Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File:                     0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier:          NZ0MaKmjLnIwn/d0ywKV/C7DOs/nLdE8rZmSMLNmNuQ=
Subject key identifier:   01:3A:56:F7:5E:23:3A:33:86:D3:BC:65:8B:4A:C9:95:AA:95:D4:93
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer:       /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial:       01901D0F4D31BFAD2383244F3061C9370A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number:          0F01
Signing time:             Sat 15 Jun 2024 18:01:00 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:00 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:00 +0000
Files and hashes:         1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: pJ1/HTa3tWu0QNRtVGBmsKfd/3K0guGsk2zKoJ8DRrs=)
                          2: TNVs-F9Gvccm1AOnRS34BWByzqk.roa (hash: FGcmZPP3CtlKUeuXkLg5vruq8Rbo2nWCDBQ7QzKmfEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:4d:31:bf:ad:23:83:24:4f:30:61:c9:37:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
        Validity
            Not Before: Jun 15 18:01:00 2024 GMT
            Not After : Jun 16 18:01:00 2024 GMT
        Subject: CN=013a56f75e233a3386d3bc658b4ac995aa95d493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:7d:5b:af:c5:f5:4c:f0:92:a4:d1:bc:5f:
                    35:74:98:39:f2:37:19:0b:89:45:25:74:35:85:e6:
                    5c:0b:57:98:0e:a8:76:f0:e6:b6:73:e7:8d:4c:1e:
                    7c:fb:48:a5:59:98:55:2d:9c:b5:7a:73:73:74:57:
                    b1:28:1e:d0:43:65:44:2e:6e:61:e5:be:4c:cf:f7:
                    98:d3:ce:ad:77:c5:0f:d4:f9:3a:4b:07:a9:87:19:
                    54:0a:22:00:6a:0d:fd:bb:6e:c4:a6:b8:1e:f8:6e:
                    74:dc:01:35:72:dc:38:38:b5:b4:19:dd:15:bf:5d:
                    44:63:43:52:11:b5:22:bf:c1:6f:e8:a6:99:b9:c0:
                    9d:cc:fd:32:63:d9:f5:5b:c4:50:bd:00:ec:25:b3:
                    f9:bc:41:fd:be:45:ad:26:d8:35:c0:e6:09:62:c7:
                    cc:1f:3f:ff:48:98:99:ba:75:5d:4d:a3:82:44:d9:
                    e6:a0:94:dd:99:51:94:96:44:20:ff:d6:35:d2:ff:
                    b1:b7:e8:d7:f9:79:cc:c8:aa:35:cb:18:ec:78:f3:
                    83:aa:54:26:ef:34:a5:80:50:3f:ef:9d:2e:29:14:
                    d2:64:11:2e:9c:0c:a0:98:6b:87:40:78:d4:6a:a3:
                    fd:46:66:ce:8b:b4:d0:23:57:32:c9:d3:64:61:54:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3A:56:F7:5E:23:3A:33:86:D3:BC:65:8B:4A:C9:95:AA:95:D4:93
            X509v3 Authority Key Identifier:
                keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:67:79:2e:db:c3:5d:3d:5e:e6:22:3f:86:cb:24:dc:ef:
         4e:3d:82:8a:c3:50:97:26:7e:dc:77:8f:21:cc:60:d1:a8:52:
         26:c9:ab:37:c0:07:ec:b2:3b:29:45:1d:a1:da:68:79:eb:25:
         5a:1c:da:a7:d1:08:1f:36:45:95:3c:58:19:5e:53:af:76:b8:
         7d:9a:a5:d7:35:af:da:19:18:e8:30:f6:90:b6:99:0c:c6:11:
         19:09:23:40:ae:a3:1d:4e:d5:93:7d:4e:5b:b8:60:54:d9:cb:
         63:53:9e:93:53:d6:38:35:46:ef:a6:df:93:bc:8a:1f:80:99:
         d6:40:68:e7:07:c4:88:81:02:a2:48:6c:65:ca:6c:9c:b5:78:
         5c:5c:e4:f7:b1:3a:3f:c9:4a:2b:ee:3a:3f:f2:28:e8:18:3a:
         d9:bf:13:cc:37:ab:8a:db:41:22:4e:c2:da:10:96:42:e0:c4:
         8c:97:6d:26:30:a0:b0:4a:a9:c4:dd:f1:b0:78:53:61:5a:2a:
         19:bd:a4:42:74:f1:36:15:aa:6f:78:0b:73:a2:26:69:63:aa:
         be:9d:c3:4b:ee:43:ff:d0:1f:02:24:b5:6f:96:86:d4:c6:b5:
         f4:98:20:71:3e:63:f1:96:e1:09:69:22:7a:80:14:9d:df:3d:
         52:ae:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:00:10 2024 by rpki-client on console-ams.rpki-client.org