Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          DVksWwejlMEi28zxyH9X936Pza+KqW5+6O0C03yj4+4=
Subject key identifier:   80:0F:CA:B9:C7:45:38:06:6D:E2:24:65:8C:43:54:56:C8:88:BA:BC
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       01901CD81686E86312282C247E5B99F44BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          023D
Signing time:             Sat 15 Jun 2024 17:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:41 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: TYpxKfyW1ekG4JJaiTLZ7CqyB4NNGK8765qdBKG0XPc=)
                          2: RkhJ3n2h0nJIWlzUM7_t-qIo7Q4.roa (hash: KmCTVD5UBt7KfQaE8+YkUbkuISe+2RJNU8pPPRIfPv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:16:86:e8:63:12:28:2c:24:7e:5b:99:f4:4b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: Jun 15 17:00:41 2024 GMT
            Not After : Jun 16 17:00:41 2024 GMT
        Subject: CN=800fcab9c74538066de224658c435456c888babc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:71:32:1f:b4:24:0c:f8:c5:ed:89:eb:8f:94:
                    46:f8:f0:50:f9:ac:c7:18:62:4b:e4:5a:42:8c:f0:
                    7e:8a:53:fe:af:5b:a8:69:90:ac:e8:3a:b4:d1:3f:
                    58:79:98:c0:c9:2b:95:d0:fe:54:d8:7b:09:71:b5:
                    64:89:b6:fe:51:da:fb:1a:09:6f:a5:b5:c6:bc:e0:
                    34:a4:41:92:e5:b3:85:31:55:2a:56:6c:5c:64:10:
                    06:b6:ad:0a:1e:93:ec:d9:ee:19:9e:a6:bd:fd:7b:
                    e8:df:39:90:1e:1a:73:20:58:59:b3:dc:d5:5c:b4:
                    07:b8:e0:6e:90:89:64:0a:ad:ca:34:87:ca:82:52:
                    8c:4f:5e:90:70:42:7b:a5:22:26:55:32:b1:2d:aa:
                    ee:7a:8e:c5:30:de:ef:00:a9:c2:1b:67:6b:83:9b:
                    3e:51:5c:16:ee:74:9e:ca:3b:3c:86:91:51:e2:d3:
                    cb:fd:c1:09:3f:5f:8b:b3:45:6d:35:40:41:a0:bc:
                    51:70:8b:87:0c:3a:04:51:ec:2e:3d:fc:69:40:91:
                    18:0b:9a:dc:88:ff:08:e5:bb:90:4e:0f:8d:5c:66:
                    9b:0b:71:70:c8:8c:aa:9c:5f:e5:2d:1f:19:1b:17:
                    e0:8f:2f:bb:53:1a:9c:d0:90:bc:3e:7d:83:60:05:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:CA:B9:C7:45:38:06:6D:E2:24:65:8C:43:54:56:C8:88:BA:BC
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:42:5b:03:50:83:2a:10:11:5c:e9:c2:d0:87:69:a3:53:13:
         25:39:80:a5:ed:1c:7d:ee:bf:71:63:72:28:7f:83:de:1a:7f:
         16:2d:a7:73:f0:e5:1c:08:99:71:c7:c4:a2:30:35:ac:04:9e:
         93:83:ee:d0:aa:f2:a1:95:2e:25:60:b1:16:35:f2:a2:fd:4d:
         cd:39:c6:89:71:a4:ac:da:b4:c9:81:fd:6b:81:11:e2:38:1a:
         06:0c:de:d0:e1:96:3e:90:82:56:db:e8:2b:73:f2:47:22:09:
         2c:7b:76:08:fa:7e:57:cc:ad:62:6b:2a:47:1f:f0:d1:e2:bf:
         7d:f7:69:8c:42:49:83:53:fa:db:25:77:1a:ba:2e:d8:98:53:
         c5:a8:5f:45:cc:f8:9e:ad:8c:43:8d:04:e6:de:ea:e8:9c:e9:
         fd:12:52:e1:2e:da:9c:6b:f6:17:b1:ad:a2:56:7e:fb:55:35:
         f4:df:f2:4b:6e:e9:8b:0e:30:b9:63:fd:ba:6f:50:75:7c:2a:
         fe:a8:56:52:9d:d2:f1:a0:33:f9:09:44:ca:fd:b2:38:8d:db:
         3d:f3:9e:ae:c2:6a:5d:10:81:40:70:84:47:51:d2:a9:65:9f:
         94:b4:ad:95:3c:42:38:b5:96:6b:99:ba:b0:84:cc:98:85:01:
         89:9d:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:04:54 2024 by rpki-client on console-ams.rpki-client.org