Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
File:                     c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft (raw, json)
Hash identifier:          cfS1KsUUddMzSxd7iCD7HD5Qn8Luqzx811rNtU38Rus=
Subject key identifier:   F2:9E:C4:62:6B:6F:D7:FD:FF:EE:71:3D:40:4A:34:95:30:C2:AA:CC
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Certificate issuer:       /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial:       01901BFF673503E7379D6DB7AE35161626D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
Manifest number:          0C3B
Signing time:             Sat 15 Jun 2024 13:04:01 +0000
Manifest this update:     Sat 15 Jun 2024 13:04:01 +0000
Manifest next update:     Sun 16 Jun 2024 13:04:01 +0000
Files and hashes:         1: GigCisKMOPV8_YvqM3m9tMm8yYo.roa (hash: Iuhxag3tDVL0DfOTcgR96mGMKtxVHY3IOz+4Iwleurs=)
                          2: c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl (hash: TMA2dRgXKajX+Dmeryop+Clmnpd+50J6n1IydiFnb0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:67:35:03:e7:37:9d:6d:b7:ae:35:16:16:26:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
        Validity
            Not Before: Jun 15 13:04:01 2024 GMT
            Not After : Jun 16 13:04:01 2024 GMT
        Subject: CN=f29ec4626b6fd7fdffee713d404a349530c2aacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:67:7a:58:1c:00:fe:0e:53:88:65:b9:0d:
                    c1:79:ae:8d:b7:63:0e:ba:1f:36:f5:f7:75:d7:3c:
                    5b:7a:c8:dc:b2:6e:d7:a2:48:a7:66:0c:0f:37:32:
                    c3:d0:12:61:74:18:20:bb:77:34:e6:36:c1:82:0b:
                    96:75:15:56:2b:ba:ea:ea:d7:28:23:33:f5:60:fc:
                    82:68:51:35:26:9f:e5:d0:b7:87:ee:fa:8a:3c:d7:
                    4c:4f:9a:a3:2a:e9:51:54:4a:81:36:14:12:e3:ed:
                    5b:12:c7:1b:6d:58:68:ce:35:c6:31:ee:9b:a0:9f:
                    be:a8:ff:8f:11:6e:a7:66:d8:48:34:6f:0d:8c:58:
                    ec:2f:8a:0e:0e:b3:f4:ca:4e:f5:f1:19:31:49:53:
                    d2:4b:89:5d:d9:3b:83:e4:4f:9a:0b:05:b6:d4:05:
                    89:a7:6d:38:c9:63:11:dc:7f:0d:98:47:6f:40:21:
                    27:f4:9e:1c:f6:67:ff:4d:55:ca:f2:51:6a:b3:4c:
                    18:8d:ce:65:4b:f1:af:0f:b6:1e:70:24:1a:cf:31:
                    5d:72:ee:23:87:a6:c9:d0:b4:70:b8:2a:aa:19:ee:
                    35:9d:f0:c7:9a:76:6f:46:74:f7:6d:1f:d0:e0:78:
                    2a:fa:8d:50:8e:b5:60:57:ab:08:0d:1c:43:27:af:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:C4:62:6B:6F:D7:FD:FF:EE:71:3D:40:4A:34:95:30:C2:AA:CC
            X509v3 Authority Key Identifier:
                keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:05:63:e2:68:92:f0:1b:72:e9:53:cf:f2:0a:bc:f2:f3:c9:
         63:54:81:00:e0:10:6a:a9:2a:4a:85:15:6d:7b:1e:f4:d8:1d:
         09:f2:f1:31:3b:79:c9:fc:ac:5e:4d:88:8a:4e:a5:01:4e:e2:
         1d:67:29:a1:32:90:52:08:6d:c2:68:b4:6f:ef:f3:b1:f1:6a:
         32:4b:ea:e8:b5:94:f5:8b:1e:33:22:8f:15:f4:ec:db:66:e6:
         3b:d4:2c:09:fe:66:f1:d3:85:20:92:b2:56:12:51:e1:36:30:
         f5:f6:cd:12:b3:bd:e9:aa:27:43:d8:9a:46:d5:24:dd:64:cf:
         8c:21:13:7f:f2:27:51:96:81:31:e0:da:4c:76:c3:5b:1e:33:
         e3:dc:16:0e:37:49:e1:97:14:e8:68:31:da:de:9f:bd:09:2d:
         66:e3:9d:30:a2:2b:5c:d7:17:cd:84:3d:f4:7a:ff:6d:ca:9b:
         7e:6f:27:4e:dc:e8:2b:58:2b:84:88:0a:af:64:9b:f0:b9:3b:
         52:42:6f:2a:b4:f5:cc:a9:cf:03:9e:c6:ba:f8:33:9a:29:7e:
         31:c6:78:aa:24:c2:0c:fa:4f:d0:bf:99:d6:2c:f9:6a:05:82:
         ca:21:43:7a:da:c3:00:78:33:d2:3b:6e:e6:13:fc:3f:27:1f:
         f7:13:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:45:11 2024 by rpki-client on console-ams.rpki-client.org