Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File:                     3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier:          9HsIj675eznLus652iS6QzrxyIrEjsH0o/tFJNeyKDg=
Subject key identifier:   E2:21:67:55:CC:C4:8D:40:AE:63:B2:14:23:50:1C:3C:19:0A:FE:EB
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer:       /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial:       018F22DE64E098F6F423754100B695B35621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number:          0669
Signing time:             Sun 28 Apr 2024 04:02:31 +0000
Manifest this update:     Sun 28 Apr 2024 04:02:31 +0000
Manifest next update:     Mon 29 Apr 2024 04:02:31 +0000
Files and hashes:         1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: LK5vxgVHJkAn6PrVBoAYiwdltj+z2PLScoQSyfjjGWg=)
                          2: ssI4932mUe9v96FRSTlwndPCxNA.roa (hash: hyRnlaWZpEkZ6uxYWnzWbee91tjfGS+IzB3dbflkyx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:de:64:e0:98:f6:f4:23:75:41:00:b6:95:b3:56:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec756af77dafebca10684d68556baacd7173617
        Validity
            Not Before: Apr 28 04:02:31 2024 GMT
            Not After : Apr 29 04:02:31 2024 GMT
        Subject: CN=e2216755ccc48d40ae63b21423501c3c190afeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:b7:05:80:f3:89:bf:c4:0d:26:53:4c:91:
                    82:e7:21:dd:87:76:87:64:50:87:31:ca:9b:2b:30:
                    73:d5:84:74:30:88:06:df:0e:c5:d3:b3:6d:38:51:
                    54:0a:02:a3:cb:5e:e4:10:ab:0e:f2:2b:c3:f5:b1:
                    22:ff:85:8b:a0:15:b6:ed:d8:38:e1:af:21:4e:fb:
                    33:fa:23:ac:47:75:5a:4a:89:84:60:61:31:68:9c:
                    5d:17:39:df:bd:1a:3b:74:38:0d:9d:f1:39:90:6d:
                    f2:14:0c:a6:2a:12:5d:de:11:ae:df:28:da:2d:4e:
                    82:ff:0f:92:17:f1:75:c7:24:56:97:8b:eb:23:e5:
                    bb:3f:2c:ad:c7:6b:5d:48:29:b4:ca:bd:e8:8d:91:
                    9a:d6:df:75:b0:fa:f0:22:f2:b6:08:10:7a:29:d9:
                    d2:95:1c:fc:71:bb:24:95:f4:1a:78:fe:56:0e:81:
                    50:68:af:e2:e2:97:3f:87:5d:96:b4:24:41:8d:cd:
                    1e:b6:6b:c9:e6:37:90:3b:a7:b5:38:7f:26:0e:c7:
                    95:3d:96:63:4e:73:90:2f:0c:1b:4d:c2:f4:cc:87:
                    0f:23:fa:0b:af:4f:6f:d3:bc:0f:f3:20:f1:6c:21:
                    7e:e5:3a:55:1f:63:24:e4:0e:67:82:cc:56:81:c8:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:21:67:55:CC:C4:8D:40:AE:63:B2:14:23:50:1C:3C:19:0A:FE:EB
            X509v3 Authority Key Identifier:
                keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:f4:33:91:59:6f:3c:c1:32:f6:83:8e:ed:a3:44:5c:3b:
         44:c1:3f:01:df:43:ea:69:fa:e8:ee:cc:d3:f9:9d:83:ee:99:
         f0:35:eb:5a:b9:c3:40:03:14:24:a3:90:bb:fe:d6:d8:77:26:
         46:22:53:fd:40:7d:16:81:da:7f:f3:d9:d7:40:9d:1c:7e:92:
         1d:ca:9d:bb:21:c2:ee:0c:e9:e1:db:74:e4:79:6e:32:2b:f1:
         63:13:77:26:23:e9:ce:d0:11:da:c9:ec:08:1f:ea:31:49:c2:
         91:02:a0:69:9a:ff:e2:ba:5a:42:11:0d:6f:54:df:8d:76:9c:
         12:72:08:de:89:7b:40:e1:a1:9c:2a:fc:bb:3f:ae:21:7c:68:
         ad:2b:54:c2:46:51:00:d6:10:a3:97:26:58:1f:a2:92:1e:cb:
         cf:4b:4a:ed:7f:29:61:aa:cf:b0:a2:fb:7e:eb:46:d3:1f:96:
         34:5e:65:a6:c9:81:c4:e8:9a:42:ad:a8:3d:48:16:16:33:7f:
         fc:f3:a7:04:85:0f:55:06:91:94:6e:5b:88:3f:6e:1c:fc:38:
         77:d8:a4:14:b7:fd:64:2d:d4:37:6a:ee:eb:80:e6:28:89:5e:
         6d:56:f2:d4:ad:ba:48:2c:f3:a6:d7:5e:88:0f:66:7f:a7:cb:
         31:50:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:41:49 2024 by rpki-client on console-ams.rpki-client.org