Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File:                     1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier:          UhGet9x9KkqNHys1GyVUWZkeAEyLBXSCQ+iGjzBhbDU=
Subject key identifier:   6C:3C:E6:43:D0:49:58:B6:FA:01:38:EE:44:A9:0B:DD:58:75:27:10
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer:       /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial:       01901D461090B3EEA5719FA3632C4280BF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number:          070C
Signing time:             Sat 15 Jun 2024 19:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:49 +0000
Files and hashes:         1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: hmgqmF0QrBrQob9vS4MTOiu5dvsmk9BmfhX7DMt7bI8=)
                          2: aFtYd19mLo1XewR0mMMx5qRQayw.roa (hash: B1BMuQ367J1JrdVH+sEyccOwS63MilgOaXsdtE8aVrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:10:90:b3:ee:a5:71:9f:a3:63:2c:42:80:bf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
        Validity
            Not Before: Jun 15 19:00:49 2024 GMT
            Not After : Jun 16 19:00:49 2024 GMT
        Subject: CN=6c3ce643d04958b6fa0138ee44a90bdd58752710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:6d:20:f3:3a:73:17:66:f8:7a:17:fe:78:
                    9b:a4:18:53:1d:ef:ea:c1:c1:c8:0d:bd:29:47:72:
                    40:19:1f:27:78:19:df:e1:f1:a3:84:4a:2d:00:4a:
                    c7:fe:07:07:c3:12:50:09:cc:96:3f:f3:98:d0:41:
                    9c:1d:fc:7b:08:ad:07:4e:a2:87:a4:97:db:a3:7c:
                    9d:53:bc:5b:04:fc:74:68:00:1d:86:b1:6c:57:55:
                    38:74:0e:2c:4a:84:cd:33:b1:4b:af:3a:10:0b:f1:
                    78:df:a3:fc:4a:0b:8c:4b:16:ed:41:d0:50:e5:bf:
                    36:5d:db:ce:41:75:3e:ad:31:8a:e3:34:22:2d:33:
                    57:68:97:d0:98:ae:5f:92:f0:f9:26:a2:b7:72:1d:
                    5f:29:f2:97:36:53:16:d2:af:0b:96:0b:8c:1a:66:
                    4e:e1:54:b4:01:bf:9f:9a:24:ac:7b:db:67:69:3c:
                    5f:37:67:9a:26:94:34:51:22:7c:10:d2:9f:f0:44:
                    af:8a:7c:94:d2:d1:2a:30:ac:3b:99:9b:37:80:39:
                    d1:55:c7:13:ff:51:2c:e0:b3:10:ca:9c:21:93:ee:
                    d8:16:12:fa:47:61:0f:0c:ff:51:b3:ae:bd:51:5c:
                    9f:53:cd:9c:99:d5:27:55:05:96:59:8c:05:7e:ca:
                    4e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3C:E6:43:D0:49:58:B6:FA:01:38:EE:44:A9:0B:DD:58:75:27:10
            X509v3 Authority Key Identifier:
                keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:b7:f3:60:da:e4:53:e8:60:2a:be:69:91:1b:1d:aa:9a:
         c8:e0:e6:7b:e5:76:e9:2d:33:ad:b8:9c:b0:71:79:45:f3:4d:
         16:0a:75:ff:52:cf:b5:dc:1b:bf:f3:b9:53:4c:ff:a9:89:9e:
         99:28:59:5c:a7:48:53:b2:72:55:0f:5d:d8:cf:67:f7:23:37:
         53:bd:05:63:d2:e7:c2:47:07:dd:21:99:48:30:fc:0d:cb:47:
         b0:d0:96:09:fe:f8:b4:39:41:b3:f1:e2:2f:43:12:f0:83:c1:
         0b:32:eb:60:93:17:18:a7:4f:6a:02:e2:5d:7b:8f:e7:3d:00:
         7b:b0:b6:b9:3e:be:e2:20:82:7c:51:bc:1b:f9:f6:c8:89:35:
         3a:50:ba:4d:ad:b6:bb:25:48:7e:d9:ef:90:41:4d:7e:87:2c:
         ef:8b:62:1f:52:07:b9:4a:e6:0b:f1:6f:48:e7:5b:a5:93:24:
         56:c9:a0:4b:ff:16:58:c1:a5:e4:21:fd:16:68:1b:5c:db:9f:
         91:a6:e5:16:fd:c5:fd:71:d2:f6:44:11:63:9d:da:1b:15:ee:
         8d:e5:90:2f:90:4a:32:78:a3:72:4f:0b:ec:af:d7:fc:86:80:
         48:6d:66:65:ea:15:27:76:ae:8d:38:ca:98:fd:f5:a0:30:c7:
         26:1e:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:18:41 2024 by rpki-client on console-ams.rpki-client.org