Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File:                     3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier:          3MMpARnTBgqNHC5Eook3mEyxy5+flUXJ0h1IwxP8znw=
Subject key identifier:   A7:C8:E8:37:F8:7F:9E:4F:78:E2:92:79:9D:CE:C0:CF:F2:6E:AF:5B
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer:       /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial:       01901DEB8C4B81D6E3E5C53B686C0F8CA3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:01:34 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:34 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:34 +0000
Files and hashes:         1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: kOxA0exSwIvQJJj7tP2FdicS0Eya1w4Lr21ZGozVI2E=)
                          2: qFml8DUiLOYSpc35VCsPyfgK3G0.roa (hash: tpKPY4d14p0c2/l+5FxC0Rzd4m4G9QxcBpfkzmlm+AY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:8c:4b:81:d6:e3:e5:c5:3b:68:6c:0f:8c:a3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
        Validity
            Not Before: Jun 15 22:01:34 2024 GMT
            Not After : Jun 16 22:01:34 2024 GMT
        Subject: CN=a7c8e837f87f9e4f78e292799dcec0cff26eaf5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:11:35:54:b9:a0:e6:44:1d:84:24:d4:40:
                    2d:f0:ff:8e:03:19:3c:fd:11:fc:50:4e:d9:4b:a2:
                    50:33:73:71:96:17:15:07:bb:e0:e6:f6:9b:da:45:
                    62:e2:d6:3b:33:74:82:34:a2:99:d3:7e:b6:ed:6c:
                    a1:10:66:7e:2e:a9:16:57:22:83:e3:fd:2b:42:ba:
                    e2:96:88:49:ef:b1:17:ff:a6:f8:82:0a:a4:c6:34:
                    bc:64:b6:a6:03:ad:15:6f:10:27:1f:16:a6:58:f8:
                    27:04:d9:f5:33:bc:8b:07:02:05:54:a0:ba:76:a5:
                    cd:25:11:ff:36:95:3c:22:9c:06:db:02:9d:3d:3f:
                    80:b4:2d:ec:35:8e:4f:bd:e7:22:74:ea:34:df:ab:
                    83:6f:b9:ab:fd:a2:3a:30:f9:91:c0:68:97:db:43:
                    01:f2:97:2c:e2:0c:0e:a1:a0:41:48:c0:bc:32:c8:
                    7d:ae:e6:7a:02:b8:92:7b:24:c7:e7:89:85:74:8d:
                    7a:2a:f0:25:1c:67:69:11:cf:49:3b:1e:7b:a3:f3:
                    b3:d2:d1:e5:30:87:c2:2f:58:da:81:10:af:7b:54:
                    c0:ac:d4:7e:5c:c9:ca:82:e1:09:6c:32:f2:05:f3:
                    e9:36:e6:84:0d:ad:69:3a:3a:af:2d:26:b8:fe:c5:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C8:E8:37:F8:7F:9E:4F:78:E2:92:79:9D:CE:C0:CF:F2:6E:AF:5B
            X509v3 Authority Key Identifier:
                keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:66:39:57:2d:ba:7f:37:09:01:d6:e6:0f:2f:b1:57:88:
         92:c2:81:0a:ca:e4:23:49:ab:a9:d9:1b:70:cd:88:59:a4:a4:
         05:5e:5f:84:0f:07:07:54:c5:b6:8c:43:4d:fb:28:af:72:b2:
         de:30:6b:66:32:fb:38:be:59:d4:37:15:b0:9f:eb:7a:18:f5:
         29:f9:46:74:82:a6:31:51:04:a8:81:4a:b6:b4:a8:12:9d:38:
         b9:fb:f8:a4:08:5f:9b:4f:52:2f:82:20:89:7b:75:0e:6f:dc:
         ae:f3:31:94:d1:73:fb:ba:f7:90:ce:6e:a4:8e:b2:27:13:63:
         41:65:51:cd:ac:f5:1c:6a:b1:b3:7c:7f:4f:77:9f:45:d2:3e:
         c3:9b:6c:7d:55:70:72:5e:8b:03:35:95:28:c6:bf:83:e3:32:
         5f:c5:eb:05:c8:02:97:af:81:98:de:a7:0f:2a:68:10:84:68:
         47:1b:68:89:b0:eb:2f:f5:5b:7f:29:5f:97:b6:c1:2e:37:75:
         99:5a:db:08:af:4c:60:3c:1a:da:78:c0:a3:d5:f9:5c:66:b4:
         fe:13:b1:21:eb:c9:89:1e:64:6a:e6:3b:86:e0:c0:bd:42:b3:
         91:39:45:27:7a:22:f7:17:90:1a:e4:5a:ba:2b:a9:33:71:97:
         3b:83:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:13 2024 by rpki-client on console-fra.rpki-client.org