Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File:                     fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier:          qfThZkRHkaipcFYVP5ZHzXUc9ru4xCPYZB/oV2qLjuI=
Subject key identifier:   AE:01:DD:CA:BF:46:8F:C2:2A:A4:AE:44:30:F1:24:A6:D5:9D:BD:F6
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer:       /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial:       01901DEAB20343383F693C9A110DFC29ACBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number:          0AC5
Signing time:             Sat 15 Jun 2024 22:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:38 +0000
Files and hashes:         1: S2mxySA6r4cR5OHli7BmUPghwQg.roa (hash: QvjRJXZoqzZDgy3Tu5o0jmgXlMUVpJd96nsgV0QtykA=)
                          2: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: oniwlO6Sh3gM4og+MDTJaQt9YmCG9Ym0YQmietY7oKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:b2:03:43:38:3f:69:3c:9a:11:0d:fc:29:ac:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
        Validity
            Not Before: Jun 15 22:00:38 2024 GMT
            Not After : Jun 16 22:00:38 2024 GMT
        Subject: CN=ae01ddcabf468fc22aa4ae4430f124a6d59dbdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:ca:a5:ed:8a:d2:2d:46:d2:cb:87:8d:54:
                    c9:36:fb:57:1b:42:d0:b7:d1:32:2b:e0:99:72:8d:
                    02:ef:f7:9b:60:31:c9:57:33:8e:30:7f:ec:c6:b9:
                    72:50:e6:22:76:31:f0:05:8d:27:18:5f:df:6e:bf:
                    ca:0e:8e:0c:bd:a3:80:be:39:57:0d:e2:5b:0f:d8:
                    39:83:3d:4e:8a:f0:f4:bd:1a:82:36:71:c7:b6:7f:
                    d6:a0:36:d2:09:51:e9:13:f5:39:17:1b:3c:6e:af:
                    31:ce:ae:53:5a:e9:d2:64:1c:e2:d4:0c:b8:8b:81:
                    f6:04:4a:45:bf:23:38:8a:1a:3e:f5:a5:7f:56:a0:
                    f7:31:30:0e:6e:9d:0b:89:52:4c:16:43:c1:f8:76:
                    cc:5d:00:b6:4e:db:fd:8a:2c:ff:a2:87:68:99:88:
                    74:cb:73:9e:68:38:fd:bc:99:bc:bd:1f:e7:e6:74:
                    99:f9:84:49:d8:9c:70:7e:53:96:85:f4:01:aa:f2:
                    5e:50:c9:46:6a:a0:33:3b:26:e7:5f:7d:4b:b8:5b:
                    5f:35:da:f8:c3:0c:da:fb:3e:8d:46:fc:ed:68:57:
                    cf:58:f6:55:58:a5:b8:f7:e1:3e:84:f2:16:a5:5c:
                    b0:d4:e9:2c:d0:7e:e0:db:ea:8f:94:e1:dc:65:cf:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:DD:CA:BF:46:8F:C2:2A:A4:AE:44:30:F1:24:A6:D5:9D:BD:F6
            X509v3 Authority Key Identifier:
                keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:af:94:ec:c3:4a:2c:8b:a5:93:ca:52:4d:4f:66:69:9f:e5:
         ce:9d:06:40:b0:75:a2:7b:25:60:44:68:ff:0c:ce:f1:fb:4e:
         12:40:c1:7c:99:34:30:90:9d:3f:bc:0c:0d:c9:83:b9:14:31:
         3e:36:21:56:cf:20:7b:98:0d:1b:0b:42:a2:84:11:d0:f8:80:
         ba:b2:90:51:3d:f8:95:c4:a7:92:be:08:56:5b:58:7f:24:73:
         f9:b7:ed:0d:12:02:90:19:e8:34:54:6b:fd:4a:4b:74:7a:c7:
         c0:e2:53:45:e6:fc:f6:0f:d1:9d:6a:54:a6:eb:f9:70:10:76:
         00:bc:1e:1c:35:4f:b2:6a:99:ca:48:cc:a0:eb:19:a8:4e:68:
         3b:f1:4c:51:57:9c:22:ca:6e:6c:21:29:bc:ed:ba:2c:1f:36:
         18:d3:02:4f:28:12:08:c2:2f:06:1d:5a:5b:6c:12:7b:9c:f7:
         2c:b6:cf:49:fd:48:12:96:53:77:60:b4:cf:1f:90:5d:83:25:
         1d:ff:9c:2f:54:e4:f6:56:19:a2:c7:6e:f5:50:e0:68:72:e0:
         73:10:31:e1:f6:94:7c:32:c6:70:55:32:ad:15:17:83:24:2e:
         91:8b:c0:12:fc:0a:7c:86:47:be:11:24:d6:56:c9:72:08:5b:
         4e:77:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:23 2024 by rpki-client on console-fra.rpki-client.org