Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File:                     F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier:          KPzToPLjRn2NquAWxCHg6/v5BC70caTFC4KromosPgA=
Subject key identifier:   00:84:AB:0A:27:89:DB:D3:6D:22:AA:2B:0C:62:5E:EA:CF:6C:0B:6B
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer:       /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial:       01901E58A44443F7DD6AB9E69598788F8EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number:          0858
Signing time:             Sun 16 Jun 2024 00:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:43 +0000
Files and hashes:         1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: 7G3EtrqYFrTI8PRpGQ6tW0QOchur+XRtwI7URDz1apE=)
                          2: LNxITSD8taFVvTseW3nyAyO02-s.roa (hash: kZ1X+Vv0P5PQRsuRZcvn4zOre1sAmO4Le2847090tOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:a4:44:43:f7:dd:6a:b9:e6:95:98:78:8f:8e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
        Validity
            Not Before: Jun 16 00:00:43 2024 GMT
            Not After : Jun 17 00:00:43 2024 GMT
        Subject: CN=0084ab0a2789dbd36d22aa2b0c625eeacf6c0b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:78:bb:e9:c6:9c:1a:ea:15:7c:ad:63:0a:
                    fa:5a:5b:44:d4:07:11:21:21:a9:b2:34:44:6e:d7:
                    47:8d:97:54:06:9a:24:35:12:3e:90:b9:a4:9f:a7:
                    e4:8a:f5:04:08:ac:44:b5:4f:ee:e0:ee:54:36:e8:
                    1d:5d:13:cb:be:16:ee:a5:9c:a2:e7:e6:6b:92:a4:
                    0b:b6:37:81:7b:6e:de:a1:a6:15:c0:38:90:81:66:
                    b7:ef:9f:6a:c8:3d:7d:8b:85:62:30:b1:3c:0b:39:
                    ea:b3:1f:8a:e2:9e:c1:ff:bf:3f:34:8e:98:f1:70:
                    e4:df:fa:9b:85:ea:b7:24:dc:eb:82:f6:d5:18:ff:
                    84:f8:c2:08:69:4b:de:42:bc:ce:93:fe:ef:fc:fd:
                    1c:43:93:a8:7d:1e:bc:84:54:cd:c8:f9:f2:a8:d6:
                    80:0b:fd:ee:60:19:7d:01:05:17:b5:45:ae:2c:cf:
                    44:d6:7a:56:13:d5:e0:26:05:fc:ef:a1:7a:20:63:
                    26:c1:2e:a8:4b:9b:af:1f:67:c1:05:39:c6:bd:a7:
                    19:5c:1a:19:bc:96:bb:22:02:0a:5a:1a:fd:c5:9f:
                    c0:a1:d4:8f:6a:5a:3d:bb:1a:29:8e:0c:97:7e:50:
                    17:eb:0a:97:f3:c1:78:6a:a5:2d:6a:64:63:2f:ea:
                    1c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:84:AB:0A:27:89:DB:D3:6D:22:AA:2B:0C:62:5E:EA:CF:6C:0B:6B
            X509v3 Authority Key Identifier:
                keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a3:cb:94:5f:8f:93:fd:fa:d9:3c:6a:fc:af:39:55:62:53:
         50:27:48:43:e4:e6:3f:20:bb:71:d0:04:54:69:dc:4d:a0:75:
         f2:d5:fe:0e:69:88:24:33:a6:e4:b1:23:db:76:d0:a3:34:47:
         8c:5b:36:bc:2c:03:6a:ca:1c:c3:51:2a:65:12:61:c3:8c:27:
         b0:c7:29:82:22:eb:e2:28:30:01:16:9f:fa:b2:c1:1c:d3:e6:
         68:7a:35:20:f2:78:22:89:be:ab:11:b2:f9:77:7c:de:c7:a9:
         88:7a:31:4d:c7:38:35:3d:80:13:3b:c5:73:7f:86:27:df:ae:
         c5:78:b5:9a:99:97:ab:34:3a:b4:a8:85:ec:6c:87:d3:0e:d2:
         0c:bb:2c:ab:b0:54:34:0f:38:00:c1:7b:eb:48:70:07:c3:6b:
         c6:c6:ee:75:f0:38:a1:87:07:2e:f8:07:d1:71:2e:96:7e:9e:
         b8:ec:46:59:af:57:fe:f9:9d:87:6b:38:0f:86:5f:a8:09:4d:
         00:6d:70:2b:91:2e:57:6f:e3:90:21:70:e5:0f:e0:b6:a2:f4:
         26:a8:34:03:0d:8b:84:ba:ee:ab:69:bc:14:d0:02:83:e2:6c:
         7e:fe:11:fa:f6:15:36:dc:02:11:de:5c:0d:71:34:86:d0:e1:
         6d:0d:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:51:19 2024 by rpki-client on console-fra.rpki-client.org