Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File:                     3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier:          mUszaAuV9WPoGPyox7mDLQmjeg2yOmvU4RFhATkF4Gs=
Subject key identifier:   39:26:6A:8E:85:94:69:74:DE:14:7E:AD:8C:37:2A:8B:AF:12:C0:AF
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer:       /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial:       01901E5899403A985AECF846F0A280C29FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:41 +0000
Files and hashes:         1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: tJl7+MEl+cSDjM15qxxiO4lACGRRqMY+zShfKBKQyw8=)
                          2: XWzDZCQV_DiIYRMB4P2-aVeomhw.roa (hash: C8OCvQgzKIEb/BHMkGbslFHLjeLL2vHsYjb+g0LdPZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:99:40:3a:98:5a:ec:f8:46:f0:a2:80:c2:9f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
        Validity
            Not Before: Jun 16 00:00:41 2024 GMT
            Not After : Jun 17 00:00:41 2024 GMT
        Subject: CN=39266a8e85946974de147ead8c372a8baf12c0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:23:54:10:9d:58:c6:3e:4f:d3:6f:57:c4:
                    ef:5d:cb:9e:9d:c0:73:8d:e5:53:8b:14:80:c7:cb:
                    08:15:f5:f4:00:d2:76:77:0b:a0:eb:b7:96:dd:a4:
                    6f:80:9e:a8:a6:11:16:fc:f9:82:5d:ec:e6:81:1e:
                    3d:71:76:07:cd:3e:69:5f:e7:5c:80:3b:ab:71:d7:
                    80:41:81:5c:f2:84:82:6e:b1:ee:7c:e4:68:78:05:
                    f9:89:7c:6d:fb:d3:58:e1:d1:ab:79:c2:a0:6e:a0:
                    cf:43:ad:18:f5:ce:ee:cd:1d:2d:97:aa:6e:ad:b6:
                    ea:24:85:b8:9f:bd:1b:23:2b:e2:6f:fa:70:2c:41:
                    48:79:46:04:b5:64:39:25:16:6b:24:27:31:a1:04:
                    14:2b:37:92:18:0c:ab:96:a2:52:69:15:ef:de:22:
                    06:6d:fb:4b:51:3a:ab:4b:f1:b5:a8:b1:59:26:19:
                    b8:57:04:36:07:45:d7:4a:79:2e:6c:7b:e7:8b:86:
                    69:e2:4c:ff:3d:54:e6:2b:5f:d3:82:86:5a:b6:8d:
                    20:b8:2e:37:29:be:d9:c2:65:36:8b:81:8e:ed:3a:
                    ee:f1:c0:e8:c7:4d:c7:ff:9d:35:86:af:4d:e6:20:
                    b1:68:8c:c4:94:bf:40:8d:c3:ec:b7:18:db:c0:d6:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:6A:8E:85:94:69:74:DE:14:7E:AD:8C:37:2A:8B:AF:12:C0:AF
            X509v3 Authority Key Identifier:
                keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:1b:68:8a:e1:2b:ee:d5:f0:be:27:c0:3c:37:da:c5:6c:
         10:d8:54:8a:77:69:61:06:11:08:8d:89:f5:0c:51:9a:69:76:
         0b:56:fe:d3:62:e6:e3:c1:57:84:98:f9:55:2f:18:a0:ab:4d:
         e0:53:8f:b6:1d:6f:c5:55:71:8a:db:4d:9d:02:74:a5:b4:ac:
         53:d8:1c:b9:84:41:c4:9e:ac:5b:4c:94:1f:79:7a:4c:c4:db:
         07:f4:33:31:f7:94:27:87:2a:de:30:62:bb:ad:cf:d4:57:85:
         7f:46:d9:5b:8c:7e:b3:25:8b:d1:ee:9d:50:1f:36:7f:6b:56:
         0f:48:ec:62:23:e9:24:bd:25:1a:4f:0f:7c:72:13:01:62:f9:
         1c:af:4e:fe:19:32:fe:96:9c:96:96:f6:79:df:29:81:2c:4e:
         27:f6:34:43:30:5c:13:24:c7:f3:44:ac:42:cf:39:ae:08:35:
         a1:50:38:60:ee:90:6c:1e:87:ff:20:08:f5:a1:27:f3:e1:54:
         aa:4f:47:3e:f8:f9:0e:9e:78:ef:77:a1:17:b1:fb:b4:90:eb:
         52:71:e9:a9:d9:80:df:52:d3:2f:f3:ec:9d:fe:b3:11:73:e3:
         30:ff:f5:44:9b:b5:73:12:85:75:b9:ae:1a:6f:26:0d:78:59:
         55:a8:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:59 2024 by rpki-client on console-fra.rpki-client.org