwX4OhWG/RJzKS2ksWFSTuaooNHJd0w=
Subject key identifier:   E9:F3:7E:E2:B7:CF:7D:D8:FC:6F:56:66:22:03:09:13:75:CA:E0:B2
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer:       /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial:       01901EC7098A25413AB67E6A9B3122ED3947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number:          0EB7
Signing time:             Sun 16 Jun 2024 02:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:18 +0000
Files and hashes:         1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: ee9eKpknpjwC2OmmY29dW08uOZ0P1C/XWqlmS9oZLEA=)
                          2: lesHWX4svc0fIZYL2TR0obd7i6I.roa (hash: j5AE4ptKLafeOrRhsATy8UB8RvMm49woavbXm6opEmw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:09:8a:25:41:3a:b6:7e:6a:9b:31:22:ed:39:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
        Validity
            Not Before: Jun 16 02:01:18 2024 GMT
            Not After : Jun 17 02:01:18 2024 GMT
        Subject: CN=e9f37ee2b7cf7dd8fc6f56662203091375cae0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:55:4a:d5:19:17:e6:f7:35:9f:3f:dc:e4:db:
                    f9:01:87:1f:2e:6a:9d:a6:e6:6d:87:80:51:2f:11:
                    06:da:41:e8:dd:31:4d:72:ad:28:f1:23:26:f6:31:
                    f6:7c:0b:89:5b:6b:3f:d7:fa:79:1d:18:f4:2b:a3:
                    42:80:fa:e5:f3:3b:24:5f:ab:8a:9a:e3:19:e3:65:
                    0a:4c:7b:3b:0d:fa:d3:19:1b:19:fa:e1:d7:42:1a:
                    80:5c:ea:52:49:97:31:3e:91:d4:0e:0a:68:60:b7:
                    3f:c0:48:3c:d3:f4:05:24:de:e2:bb:ef:60:62:59:
                    74:60:eb:e7:a0:24:4a:fe:09:40:af:49:96:6f:df:
                    3e:fa:cc:ec:85:d8:20:d2:7a:74:1b:ed:ec:64:5e:
                    ef:f4:f8:fd:48:4e:7a:63:8a:af:7c:44:95:df:b7:
                    05:cd:f5:f2:e7:12:49:48:ba:13:22:fc:f4:00:75:
                    20:a3:24:e9:c0:11:67:80:e3:c3:11:69:ab:ca:1b:
                    e9:c7:9d:87:b1:93:3e:23:92:60:4d:ab:4a:12:84:
                    e1:26:77:b8:07:b6:bc:5d:7a:22:48:43:08:d3:08:
                    53:c3:f1:34:e0:af:45:69:b1:8d:0b:9b:b5:cf:37:
                    b2:69:95:ea:ee:15:a1:56:b2:11:07:83:cf:0c:6b:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:7E:E2:B7:CF:7D:D8:FC:6F:56:66:22:03:09:13:75:CA:E0:B2
            X509v3 Authority Key Identifier:
                keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:38:8d:6a:30:17:5c:a6:ef:47:99:e5:46:45:d1:d0:19:
         b6:8e:ae:4d:23:a8:50:88:7a:22:32:cc:af:74:87:29:19:e1:
         3f:2c:3a:e1:8e:cf:cf:cc:ce:1f:12:ab:ca:cd:fe:d2:bc:a5:
         ae:cf:5c:7f:f4:68:2e:6a:ea:ce:d6:cc:b5:49:8a:85:da:e7:
         9c:98:d7:db:24:6f:1c:6e:05:b5:3b:9f:09:8f:02:34:fa:c6:
         98:cc:00:75:4a:64:6a:46:a6:f2:ee:60:b8:11:4b:02:7b:dd:
         29:2e:66:4f:5e:b9:d1:4e:b9:a6:f4:ac:61:ff:87:9e:00:d9:
         78:f9:ab:08:65:14:7c:29:3c:43:cd:bc:a9:61:d1:d1:e4:40:
         c0:84:4c:77:10:fa:87:94:62:85:3f:05:10:21:46:1f:19:05:
         3b:ce:43:a9:89:44:03:69:60:03:67:65:98:6c:14:e7:ab:28:
         df:69:5a:12:98:1c:57:e4:fc:69:01:e5:33:fa:ba:45:72:3a:
         0c:5e:ed:a7:7e:5f:c5:db:1f:98:7f:7b:88:85:b2:f2:a4:c7:
         6c:6c:98:18:98:ac:f0:7f:3f:86:dd:89:e0:41:1f:49:ed:b4:
         97:ce:35:52:a5:0b:dd:61:95:9e:8d:e7:89:9b:ed:58:7c:27:
         d3:af:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:15:28 2024 by rpki-client on console-fra.rpki-client.org