Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File:                     3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier:          R4lWowfwe4+tS0FHKBSOUxSgoBmv/Yomsa+U59JanNw=
Subject key identifier:   E3:AC:82:0E:19:E7:25:0B:6C:4A:DD:5B:CB:0E:2E:5C:52:2B:04:A4
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer:       /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial:       01901DED72FBA7A2B7733B1639F2311432DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number:          1044
Signing time:             Sat 15 Jun 2024 22:03:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:39 +0000
Files and hashes:         1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: 579vODh1g3W8cy9VHdrpvS+2KYGG2dWUgq8/4QXluig=)
                          2: lsAyzCphbEUIPNN-rbDSf7AdbxQ.roa (hash: pw3vzQAn5UZydG9onYXOW74FA/BONOF1cyhfmpCv3yc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:72:fb:a7:a2:b7:73:3b:16:39:f2:31:14:32:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
        Validity
            Not Before: Jun 15 22:03:39 2024 GMT
            Not After : Jun 16 22:03:39 2024 GMT
        Subject: CN=e3ac820e19e7250b6c4add5bcb0e2e5c522b04a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:77:75:e6:b8:77:72:73:39:81:29:72:95:
                    be:5b:53:5f:ab:b5:b8:9f:7d:93:67:0b:3e:05:be:
                    53:5d:08:e2:4f:67:e1:4a:2b:d4:5b:fd:46:1b:f0:
                    c0:4e:24:20:70:31:47:d1:61:f5:18:02:33:3d:ad:
                    02:6f:f9:1a:ed:dc:ef:c9:5b:9a:d3:01:ea:f3:87:
                    4c:d7:66:61:a7:a4:1b:cb:06:c8:7c:9e:68:97:99:
                    66:c6:e9:48:c6:26:03:db:28:f4:2f:52:6b:3a:cc:
                    8d:5d:03:33:20:57:14:71:0c:a0:f2:3f:fb:7b:fe:
                    8a:6e:9a:be:0d:8d:40:0e:a9:e6:b6:5d:43:54:73:
                    08:9c:b4:66:f1:80:5a:75:6a:c3:d2:59:c9:7a:ad:
                    be:5d:df:1e:d1:14:c4:f1:82:79:68:27:5f:9c:f6:
                    6c:f3:1a:58:12:a9:71:5b:ea:a2:da:55:28:a0:58:
                    9f:d6:72:f7:fa:48:90:df:9f:ff:57:3f:ed:f9:4f:
                    70:75:a5:dc:5a:e4:da:d7:0d:b2:9f:ee:09:96:c8:
                    78:9f:58:c9:8a:3a:ba:65:d7:3b:a9:8e:49:f6:7d:
                    24:de:e7:39:04:8c:66:7f:bd:f2:d7:9d:88:47:73:
                    0f:2b:1e:24:58:fc:1b:32:40:c7:00:43:89:bf:08:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AC:82:0E:19:E7:25:0B:6C:4A:DD:5B:CB:0E:2E:5C:52:2B:04:A4
            X509v3 Authority Key Identifier:
                keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:21:65:71:36:0c:3c:1a:68:84:0a:af:70:2c:ad:20:5a:
         64:fa:9f:52:da:99:e6:a8:ea:aa:e9:02:89:bc:4f:48:8f:5b:
         29:21:96:97:89:62:24:61:e2:87:6b:b1:af:e7:e8:2c:20:72:
         60:92:d2:9e:d7:d6:7d:5b:1a:0c:05:f8:e2:49:e7:3b:e6:5a:
         ab:72:66:b1:bf:12:42:cf:39:8e:65:cc:b6:eb:54:b2:4c:ab:
         53:ce:87:2c:13:a6:0a:5a:d9:77:1e:37:d3:65:3e:52:49:49:
         86:6b:b6:ba:8a:5d:59:f2:45:c6:78:f5:77:53:11:34:f4:cb:
         ad:8f:08:87:06:43:4a:01:18:b9:f0:17:97:15:b2:3d:cd:3d:
         7f:54:28:16:2d:0b:af:db:ca:11:34:c7:d9:ac:5b:5a:c6:04:
         fe:c0:cd:80:b6:43:16:98:11:3a:95:b7:98:87:83:90:fb:63:
         56:b4:1e:b6:ab:a3:a3:ac:2f:54:d4:9a:e9:b6:69:23:75:67:
         5e:01:35:4d:03:7a:ca:0c:f1:4b:ce:07:fa:b9:80:75:d1:1a:
         bc:38:3c:16:09:7d:89:cd:29:65:5f:b9:4e:e0:04:55:33:45:
         5d:c6:67:cd:e9:82:81:0c:92:a8:8c:ad:ec:c9:fa:14:43:6e:
         96:e4:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:01:12 2024 by rpki-client on console-fra.rpki-client.org