Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File:                     FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier:          v4LPlM1D3szGHCmlK/TSQOReMPfQuLrS3vyLPmqLNLk=
Subject key identifier:   24:75:FD:61:DC:DB:75:1F:AE:55:B2:22:41:8D:DC:0D:9B:41:DE:89
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer:       /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial:       01903EC12BD6DA9A15413A23796CACAD27A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number:          0939
Signing time:             Sat 22 Jun 2024 07:02:45 +0000
Manifest this update:     Sat 22 Jun 2024 07:02:45 +0000
Manifest next update:     Sun 23 Jun 2024 07:02:45 +0000
Files and hashes:         1: 1xNgMNNi7K7EaxdypS9KB_qhUcI.roa (hash: IWhJ1dVN8TxDnIAFQ4h0ULQJjnQYH1VGIf+tqDY2+OU=)
                          2: 5uhC0eheUBN6rQ3XMshXev9dztw.roa (hash: 3pdKrxYISUIVhc3EQm/wrrgszalD60ktw7eJwZxPSB8=)
                          3: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: bBvyaZSW88S12jzTJrm4w5NgBVFpra4M3ZBnqhsEwwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c1:2b:d6:da:9a:15:41:3a:23:79:6c:ac:ad:27:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
        Validity
            Not Before: Jun 22 07:02:45 2024 GMT
            Not After : Jun 23 07:02:45 2024 GMT
        Subject: CN=2475fd61dcdb751fae55b222418ddc0d9b41de89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:cb:38:dd:91:51:85:19:6a:f9:5d:5b:21:
                    3a:8f:35:a6:cc:d8:04:05:44:8a:cb:28:e2:c9:42:
                    49:0e:a6:77:cb:0f:47:ae:d6:7b:6e:62:bb:d3:8b:
                    6a:76:44:28:1a:65:72:f3:c7:ac:3f:5d:8a:43:7d:
                    1d:1c:73:ba:94:3f:01:18:5b:f8:aa:2e:43:72:03:
                    d0:aa:95:f8:b9:f5:0f:39:22:81:c5:b0:5c:ce:77:
                    85:a2:2e:8e:65:f6:f8:7d:3c:0f:79:32:59:98:ae:
                    a6:0d:ec:e4:7b:bc:46:47:0c:70:4f:5b:ee:f8:4b:
                    64:d2:a1:f1:35:5d:8c:97:c8:ac:9b:e0:81:82:60:
                    0e:9f:8c:46:cd:ec:4f:fa:13:27:70:48:3f:ab:69:
                    01:12:43:90:42:fe:b5:8f:2f:bc:b0:ea:d7:e6:75:
                    1f:ce:8f:73:38:8e:29:a8:c8:8e:91:b3:3c:12:5a:
                    e6:c2:1e:92:4a:1d:b5:d5:98:51:2a:fa:a8:e2:45:
                    4f:b9:a4:9a:40:ef:da:83:7b:4f:a8:7a:4c:b8:18:
                    83:48:00:df:02:67:4e:18:d4:af:43:2b:20:3a:7a:
                    8a:3a:e9:07:59:82:25:98:fa:b9:4a:ee:56:a9:d8:
                    20:00:18:d4:3f:94:f4:31:10:7e:ce:5a:37:2b:90:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:FD:61:DC:DB:75:1F:AE:55:B2:22:41:8D:DC:0D:9B:41:DE:89
            X509v3 Authority Key Identifier:
                keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:d7:bf:0c:a7:f9:0e:8e:72:56:74:20:fe:4f:7d:b2:00:
         d5:18:20:9e:7e:4a:13:38:76:3c:bb:70:45:75:bc:34:f6:43:
         f6:88:0b:ea:e3:27:c5:16:61:e3:38:7a:cc:97:1e:4e:05:9f:
         eb:3c:88:a6:bd:81:1e:11:9a:ae:fa:49:fa:b0:92:6d:f0:6f:
         50:f3:59:5e:a8:85:64:13:4e:f6:a4:93:d6:91:a6:b4:0b:5e:
         f1:b8:80:5c:06:1f:ff:9d:ae:b4:93:4e:1a:b6:7b:f9:d2:f4:
         7d:83:1d:e4:fd:36:ab:79:74:4b:ec:29:54:bc:a7:51:25:4d:
         6e:a5:74:26:66:94:b7:10:12:37:34:12:96:82:aa:79:a7:92:
         38:09:68:65:02:16:92:58:74:b1:72:b2:19:a2:b9:87:93:e4:
         84:14:27:21:8d:cc:4d:2e:2f:57:30:8b:9f:54:50:27:c2:23:
         80:fd:e9:ac:4b:bd:a8:52:26:6a:1e:ee:05:c8:83:20:fd:8d:
         fc:aa:01:35:1f:d9:98:84:ff:be:7e:92:4f:1b:bc:61:e9:56:
         db:e3:75:9b:b5:82:c7:0b:a6:6e:e9:f9:90:13:ca:44:af:01:
         f1:af:ad:ca:c8:fa:ad:20:c9:b7:0d:eb:ba:85:5f:50:3e:96:
         8b:92:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:11:41 2024 by rpki-client on console-fra.rpki-client.org