Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File:                     36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier:          v293MU16OZlMb2avLE6vQzOS2GxPz/JQLP8vr2lMCrQ=
Subject key identifier:   F3:E1:F1:2E:91:94:B9:EB:02:05:A5:8C:7E:2C:2B:F0:0C:97:09:A7
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer:       /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial:       018F362D2EE65091BC705B1F973AB1B1DC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number:          0843
Signing time:             Wed 01 May 2024 22:01:21 +0000
Manifest this update:     Wed 01 May 2024 22:01:21 +0000
Manifest next update:     Thu 02 May 2024 22:01:21 +0000
Files and hashes:         1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: ho4kfAIxKe3y0cyPvTham3nZjtMLlUKAx0esNZ8QE7s=)
                          2: weKptaWEwo6jyABgUQBx2U8NNKE.roa (hash: PErM/LJJMtcr8Eq7gphWO8S13DFESGkafPKy1Pf2tGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:2e:e6:50:91:bc:70:5b:1f:97:3a:b1:b1:dc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
        Validity
            Not Before: May  1 22:01:21 2024 GMT
            Not After : May  2 22:01:21 2024 GMT
        Subject: CN=f3e1f12e9194b9eb0205a58c7e2c2bf00c9709a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:b7:d1:62:0f:dd:0f:e3:e3:a7:5d:6a:e5:
                    48:17:c2:6f:af:b0:c8:91:6d:7b:4b:8f:7c:03:be:
                    b7:7f:ca:4d:c7:e8:34:f7:17:74:2e:5a:cb:df:e4:
                    32:69:c8:3f:0a:f0:0c:45:8f:67:46:28:bb:2e:50:
                    e2:93:e3:b0:5c:0a:a4:ab:54:1d:dd:4e:14:f6:6b:
                    ea:21:4b:35:64:62:e9:14:c4:68:83:fa:63:e8:6d:
                    50:5b:f8:e9:b0:93:1d:15:5d:dc:37:51:a2:2b:fe:
                    11:67:ab:61:61:13:e4:58:b9:31:e7:13:ae:8b:19:
                    dd:7d:c7:a5:c9:a9:fb:68:7f:b2:d7:0a:ac:2d:77:
                    5f:20:1e:d3:e1:ee:66:b6:4c:3b:42:00:14:39:e5:
                    df:05:8c:37:f3:25:50:e6:aa:0d:47:ed:98:88:fa:
                    f4:2a:1f:99:97:23:86:97:69:69:c1:d0:48:e9:b2:
                    85:1b:c3:4d:8d:e9:8d:f0:ea:db:bf:e8:34:15:7c:
                    15:9d:a2:fc:35:a8:93:4d:26:e0:05:a7:3f:de:8d:
                    72:06:0b:be:00:75:06:8a:24:4f:06:84:85:33:2d:
                    fb:fa:ae:60:16:a2:5c:9b:6e:f8:f1:18:44:46:60:
                    dd:d6:de:1c:50:e4:55:9c:b2:b3:18:53:36:7f:aa:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:F1:2E:91:94:B9:EB:02:05:A5:8C:7E:2C:2B:F0:0C:97:09:A7
            X509v3 Authority Key Identifier:
                keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:ca:6a:45:99:ae:c0:1d:6d:45:8f:53:a9:33:e8:ee:ad:
         d6:5c:7f:22:d1:22:fe:8a:30:8d:84:0d:b4:c5:18:58:58:35:
         2e:a6:67:ab:8d:d3:95:6f:25:79:82:24:93:d2:46:02:d2:ba:
         19:dd:16:ce:59:3f:26:e5:5c:4b:0a:17:a5:23:e3:29:1b:c1:
         a5:ae:93:f4:08:82:60:c7:98:55:10:08:72:50:15:13:4a:57:
         0b:79:ec:60:be:a0:e3:2c:b8:bd:ee:1e:75:d6:1a:7c:7e:e6:
         9a:9a:10:9d:2c:a4:23:63:1a:90:d7:0e:0f:9b:aa:e9:0d:47:
         d3:de:3a:3d:a0:69:2b:89:1a:ff:88:6b:c8:58:8a:26:d4:f7:
         57:66:18:d4:0c:07:16:d0:54:01:2f:d9:d3:ca:b8:3b:05:84:
         01:6a:83:14:76:7d:10:c9:1c:3b:3e:93:5a:3c:39:54:7a:69:
         b2:40:ab:2a:bb:49:f2:a1:31:fd:fa:7a:f9:29:30:72:aa:0c:
         74:76:39:ed:45:85:c9:c0:49:8d:d1:4a:99:31:ec:1f:be:79:
         5b:2b:a2:f2:04:10:84:09:d6:7c:14:cf:7d:0c:1f:4b:fd:66:
         74:64:3b:45:c6:47:7c:00:2e:c4:3b:0b:14:4c:9a:f7:78:0c:
         6f:81:3f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:57:33 2024 by rpki-client on console-fra.rpki-client.org