Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File:                     MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier:          zlAxaPeGWEGUaGHs/GxN5SKWDkKrj23XogRU0n18SPw=
Subject key identifier:   39:7D:B3:BC:ED:AF:A0:B8:59:22:33:A4:97:11:FF:5B:94:B7:5E:C1
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer:       /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial:       01901EC6CAF9E2A7603426DD2247DE596946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number:          65
Signing time:             Sun 16 Jun 2024 02:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:02 +0000
Files and hashes:         1: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: lwMPUsWJKMDYntW4olYYVc2UK0y/XXU/3qiNijpe+RM=)
                          2: jnJgRFUL036FeLdUsrotQ_jirqc.roa (hash: OPOhR/BGE1WudySqhheQra83kKfkhY59/lfoyzI2OEU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:ca:f9:e2:a7:60:34:26:dd:22:47:de:59:69:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
        Validity
            Not Before: Jun 16 02:01:02 2024 GMT
            Not After : Jun 17 02:01:02 2024 GMT
        Subject: CN=397db3bcedafa0b8592233a49711ff5b94b75ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:24:1f:4f:a9:df:eb:96:03:7f:3f:c1:d3:
                    5b:2a:20:11:a4:0f:14:55:3e:13:19:06:1f:3e:b0:
                    b5:49:b7:0b:93:3e:d9:77:61:97:d6:0b:37:31:a8:
                    22:dd:6a:74:fc:b1:62:f6:5d:e6:95:c4:84:69:db:
                    15:64:a9:4e:b6:8a:91:62:00:1a:3f:29:47:a3:70:
                    f3:a5:10:9e:ef:d9:a4:72:7c:82:4b:5a:9f:d7:ce:
                    df:db:b8:b1:67:ab:46:63:9e:99:8f:e6:5c:a1:5b:
                    27:71:95:15:cb:14:5c:0c:e7:b5:cb:4a:e1:b6:92:
                    26:66:04:88:ce:2b:4a:3f:95:1c:61:ca:81:0f:3c:
                    3b:ce:8d:24:95:21:bc:bd:03:22:dd:52:d0:da:a5:
                    8c:2b:aa:27:13:fe:e4:ed:7d:04:eb:8f:80:c1:b0:
                    57:49:60:de:a3:99:10:18:7e:97:6b:95:35:06:a8:
                    b2:6d:58:46:1c:9e:a5:af:47:0e:00:93:30:50:3b:
                    25:a7:6b:e3:20:3d:32:ec:f2:28:bd:3f:61:f2:f3:
                    98:29:07:96:c4:9d:42:b4:b6:12:87:a8:f2:93:11:
                    00:d8:a3:da:79:7e:6c:f1:2f:16:35:b9:1e:df:98:
                    07:43:b5:2d:29:4b:39:2e:fe:e2:d5:0b:1a:9c:78:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7D:B3:BC:ED:AF:A0:B8:59:22:33:A4:97:11:FF:5B:94:B7:5E:C1
            X509v3 Authority Key Identifier:
                keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:7f:33:0a:94:33:98:8f:f9:4d:65:4b:fa:1c:15:d1:1e:
         f4:49:d9:20:59:ac:15:ed:6d:4d:f0:75:0c:6b:82:b9:9d:7e:
         f2:25:d4:ab:6f:35:af:b2:23:64:13:44:76:ab:b8:d4:96:f7:
         48:83:31:e3:37:79:78:d9:de:b4:f8:b9:00:5d:ff:9d:fc:1b:
         12:13:12:8f:74:97:7c:df:62:d4:92:49:25:4c:cf:08:1d:b6:
         f0:f6:f5:62:7a:b5:2a:a1:f5:65:7e:0b:84:f5:af:60:ec:c8:
         26:c5:8a:20:67:dd:89:c9:5f:6e:74:f2:07:a6:f2:e9:a7:f5:
         33:27:39:85:85:df:79:2d:7b:35:c1:9e:55:18:d4:21:f2:5b:
         2e:3f:14:d1:f4:4c:9a:d4:3f:b8:72:e5:44:44:a3:ca:00:0a:
         99:f8:02:6f:93:ac:e0:08:6b:b7:04:a9:1d:2d:ed:62:80:31:
         92:67:79:0e:32:8c:46:82:e5:33:83:21:73:b8:78:d6:43:94:
         11:a0:83:4c:a7:73:57:a0:77:fd:f8:f3:90:b4:78:5a:fa:e4:
         f0:ff:28:3d:ae:d7:91:10:44:6a:f4:70:31:61:46:4d:33:d8:
         f0:6d:62:7d:91:ba:09:32:fc:e2:9d:b4:e6:4b:e9:64:79:95:
         a2:d7:0e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:09:07 2024 by rpki-client on console-ams.rpki-client.org