Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File:                     H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier:          KaUZjBjCVLGXSHKiJy+jsOhWuRpjsCLkRKQRBCu8Ng8=
Subject key identifier:   70:8E:A5:DE:5E:01:51:59:7F:C3:97:D6:E8:A6:51:46:76:E9:54:82
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer:       /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial:       019045669100E31F00A605A7A581E153F619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number:          05F4
Signing time:             Sun 23 Jun 2024 14:01:07 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:07 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:07 +0000
Files and hashes:         1: GEpl7NTUbFHjWisNjaf_nzeN9yc.roa (hash: 3vf87rdXyJRx62/etIJ+rvU9KoXiHC3EHYfORtZLzQw=)
                          2: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: QLrU64gRPGrqQAOEzDF51rrWPx9YbNjYln5GhOVvd+U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:91:00:e3:1f:00:a6:05:a7:a5:81:e1:53:f6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
        Validity
            Not Before: Jun 23 14:01:07 2024 GMT
            Not After : Jun 24 14:01:07 2024 GMT
        Subject: CN=708ea5de5e0151597fc397d6e8a6514676e95482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:92:29:f6:e7:5c:39:9d:b3:b2:80:35:23:
                    a4:58:b9:11:f9:92:ab:7e:33:cb:90:75:e9:31:37:
                    a0:4d:3d:29:63:84:d1:7c:9a:46:35:dc:76:5b:cf:
                    b6:e2:95:a7:05:f4:44:a6:af:60:9a:18:d9:13:c4:
                    59:09:65:a3:56:59:0e:52:46:53:06:89:e8:68:29:
                    48:e7:a8:4e:4a:ec:27:56:9e:a1:dd:f2:0b:3d:ad:
                    69:a4:2e:98:f1:27:e2:02:9c:3b:81:3e:02:5d:fa:
                    b9:fc:43:86:18:04:e0:e7:4c:03:f7:a2:ec:66:54:
                    23:c2:db:9a:81:f2:c6:5f:6d:8c:5c:a2:44:ad:1f:
                    a3:f9:b6:b5:15:16:ce:7e:b5:40:0b:5e:09:94:d5:
                    fe:f8:69:49:25:b8:f1:f1:81:59:f7:1e:03:81:96:
                    81:88:a4:92:e8:e8:f8:f8:dd:cb:ca:b4:09:e2:03:
                    3f:1f:f8:eb:07:6c:db:ad:36:60:54:d9:bf:41:62:
                    eb:ce:65:4e:cb:0d:c8:8f:02:2e:eb:fd:f7:da:68:
                    b8:79:1f:67:05:c4:e6:ea:5b:c7:5a:6f:74:df:5a:
                    b3:9e:a8:6f:67:d4:f0:c3:61:8c:e4:8c:a7:26:b4:
                    fb:ae:bd:ac:f7:f9:bf:63:d3:00:c1:8d:fb:43:87:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:A5:DE:5E:01:51:59:7F:C3:97:D6:E8:A6:51:46:76:E9:54:82
            X509v3 Authority Key Identifier:
                keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5f:6a:05:b6:95:4e:64:47:08:8f:bb:e1:de:84:2d:17:df:
         16:ae:60:d2:4f:9a:52:b6:4d:ed:93:79:53:6d:16:74:63:9c:
         93:0c:ba:07:43:e3:b5:65:de:45:a2:1c:f1:f9:ef:c2:80:95:
         35:3b:e0:12:57:a9:dd:83:cc:ab:55:b7:1f:05:c0:e4:87:bc:
         32:73:3f:2e:46:de:43:02:40:20:48:8a:a5:6e:ba:bc:56:a4:
         19:b8:c4:69:bc:07:64:29:35:a6:56:99:6e:47:9e:85:5a:60:
         33:9a:3f:47:8f:70:c7:e1:fb:63:30:22:0d:c6:9d:99:22:a2:
         34:28:ba:24:f6:98:0a:60:bb:fe:26:2a:1f:33:48:6c:0b:cc:
         f2:67:fe:1d:39:c8:80:ae:df:46:8d:17:0a:3f:2f:42:7e:2d:
         30:6c:28:b9:c2:6f:c6:79:c2:c1:5e:bc:ba:65:a5:86:83:7f:
         a7:71:c2:a9:03:e6:59:b6:de:41:a0:f8:b8:30:09:ab:5f:b1:
         8b:1d:7a:38:3e:e4:5e:72:a4:9b:73:e5:60:cc:63:e1:82:15:
         eb:44:43:60:78:16:4c:ea:cf:09:9d:01:34:65:25:04:10:ca:
         38:c4:ef:8f:e1:58:90:57:d0:f1:46:f3:91:36:de:c1:c6:d7:
         93:46:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:50:31 2024 by rpki-client on console-fra.rpki-client.org