Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
File:                     3edtMFKVeG1Q5jSpan25PzEWzNc.mft (raw, json)
Hash identifier:          VAmhNNhwiAvbHtZIQH0BvCIU4yXSLGGA6S9yVZ1700Q=
Subject key identifier:   3E:2A:2E:DB:B5:36:97:80:87:12:63:BD:B9:21:0D:65:B3:68:02:6A
Authority key identifier: DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7
Certificate issuer:       /CN=dde76d305295786d50e634a96a7db93f3116ccd7
Certificate serial:       01901DED88822B731C061856EE89E92BF1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
Manifest number:          02E7
Signing time:             Sat 15 Jun 2024 22:03:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:44 +0000
Files and hashes:         1: 3edtMFKVeG1Q5jSpan25PzEWzNc.crl (hash: lVI0clSQw447XPK45MrB2IBayY6oleetS/BFCXyUXls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:88:82:2b:73:1c:06:18:56:ee:89:e9:2b:f1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde76d305295786d50e634a96a7db93f3116ccd7
        Validity
            Not Before: Jun 15 22:03:44 2024 GMT
            Not After : Jun 16 22:03:44 2024 GMT
        Subject: CN=3e2a2edbb5369780871263bdb9210d65b368026a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:3e:fe:c5:95:5c:30:11:08:89:bc:56:c1:
                    d0:33:2e:7b:b7:7f:63:c6:da:4e:77:1a:6a:ad:44:
                    37:ce:da:28:ef:0f:a1:a1:a2:a5:e6:80:2a:b8:55:
                    27:53:46:d0:98:4f:71:d7:3d:3c:d0:60:ad:67:d8:
                    0c:b2:ba:8e:ef:2c:28:aa:8a:8a:b7:16:2a:06:04:
                    23:d0:a7:ec:25:a8:2b:05:87:db:06:cf:27:f0:68:
                    2e:7b:c2:0e:c9:86:91:05:68:b2:2a:ce:8d:cc:ff:
                    5e:f4:f4:af:42:4b:f6:ca:5f:f5:77:b2:af:f4:f8:
                    fb:56:25:dd:ac:02:04:7f:a9:03:95:42:f2:a5:5a:
                    13:a1:fb:63:ef:3d:10:1b:ef:88:9d:e9:5b:46:b3:
                    5b:1a:1b:1b:e6:1a:27:3b:64:fe:15:d3:03:46:a7:
                    d5:9b:95:0f:1c:5f:49:5c:b8:48:1c:94:aa:ef:bf:
                    84:22:3a:15:7a:d6:85:39:ac:42:4e:8f:c5:56:7a:
                    fc:2a:c7:85:b1:e1:e8:3c:7b:02:c3:54:55:6a:73:
                    7a:7b:14:ec:a9:e9:8b:9b:b5:e7:ab:17:20:65:fc:
                    52:5f:34:64:c8:8a:ca:04:eb:57:c0:67:ca:3e:87:
                    01:b3:b8:e7:35:11:59:05:49:b1:3d:54:a1:d9:02:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2A:2E:DB:B5:36:97:80:87:12:63:BD:B9:21:0D:65:B3:68:02:6A
            X509v3 Authority Key Identifier:
                keyid:DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:65:99:a2:8b:74:f2:a5:7c:0a:00:89:7b:5f:58:23:8a:14:
         7a:f7:8d:1e:22:f2:4b:d7:45:4b:56:03:c7:38:b5:d7:3a:6d:
         18:46:74:2b:8d:4a:a6:4b:2a:4c:d7:bc:68:18:bf:55:15:df:
         c5:87:5e:af:62:b4:db:58:cc:99:74:5e:62:e6:96:39:4c:08:
         b7:f2:00:91:30:6e:c0:c1:10:c5:eb:a5:14:14:81:49:80:6e:
         21:22:8f:22:ab:b0:27:e2:c7:33:fe:3a:c0:67:e2:49:fa:0c:
         9b:c4:8c:b9:ca:b3:57:2d:83:4f:e6:6f:a8:4a:c0:e5:18:e5:
         8b:b0:00:f5:25:e2:d4:c5:fb:56:a4:22:a7:dc:06:3b:5a:9a:
         26:60:50:58:26:b8:b0:c4:d5:b0:0c:ad:57:70:2d:8a:50:4e:
         cd:16:76:1f:c5:0d:0e:7f:a8:d4:b9:5a:92:85:0b:c7:ac:75:
         b0:54:16:cc:38:1c:6c:f6:28:67:a3:11:5d:51:fe:b0:9a:2f:
         2c:f0:8a:5e:71:6c:67:1b:41:a8:bd:10:b8:7f:83:6f:10:a8:
         bc:ba:42:09:32:fe:a8:84:90:be:63:0a:5d:4d:42:52:9f:b8:
         c5:ec:32:39:a2:7b:13:60:cd:dc:8d:5c:11:b2:ae:74:92:40:
         1c:c6:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:21 2024 by rpki-client on console-fra.rpki-client.org