Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File:                     3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier:          C7m24JExmDtXWWnr5cf5EA9ZrZj6Wn2OOaw0WZ7MFIo=
Subject key identifier:   FB:6A:4F:62:7B:AE:B6:10:D1:EF:00:01:79:3A:3D:1D:18:5C:0E:72
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer:       /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial:       01901DED0147EDE91754311912076F15D05A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:09 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:09 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:09 +0000
Files and hashes:         1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: 0eos1sOdDcVoJx5efmWYdNt6gb+gxe4sTG+fhpRwaqQ=)
                          2: ekwLAwwRwqFKJgoaIS_Xa1lUb3E.roa (hash: kp6AvqDzVHjlEeaoQ9+y1Xu3SqJsppEKJ2qJp+1GnZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:01:47:ed:e9:17:54:31:19:12:07:6f:15:d0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
        Validity
            Not Before: Jun 15 22:03:09 2024 GMT
            Not After : Jun 16 22:03:09 2024 GMT
        Subject: CN=fb6a4f627baeb610d1ef0001793a3d1d185c0e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:b9:8d:9f:3c:8f:ce:e1:3f:54:9f:3f:a5:
                    30:79:4d:ea:f6:16:15:e3:af:d3:b6:65:49:03:6a:
                    eb:32:03:9c:7f:02:d6:f7:ce:6f:35:0b:2e:79:86:
                    f9:65:91:85:1e:c3:42:26:e0:43:c8:21:a3:bb:8b:
                    7a:2c:79:ef:82:99:60:52:e6:a8:59:0b:51:bb:6a:
                    8a:f5:97:fd:6c:38:03:83:65:c1:6d:d0:d3:94:ae:
                    34:03:63:f5:7f:d0:33:8b:1d:6e:51:8b:99:33:17:
                    5f:36:d5:ce:6e:ff:59:08:29:c5:46:7a:4b:fe:73:
                    c6:98:13:81:a4:89:a6:84:63:e2:3f:1f:dd:96:7f:
                    ec:78:a0:d5:b1:b0:57:47:f2:bc:d0:2b:71:b7:44:
                    ac:10:79:d3:51:31:84:af:3f:e8:37:7f:10:49:bf:
                    97:06:ee:88:22:68:56:b2:6a:96:83:93:56:32:56:
                    31:12:12:8c:4d:b9:45:73:a9:1c:81:6a:01:df:7e:
                    68:1a:27:0f:39:d8:eb:c5:20:8f:1d:28:bc:0b:0c:
                    b7:d9:c1:bd:9b:1e:ac:46:d8:1b:60:3f:be:59:71:
                    fa:aa:02:05:38:ea:ac:ed:a8:b0:38:73:dc:bc:64:
                    bc:9b:a0:bb:c6:9d:df:fc:5a:3c:e6:8a:e8:5c:7a:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6A:4F:62:7B:AE:B6:10:D1:EF:00:01:79:3A:3D:1D:18:5C:0E:72
            X509v3 Authority Key Identifier:
                keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b9:00:8e:6f:45:43:2b:21:f3:4b:19:85:3a:8f:00:6e:19:
         96:a9:61:e7:ae:79:5d:e0:76:74:f2:0c:8e:e3:71:1b:5b:32:
         43:cd:92:46:97:71:a6:08:29:63:16:40:fb:dd:a5:17:58:a2:
         70:72:3d:3c:d0:25:c4:a8:f0:af:08:1c:e8:da:2a:65:ba:ed:
         82:a6:f1:00:3d:41:9e:1d:ba:e5:59:9d:03:de:bd:df:cc:f0:
         c9:48:d6:40:99:da:5e:56:6b:ce:9b:20:ee:7f:11:77:6d:35:
         5d:36:a3:44:bc:4b:bd:a0:73:01:85:79:9c:fc:92:d5:6a:01:
         00:7b:2a:58:ea:f2:83:f3:a0:d7:50:5b:8a:eb:76:28:0f:28:
         fa:d9:4a:04:9f:0c:ad:e9:6f:c3:60:88:f6:b0:47:e7:58:71:
         1d:4e:30:09:17:89:fa:11:e1:eb:3e:04:3a:38:5b:7f:16:db:
         c1:b6:94:36:91:4e:e1:e0:ca:5d:0d:bf:5e:63:7f:b3:62:c5:
         d5:ac:c0:74:92:38:fa:ac:da:e7:92:2e:23:d4:12:58:9f:4d:
         c3:a3:56:a4:fd:ae:c4:72:75:20:51:73:34:a0:69:fe:3a:7f:
         3a:81:d9:0b:d6:85:15:f9:00:13:fc:9d:3b:17:ea:79:d2:57:
         45:40:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:54 2024 by rpki-client on console-fra.rpki-client.org