Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File:                     152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier:          GCQ2YMD/X4sk+aGoThZ2kotj9byJLvtOmEgimgy1PYo=
Subject key identifier:   CD:CF:AA:9A:05:B6:52:95:04:83:25:8F:52:E2:A0:16:58:B5:8C:05
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer:       /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial:       01901C6A4E51B2B4CE8FEEA6FB0B1F08AFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number:          0B7F
Signing time:             Sat 15 Jun 2024 15:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:47 +0000
Files and hashes:         1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: TpK7Cb9UsaGFje4IDKr+5l8jhts9A2RSJp1vionrkfU=)
                          2: ZmI9zHGr-xXV-t9JmsYql9Kb-vc.roa (hash: 8sItW5jlxUxH/hxYtjZMf/oGPuNaLBD3qKG25g/1VPE=)
                          3: v7pJ3KFMCt_D0rmruuFkRBDw4bc.roa (hash: YkO/fceJnXfMT9WjDwRcVYVuq9Iu7bLHSYtr27YhJjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:4e:51:b2:b4:ce:8f:ee:a6:fb:0b:1f:08:af:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
        Validity
            Not Before: Jun 15 15:00:47 2024 GMT
            Not After : Jun 16 15:00:47 2024 GMT
        Subject: CN=cdcfaa9a05b652950483258f52e2a01658b58c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:ac:80:01:58:d0:cf:cf:b7:2d:04:2a:f9:
                    4f:c3:26:bd:66:ab:0a:1c:67:32:a1:2c:7a:cc:7d:
                    08:69:1f:d7:23:6e:59:43:77:1e:67:09:32:d8:50:
                    cb:44:9a:28:f6:a8:b7:d6:e7:2b:73:61:fa:75:ee:
                    bc:b0:05:ac:03:22:b4:49:3f:85:3d:95:1b:66:ff:
                    63:87:ba:de:fd:04:cf:c8:72:0f:8f:26:f9:c3:e9:
                    ec:f7:7e:d7:07:e7:29:ac:e7:f2:b5:73:d8:b6:3c:
                    2f:c1:af:31:cb:99:97:97:10:38:b7:73:90:6d:14:
                    ff:e2:15:fa:b5:28:f6:22:a8:3b:ce:0b:a6:8e:98:
                    c1:c6:ec:83:55:3f:07:0d:2c:93:91:fc:26:95:9a:
                    8f:61:39:f7:ee:ef:07:e4:0e:c5:fb:1c:4a:de:37:
                    92:81:aa:f5:f7:0b:5b:47:7b:3d:17:57:6a:2a:7d:
                    41:3e:03:16:c9:71:ba:eb:29:77:25:f6:41:e1:3e:
                    36:26:cd:44:5c:71:7b:4e:06:f8:80:5c:f9:a3:8e:
                    4a:90:f8:cb:b8:e0:4c:85:5a:78:3b:0b:bf:d4:d7:
                    b6:4f:46:41:94:46:c8:18:0c:fc:9a:2b:cc:20:4a:
                    cd:de:e4:08:8a:dc:bf:b4:78:68:ae:cb:f8:95:22:
                    4b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:AA:9A:05:B6:52:95:04:83:25:8F:52:E2:A0:16:58:B5:8C:05
            X509v3 Authority Key Identifier:
                keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cf:19:54:b3:7e:6a:fb:74:c2:ae:52:cb:11:0e:e4:d5:93:
         12:61:42:fd:12:29:2c:58:8a:0e:56:97:40:5b:62:7c:c5:bb:
         2f:44:ca:b9:08:1e:a5:e4:ae:37:20:b3:67:7a:7f:ea:22:10:
         65:4e:04:41:a7:70:a4:0d:af:11:c0:b2:05:59:d6:3c:08:7e:
         75:9c:e5:79:fe:8e:dd:98:72:b1:ca:9f:5a:78:75:3c:ff:31:
         22:1b:61:db:7a:a1:4d:e7:85:e1:aa:8b:49:ac:7e:80:7b:c5:
         75:ca:76:40:7d:2c:de:b9:0a:1d:0e:db:5c:9f:f1:26:d6:91:
         65:cf:ef:91:be:4a:9b:79:17:94:08:e5:d0:8a:5e:5f:11:32:
         ac:4f:92:37:b2:1a:8c:1f:c2:b8:a8:34:3a:83:87:bc:47:80:
         1c:21:99:5c:92:2c:cd:d7:3a:fb:59:e9:e1:9d:ba:0d:78:c3:
         26:25:cd:45:f4:3b:bf:e4:fc:f3:a0:16:08:9c:71:83:73:f9:
         ff:b0:cb:67:5c:67:f3:1e:d1:19:ca:a3:65:1d:4c:20:4c:41:
         c8:6e:a7:48:b4:05:4c:d8:ef:62:db:5e:9d:e3:05:76:fa:a5:
         e5:9d:70:39:55:3a:fe:12:6b:f4:05:83:06:5e:f5:fc:cc:77:
         5b:15:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:57:48 2024 by rpki-client on console-ams.rpki-client.org