Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File:                     FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier:          KRLONO44P7DzN06Ra+Kb5DHThHmXJjRQ34BYcenMiSI=
Subject key identifier:   98:E5:7B:F3:98:19:E6:8B:B1:32:04:72:E7:2F:54:9A:7A:3F:BB:F2
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer:       /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial:       0190448ABCE6E838C2FD3D6FD3E3A1028D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number:          0AFD
Signing time:             Sun 23 Jun 2024 10:01:01 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:01 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:01 +0000
Files and hashes:         1: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: bM8COsfajF4k04noh3qSX3lSTH1GaWR2qrsD4HBACCA=)
                          2: _jwHJHvkqKKz3s_m9q7g_0ycTYg.roa (hash: HlNdG8Eu530zZGXzYnvX7gCwd+hcFk+ZNzA1uJ0JV60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:bc:e6:e8:38:c2:fd:3d:6f:d3:e3:a1:02:8d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
        Validity
            Not Before: Jun 23 10:01:01 2024 GMT
            Not After : Jun 24 10:01:01 2024 GMT
        Subject: CN=98e57bf39819e68bb1320472e72f549a7a3fbbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:01:39:55:c7:3a:05:b1:75:18:db:66:d5:
                    f1:90:df:76:a7:c3:7b:56:9d:22:7a:f5:3e:8a:2c:
                    e5:c7:e5:ed:fd:93:53:d1:a2:98:23:f4:b7:a8:6e:
                    fc:95:fb:ab:d4:5c:d9:8c:1c:e2:ce:97:75:e9:9a:
                    59:77:3d:be:5b:57:dc:05:f9:06:fd:e5:56:6c:91:
                    8d:61:55:74:ad:71:aa:e3:94:a1:1d:81:73:ff:df:
                    c8:13:a5:eb:bd:07:4a:a5:1d:7c:52:cd:12:8f:97:
                    7d:d9:36:75:9d:cf:b9:d7:0c:33:64:fd:a3:4d:2d:
                    54:e9:7c:a5:bb:35:4e:9e:b6:1a:66:bf:56:09:dc:
                    60:14:eb:42:0a:d4:49:6b:b4:bf:a0:d9:7b:c8:99:
                    be:87:fe:14:1b:b4:82:0f:27:0d:0b:19:16:38:9b:
                    f2:25:d9:78:a7:d0:0d:49:e6:2a:70:26:cd:d5:b9:
                    57:d9:c1:9b:c5:05:4b:69:e3:50:7c:c4:12:a2:28:
                    be:d6:3b:68:d1:16:25:17:b6:45:f9:b4:0d:0d:47:
                    77:43:3f:16:1b:66:4f:bc:5c:40:68:6a:22:a4:28:
                    0c:45:62:fe:12:2a:1b:01:9b:7a:4d:04:e7:38:3b:
                    bc:87:f0:e2:23:70:a2:39:85:c2:d4:3f:5d:24:61:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E5:7B:F3:98:19:E6:8B:B1:32:04:72:E7:2F:54:9A:7A:3F:BB:F2
            X509v3 Authority Key Identifier:
                keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:13:fd:94:cd:c4:64:25:b0:57:47:87:f2:06:c4:bf:9b:
         6e:12:ef:c5:4f:28:79:9a:39:48:06:c0:43:ff:33:6c:46:88:
         bb:be:97:3b:71:64:c8:71:dd:1e:22:80:1f:31:31:42:7b:9c:
         9a:ab:97:c8:da:f6:e7:54:1c:9b:07:b5:ce:70:77:90:6c:25:
         d6:4a:e4:5b:03:1c:db:cc:03:fc:82:d5:53:d2:4e:58:2e:8d:
         8d:9a:7b:d9:b4:bd:19:dd:d4:a2:71:ac:2b:28:95:27:b5:05:
         5d:a7:c1:13:4f:02:9d:37:2e:5d:95:67:c0:51:4f:92:04:4b:
         07:ed:63:56:13:c8:ff:97:0c:1e:ef:0a:b8:e5:c1:a2:97:a6:
         40:11:be:cc:8d:89:c5:21:e0:89:76:e6:09:45:69:41:ae:f9:
         06:ff:9b:1e:e8:f2:76:aa:d3:50:0d:b6:24:3f:7a:00:21:14:
         54:e5:5a:46:af:9f:4a:2c:be:a5:3f:03:87:1c:28:3e:42:b4:
         4b:06:14:15:c8:89:f7:f8:1a:ac:2d:b6:13:6a:f6:b3:26:e9:
         22:dc:51:a1:b0:11:53:8c:59:e6:86:c8:43:71:ce:0d:8d:1a:
         8b:06:1c:c5:80:c2:22:c3:92:b3:c0:c5:5f:1e:52:ba:2a:94:
         db:f5:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:25:03 2024 by rpki-client on console-ams.rpki-client.org