Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File:                     fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier:          tvyxF7mlu2PMxoke0fx89/sZFfCLdXIJo22rm4ss4mo=
Subject key identifier:   A4:09:75:C2:A4:E7:3C:A1:6C:E6:76:9F:4A:56:10:25:1B:CC:D3:4E
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer:       /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial:       01901D46483B5F079FFF684B12FF744F00B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number:          0F1B
Signing time:             Sat 15 Jun 2024 19:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:03 +0000
Files and hashes:         1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: +A7qjiWYF6aDHYsMIMAob+h0NkSJAk28cXikSodwDcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:48:3b:5f:07:9f:ff:68:4b:12:ff:74:4f:00:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
        Validity
            Not Before: Jun 15 19:01:03 2024 GMT
            Not After : Jun 16 19:01:03 2024 GMT
        Subject: CN=a40975c2a4e73ca16ce6769f4a5610251bccd34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:ca:d5:88:67:a3:b4:3b:c1:30:25:4b:f3:
                    6f:96:6a:fb:c3:25:bd:28:fe:05:dc:c5:36:3d:25:
                    f2:c6:a5:31:5b:f8:22:52:b3:23:42:a8:5e:50:6a:
                    f4:77:ed:fb:51:f5:e0:4e:94:2b:42:2f:75:14:8f:
                    c9:93:63:c1:42:bd:6f:a0:15:96:ff:be:ef:0f:dc:
                    e6:f9:2e:cc:36:15:23:3b:db:c1:0c:0f:99:33:22:
                    fa:b1:ac:1e:17:d2:93:b0:f7:31:c2:c9:67:a2:31:
                    66:bf:5c:99:7a:01:2e:e7:db:b5:78:54:9c:dc:78:
                    38:ca:72:e4:0e:5e:75:0e:80:4d:0b:58:97:5a:18:
                    00:59:45:fc:8b:c0:fd:f3:21:7a:68:9a:b5:39:a6:
                    c9:91:2e:db:20:bf:64:eb:e8:c3:52:c5:03:de:2f:
                    10:78:d4:70:f6:6c:f5:38:b0:4a:e9:79:34:37:46:
                    6e:be:db:19:dd:50:0b:cf:bf:e8:8c:de:16:1f:90:
                    90:a4:c5:18:79:f1:f1:74:ef:01:ee:97:19:78:8e:
                    b2:2a:e7:34:7f:86:3a:96:11:5e:e6:fe:c2:46:2a:
                    ba:2e:ba:70:4e:3f:f6:7b:b8:f1:76:37:c6:f0:53:
                    45:88:41:c7:15:8d:27:4b:08:2c:46:4b:4d:77:a4:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:09:75:C2:A4:E7:3C:A1:6C:E6:76:9F:4A:56:10:25:1B:CC:D3:4E
            X509v3 Authority Key Identifier:
                keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:2f:75:50:21:c8:54:26:ae:70:c2:78:ab:9f:af:7f:b3:
         a9:36:bb:6a:c9:6a:3f:c3:9c:73:60:d3:2f:1a:ed:d2:c3:82:
         cd:e0:a2:b3:6f:a4:d6:2f:05:e2:a6:d7:b9:02:67:2a:a0:ac:
         aa:89:92:23:f9:ec:75:9b:3f:06:75:b3:84:de:50:c2:3a:04:
         e7:20:0f:5b:fb:58:58:f4:42:8f:a5:76:68:c2:3b:56:1e:a8:
         d7:82:c8:1b:4d:ea:5f:93:62:ed:9f:71:0f:8f:d6:81:f8:9b:
         0e:f5:1f:74:06:ac:ef:6e:75:bf:bc:71:d7:c8:72:eb:34:83:
         e2:e3:0f:05:ae:da:10:9c:c4:30:63:f5:72:21:d0:2b:4e:d7:
         03:ea:05:4a:62:22:a3:56:fc:72:65:56:d1:5c:3c:51:c9:e0:
         4c:83:8b:5c:e0:02:60:90:f2:a7:4d:7a:0c:8f:d0:93:33:aa:
         bb:71:43:5f:5e:08:d9:f8:94:99:fc:cf:0c:14:9e:3e:be:0e:
         23:82:8d:ce:ef:c6:b2:ad:64:62:a3:a1:fc:fc:d4:fe:9d:85:
         0b:d8:dd:a8:46:0d:51:fe:2e:b7:1f:7b:46:79:59:f2:97:2f:
         37:de:71:3b:57:f9:bc:69:95:85:66:f2:d1:00:21:93:5e:69:
         87:a0:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:40 2024 by rpki-client on console-ams.rpki-client.org