Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File:                     MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier:          Ej0GdgBapcah0x+y7CW1isPQwb1rH3cvp+KAMdZHaaI=
Subject key identifier:   E0:68:5E:F9:42:55:AB:24:5E:9A:91:8C:8A:BF:D0:32:41:1A:9A:3F
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer:       /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial:       01901D0F065FCD55298F8C81D4C86F32051C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number:          0400
Signing time:             Sat 15 Jun 2024 18:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:42 +0000
Files and hashes:         1: 28OO9taqdWuX45D1xybj01oToFM.roa (hash: NxqGPafne14RJjajYnYOjLNt1wR9c5mCTzWiNCVcxIc=)
                          2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: Se1PfSOoV2cPWUK+0GJdH1AoA5E9NAZ6/asq7GQ7WyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:06:5f:cd:55:29:8f:8c:81:d4:c8:6f:32:05:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
        Validity
            Not Before: Jun 15 18:00:42 2024 GMT
            Not After : Jun 16 18:00:42 2024 GMT
        Subject: CN=e0685ef94255ab245e9a918c8abfd032411a9a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:6a:a8:53:c2:3c:4d:d5:aa:35:fa:13:0d:
                    6c:7c:1b:18:23:bd:08:79:ea:e9:5e:16:9c:f4:fe:
                    66:65:55:d1:d3:34:85:e0:84:38:58:f2:7b:42:bf:
                    69:fe:a1:a6:09:a7:38:00:d3:20:da:bc:3d:a8:2c:
                    77:1f:c8:25:76:77:a7:b8:b5:5b:88:e3:a7:c0:26:
                    14:4e:30:2c:19:9d:d9:91:a8:42:fb:d8:0d:68:39:
                    32:83:09:e5:40:cf:36:7b:bf:53:87:f0:68:89:11:
                    45:74:b7:0e:10:9a:0c:4c:e2:08:d0:94:e7:dd:97:
                    b6:ae:8d:c4:ff:70:b9:29:43:d8:b8:c5:d8:89:64:
                    59:88:a8:a6:fb:46:75:89:da:61:0c:02:cf:fd:a7:
                    c8:19:c4:06:df:04:05:1c:a2:a2:21:f4:48:2d:41:
                    4b:24:d1:af:cc:d1:4c:87:59:f3:d3:e1:6f:d2:52:
                    4b:84:6d:78:0b:8e:31:2f:2d:43:45:44:07:99:a1:
                    40:ef:d8:de:b1:f1:c8:1c:3f:1c:78:fb:5c:b4:2d:
                    90:c6:48:8a:fc:4e:e6:4a:35:48:d5:d4:04:74:47:
                    a7:24:78:a8:53:40:8a:81:ae:45:41:ae:41:30:78:
                    12:3d:bc:91:b0:83:f3:56:b4:1c:7f:f7:e6:21:80:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:68:5E:F9:42:55:AB:24:5E:9A:91:8C:8A:BF:D0:32:41:1A:9A:3F
            X509v3 Authority Key Identifier:
                keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:74:4c:dc:ea:79:a1:b4:e2:5d:82:88:96:a9:ee:85:25:6b:
         56:25:7c:33:a4:be:1d:81:8e:d0:86:5f:bf:8d:25:68:44:6f:
         91:97:7d:c6:be:a9:0b:b5:17:98:95:84:f7:22:be:0a:b9:bf:
         71:5f:f2:10:40:7d:eb:34:a4:03:f3:6e:fd:5b:3f:7b:44:5e:
         24:0e:2d:c1:c2:68:67:ba:87:8f:7c:a3:72:b8:d1:32:f6:bc:
         62:81:c0:35:d1:f9:07:95:a5:6e:b4:12:95:d6:05:14:08:5a:
         b1:0f:01:75:57:69:54:6f:a9:4c:87:97:48:89:f6:8d:b8:29:
         b0:b8:a8:bb:5e:a9:6e:86:f1:8a:7f:e0:46:11:57:19:18:15:
         0a:36:7d:a4:8d:c6:6e:42:86:c9:1c:08:2a:b3:14:ab:3f:07:
         41:68:bb:1d:4d:47:a9:87:e4:43:b4:e2:c9:fd:c7:37:d2:4d:
         b8:d1:f5:25:8e:62:60:21:6c:a9:c7:4b:c6:2b:52:c2:4b:d6:
         5d:45:46:96:4e:53:bd:17:0a:cd:b4:76:1f:23:fa:7d:95:e1:
         31:62:52:bf:69:0c:2c:47:0b:fe:b5:64:c3:66:83:4c:11:66:
         02:52:c7:7c:ac:67:c6:6c:a4:dd:4d:9f:34:6d:5c:51:a1:f9:
         16:22:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:55:09 2024 by rpki-client on console-ams.rpki-client.org