Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File:                     3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier:          WGtU8P9VzsTIRu/1jLq4Y7UHwPVdnJcbZ9xgTHgno6Q=
Subject key identifier:   B3:C0:B8:7E:C7:0B:9C:6C:3E:AB:58:F5:57:0D:53:E7:91:ED:F8:52
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer:       /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial:       01901B5817A1769DA49D2B8C03D3A101E315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number:          0926
Signing time:             Sat 15 Jun 2024 10:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:16 +0000
Files and hashes:         1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: 9n4cf4KyEM4f7IbX+gqoJQPaUDiZ/5pdfPS3lEig3cU=)
                          2: IVI6eXmvEdZhS51kPMGX3KPCXKg.roa (hash: 7p8MD2m9ICr+ncDOqOfs3Bt2eIaSl201DHjAsQIoYms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:58:17:a1:76:9d:a4:9d:2b:8c:03:d3:a1:01:e3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
        Validity
            Not Before: Jun 15 10:01:16 2024 GMT
            Not After : Jun 16 10:01:16 2024 GMT
        Subject: CN=b3c0b87ec70b9c6c3eab58f5570d53e791edf852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:4d:2a:b7:c3:cd:67:2d:e9:c4:d3:e5:39:
                    23:3d:c8:a2:35:ee:7e:b5:32:c6:18:46:7c:4a:ad:
                    49:78:14:34:b5:6a:18:de:5b:e0:e6:01:fa:0a:5b:
                    90:17:8f:06:3a:6a:59:d4:8b:b0:b3:c4:ad:06:5b:
                    fe:d3:6a:c3:03:7b:b2:c2:53:8c:67:34:10:10:e7:
                    0c:35:da:15:b0:55:25:94:5b:87:2d:63:ba:f7:cf:
                    f1:4c:73:0c:94:ae:09:35:9c:73:e6:73:12:f3:a3:
                    77:30:b1:db:ed:79:c6:b4:81:e5:89:cd:10:ec:36:
                    d3:e6:60:6c:95:fb:2e:7f:df:36:b2:0e:fd:8e:ff:
                    51:52:65:b5:7a:f0:e9:30:45:77:ac:f0:fe:19:84:
                    39:52:1b:19:15:b2:b0:ab:d2:f9:31:62:01:d6:56:
                    07:7d:ae:15:27:94:1a:a9:55:40:19:ea:6c:a2:71:
                    40:d0:2f:0b:14:a5:39:37:42:55:c1:75:da:d6:bf:
                    0e:44:7f:d0:40:5d:bc:4a:8c:d7:70:5d:8b:9b:f4:
                    38:d2:c3:d8:d1:36:28:05:3e:73:41:66:d6:8a:51:
                    b1:fe:b4:e3:0c:db:45:70:38:b0:43:39:d2:61:43:
                    cc:79:f5:1d:4f:8e:0c:b2:12:ee:db:a3:a0:2b:6b:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C0:B8:7E:C7:0B:9C:6C:3E:AB:58:F5:57:0D:53:E7:91:ED:F8:52
            X509v3 Authority Key Identifier:
                keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:38:ac:c2:ad:70:79:61:8f:60:33:73:6e:1a:80:b4:19:
         50:ea:fb:91:a7:d3:71:2b:97:6c:2e:a0:28:15:ef:fa:70:18:
         cc:5e:6f:9f:01:e5:a5:40:73:0f:be:80:6d:22:3b:5d:6f:7e:
         87:03:0a:84:11:82:58:8e:cb:c1:a4:72:c6:8d:06:b1:b4:99:
         d3:a0:2d:86:b6:12:57:5f:3c:43:13:6a:df:e3:ce:09:a8:7b:
         f3:1c:71:3d:f3:67:0f:66:56:3b:a8:fe:12:2d:69:9d:4c:09:
         2a:d9:48:98:b7:93:52:57:6a:96:a6:b5:a9:71:0e:e6:e7:ff:
         65:75:4c:7d:30:71:19:b0:52:dc:f4:1a:17:37:f3:c3:c3:5e:
         eb:b7:00:65:02:c5:ee:2c:62:8e:42:40:e0:0b:26:18:ca:9b:
         03:bb:ec:40:3a:5c:d1:a5:2a:39:0c:74:9b:5b:29:85:61:92:
         d1:73:42:3a:b4:2f:05:b1:65:24:0d:e9:13:10:f0:4b:33:aa:
         72:d4:12:5c:bd:b8:1c:4e:25:94:3f:94:2a:01:07:61:ec:17:
         68:38:34:80:44:03:31:bb:c2:c4:ab:1f:ec:f6:14:85:b5:bf:
         6f:c4:44:c8:d6:0e:a3:e8:0e:09:b9:6b:26:e9:0d:29:af:be:
         5e:d4:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:14:46 2024 by rpki-client on console-ams.rpki-client.org