Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File:                     H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier:          TsI5UTlclneRLxOrpxHKuE/W50mll5wfq3b75g0cku0=
Subject key identifier:   68:86:84:B9:EB:53:77:DB:21:0F:9C:68:04:BB:A1:C3:D0:60:C2:03
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer:       /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial:       01901CD86D4C27C4C3A125F21F1E53C1983A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number:          05DF
Signing time:             Sat 15 Jun 2024 17:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:04 +0000
Files and hashes:         1: GEpl7NTUbFHjWisNjaf_nzeN9yc.roa (hash: 3vf87rdXyJRx62/etIJ+rvU9KoXiHC3EHYfORtZLzQw=)
                          2: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: w+xLvOgzpfeuat9Mp7O1JugAJ2XCDPTG8Fg6lYsJ6w8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:6d:4c:27:c4:c3:a1:25:f2:1f:1e:53:c1:98:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
        Validity
            Not Before: Jun 15 17:01:04 2024 GMT
            Not After : Jun 16 17:01:04 2024 GMT
        Subject: CN=688684b9eb5377db210f9c6804bba1c3d060c203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:6a:3a:c7:b4:a7:ca:91:7a:aa:b7:37:d7:
                    30:21:7b:27:d8:5f:d7:f7:af:1c:d6:ef:67:c2:9a:
                    11:75:82:a4:4b:a1:26:ad:20:cf:43:e6:7f:ba:75:
                    33:58:20:19:01:3c:2f:7e:bd:61:5e:53:c6:45:6e:
                    83:21:fa:87:6c:42:df:1a:72:a2:0c:7e:9b:eb:1a:
                    74:d4:8a:69:75:e9:2f:c7:c3:6a:2d:2a:6f:9d:76:
                    da:21:75:22:50:0b:3c:2e:07:a6:c9:e8:db:3a:09:
                    22:f9:36:c8:b1:fe:cc:2c:e2:43:ec:64:ea:9b:80:
                    16:6c:35:93:e2:e5:8c:f9:9d:4f:33:ae:a2:5f:d0:
                    ed:5a:6f:15:57:5e:d7:af:e7:db:a9:97:99:e9:c5:
                    99:90:bd:59:bc:57:99:3e:81:62:1f:2e:87:d3:52:
                    7c:24:d4:f1:90:36:56:f9:6e:6b:9c:ba:30:fd:53:
                    a3:77:d4:6a:a5:74:09:7b:e7:61:5e:81:89:2d:9f:
                    eb:29:36:cc:88:7b:40:75:07:61:1b:2e:34:79:fb:
                    bf:c2:25:d2:0d:f9:99:d8:01:df:60:f1:45:20:b3:
                    4b:fe:00:50:7b:71:c6:a8:0b:97:fe:ed:e6:19:a8:
                    1f:95:8f:88:83:1b:78:1d:47:91:43:5c:fa:c9:dc:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:84:B9:EB:53:77:DB:21:0F:9C:68:04:BB:A1:C3:D0:60:C2:03
            X509v3 Authority Key Identifier:
                keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2c:b9:be:5f:b5:6e:fb:86:c7:ef:9f:41:00:26:1f:25:b1:
         13:bd:36:3f:a8:27:d5:3d:fc:27:0d:a0:f2:31:ff:36:a7:1e:
         04:18:24:15:d5:b2:2b:9a:e6:e2:87:b8:29:4d:fd:83:46:cf:
         15:3f:89:85:10:19:a5:55:ac:7c:01:1c:bb:62:59:4e:37:4f:
         db:0e:77:49:e7:b2:55:5e:32:57:f3:c1:a6:cc:4a:2c:05:dc:
         bb:d1:59:05:2f:0b:fa:6e:d1:30:0e:e0:a3:6e:19:2b:9c:c2:
         39:58:66:2c:69:81:1b:52:ea:d4:29:d2:c0:de:9d:e9:7e:ba:
         27:4e:52:98:6a:cb:3b:e1:7f:e9:20:97:41:de:30:0a:80:fd:
         f8:4d:70:1f:5e:31:5d:2a:e3:27:c2:02:a0:1e:ff:a6:5c:c7:
         f2:8f:b7:7c:8b:b9:8d:f7:7f:11:a1:3b:68:f3:6b:68:8a:b4:
         ff:d2:f1:56:69:0a:12:0b:19:2c:7a:b6:a2:b1:1e:51:d2:84:
         91:d9:3e:7d:1e:33:15:c4:a0:be:c9:b5:67:c5:6f:47:11:65:
         3e:6c:6e:d0:b3:92:58:31:d0:13:da:53:32:8f:a9:df:f5:00:
         3c:dd:5f:8f:91:f0:b7:fc:50:ce:6c:95:b8:a1:a1:f4:72:12:
         62:1f:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:00:17 2024 by rpki-client on console-ams.rpki-client.org