Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File:                     A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier:          /Su9MLLvcX2sNDxDUEGtiMB0dpCxT09aIoKYkaAQgpk=
Subject key identifier:   C3:A9:0A:D6:D6:CA:48:7D:E1:F4:EB:FB:6A:8B:08:58:7F:30:2E:92
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer:       /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial:       018FD6765082E14ACC6D9ADA209A0D25621B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number:          11A1
Signing time:             Sun 02 Jun 2024 01:00:29 +0000
Manifest this update:     Sun 02 Jun 2024 01:00:29 +0000
Manifest next update:     Mon 03 Jun 2024 01:00:29 +0000
Files and hashes:         1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: k2MwWH5A+YZ1EMrwg+umJCOPissbOtMNcCNvRuTAA3I=)
                          2: VQHhcz9UCoVjWha7otp83EgCwNo.roa (hash: ciToPuQ1CfJmGy/mYcpReaRnQDE512kaueLB/UIO934=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d6:76:50:82:e1:4a:cc:6d:9a:da:20:9a:0d:25:62:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
        Validity
            Not Before: Jun  2 01:00:29 2024 GMT
            Not After : Jun  3 01:00:29 2024 GMT
        Subject: CN=c3a90ad6d6ca487de1f4ebfb6a8b08587f302e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:76:95:27:33:b8:22:8f:f4:9a:a0:11:c0:
                    ab:ca:37:85:b6:42:7c:37:96:48:45:ba:80:7c:07:
                    b6:5f:7a:ee:24:bf:0a:02:4c:89:04:58:31:31:7e:
                    41:bb:54:f1:7e:47:7c:ba:5e:22:60:b4:1f:f4:a1:
                    4e:12:65:e6:f5:c5:41:8a:68:dd:62:e0:1a:b6:fe:
                    bb:b7:48:9c:df:f6:10:59:12:68:7c:d9:2e:4a:c9:
                    36:1f:70:ca:3b:81:e1:1d:2f:87:0c:34:87:25:f6:
                    43:50:4a:b2:10:0d:9d:3c:6c:a2:9f:62:e8:9b:fb:
                    6b:8b:99:3b:50:fe:6a:fb:45:12:c6:58:bd:8a:dc:
                    6c:9e:48:06:e8:00:89:d4:7d:96:4d:12:d3:bb:c0:
                    1a:02:18:4d:50:3b:41:a6:34:c9:7b:44:7e:ec:6d:
                    20:ca:de:9b:9b:60:75:c0:86:16:ec:5e:be:34:97:
                    20:74:83:55:1d:3c:9b:b8:f6:11:0a:58:29:d4:9a:
                    f0:1d:b5:91:85:f2:6f:ff:02:49:62:ba:ed:08:eb:
                    51:17:fc:21:60:fe:6b:9e:3e:c6:93:16:41:c3:66:
                    c8:9d:bc:0e:13:98:36:15:29:07:f4:7c:12:e9:51:
                    7f:16:14:dc:8a:c5:f7:10:c1:87:0e:1a:a7:4d:d1:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A9:0A:D6:D6:CA:48:7D:E1:F4:EB:FB:6A:8B:08:58:7F:30:2E:92
            X509v3 Authority Key Identifier:
                keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:d3:cd:1a:86:69:b1:24:d1:6a:71:fa:1d:cd:6b:96:b3:
         ba:fe:55:05:17:a1:38:37:9a:23:1c:bf:0c:bf:df:fd:85:0a:
         6e:70:60:a9:29:a8:66:cb:c0:f6:98:8b:8b:a7:87:eb:81:e1:
         c9:9c:6c:9c:7a:d5:92:a3:ef:1f:80:76:95:a1:34:5f:43:af:
         c6:98:9f:2b:dd:36:6d:76:2a:46:ca:c5:70:df:19:dd:04:7f:
         32:87:7d:1b:b4:9e:3b:21:83:75:97:08:d2:15:78:0b:17:7f:
         db:46:3f:aa:25:2b:d3:c9:c4:31:77:81:fa:88:d5:e4:e0:54:
         16:b9:fc:fd:e0:5d:ea:6d:04:05:7d:af:5f:dd:88:f5:53:eb:
         80:39:a5:a8:03:1d:6d:7b:25:60:26:cb:92:d1:5f:32:71:d7:
         f1:12:d6:e9:6a:b3:60:3d:0b:c1:c5:ed:8c:71:1b:ad:96:56:
         4e:68:68:c1:c5:f2:9b:95:f8:f7:61:56:ec:a2:7f:21:5c:e1:
         06:24:cc:80:bf:ae:c4:42:a8:30:62:74:61:1d:f5:ac:33:47:
         84:e4:4f:c8:29:c5:6b:4c:3e:78:f0:cb:42:9f:02:aa:75:6e:
         0a:cb:bb:2e:e9:85:ce:7d:a2:a7:92:dd:52:11:7c:38:d2:cd:
         5b:ec:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:05:00 2024 by rpki-client on console-fra.rpki-client.org