Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File:                     Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier:          qRja8G1VeveKZXE0wMXvqIWJhxoQ7pG20EAck+6IOxI=
Subject key identifier:   D1:44:DC:E9:81:D3:CD:F6:37:A9:4C:F5:F9:53:6A:09:DB:C5:B3:39
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer:       /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial:       019040ADEC332CD476C2A451C5ACB9F306BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number:          024E
Signing time:             Sat 22 Jun 2024 16:00:58 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:58 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:58 +0000
Files and hashes:         1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: Zzg9562wxUX2DanfZJZ6VQFyTWW6UUan8sF2eAmrino=)
                          2: N3BSvwymwwAQikEYeLwRZ2gS90c.roa (hash: qxO8VQNTFHjO2xAc9UrdJwyL3tSgO4M0Z0q+42HMBiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:ec:33:2c:d4:76:c2:a4:51:c5:ac:b9:f3:06:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
        Validity
            Not Before: Jun 22 16:00:58 2024 GMT
            Not After : Jun 23 16:00:58 2024 GMT
        Subject: CN=d144dce981d3cdf637a94cf5f9536a09dbc5b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:3d:9e:f7:2e:dc:4b:c1:d4:e3:85:af:00:
                    d2:2a:d8:84:f1:55:11:8d:d6:74:75:d9:6e:74:f3:
                    85:4b:a4:2e:0c:62:1e:be:9a:4a:18:cb:34:86:2e:
                    be:76:a7:83:1f:aa:6e:a9:7d:0d:bb:5d:5a:f4:1d:
                    9d:fd:5b:8c:4a:ef:c3:47:bf:76:e3:d0:37:82:20:
                    58:f9:ec:1b:0e:4c:0b:fd:74:a0:b2:f1:53:37:f5:
                    97:e6:9c:73:13:4c:88:a7:27:9f:2b:12:ae:6e:52:
                    5d:24:e8:e8:6c:f1:ba:ec:42:2b:2c:15:91:7b:04:
                    92:e8:21:e7:c2:3d:02:56:68:b4:74:ee:78:27:68:
                    7d:22:13:ff:5d:50:df:3c:de:d4:56:24:89:83:d5:
                    00:c0:cc:10:64:ec:30:32:48:9d:03:11:26:22:f7:
                    87:b3:85:2d:73:3a:34:90:77:63:17:76:3a:22:34:
                    17:fa:61:ec:98:df:da:bd:2e:5b:46:a4:f3:c9:3e:
                    40:c8:ba:90:6c:9f:23:d7:bb:18:40:55:bf:c4:e1:
                    4e:b6:f8:9b:15:34:8d:59:cb:3c:8f:f5:de:89:f2:
                    1d:b8:4a:8a:31:6c:d8:21:63:40:23:ca:80:ac:f0:
                    4a:eb:1a:bb:c6:72:c6:d9:f4:58:0d:4f:db:80:8a:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:44:DC:E9:81:D3:CD:F6:37:A9:4C:F5:F9:53:6A:09:DB:C5:B3:39
            X509v3 Authority Key Identifier:
                keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:37:8b:43:89:4a:52:dd:98:e4:7c:43:d2:23:ce:a9:7d:ab:
         45:48:20:16:b6:32:25:44:db:1b:d3:63:25:9e:c5:83:65:27:
         fc:34:04:e4:02:3c:c3:ec:5d:3b:73:65:a5:1f:4a:60:16:35:
         bd:c3:68:67:ef:21:f8:a1:c6:f2:2b:6a:67:b8:0e:f6:0d:ab:
         58:48:f2:4b:88:55:8c:b4:a3:cb:00:a7:8c:2f:7d:7a:a9:f3:
         1b:8c:5a:ec:d2:52:86:d6:c4:7b:5c:be:33:4b:6c:2a:61:59:
         b9:10:c2:78:ae:29:cf:f3:ea:af:3d:db:21:30:8c:e8:5e:7a:
         0a:92:00:c7:91:f8:5e:d2:7c:21:3f:70:07:d6:8d:ff:21:ae:
         1c:ae:bf:11:d4:e3:be:d2:e0:e0:6b:5d:57:e0:f5:8d:30:dc:
         5c:5a:6c:ef:03:d3:27:87:f8:2d:29:9f:6a:72:8a:26:fe:5b:
         51:5c:86:30:4d:19:6c:a4:be:42:e1:99:11:a7:e4:3f:b5:b1:
         30:b1:b9:28:3f:5e:54:73:4e:f9:12:6c:30:84:f3:ed:6c:58:
         80:58:38:24:6d:b9:6b:e1:44:36:01:14:3f:8f:12:c8:bf:df:
         e2:77:63:fc:38:9c:ae:4e:62:4b:6d:7e:ad:1b:e6:59:bc:9a:
         a9:40:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:47:20 2024 by rpki-client on console-fra.rpki-client.org