Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File:                     ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier:          imfSC7RxHpBAJMDP0Hyg/5vxlYSmszYnklhcOv3Xzns=
Subject key identifier:   59:C9:48:D8:26:29:A7:9C:EE:85:48:4E:88:3F:5A:23:8C:95:E4:D6
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer:       /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial:       019040B020F8C11B1FBEEBE77775853324AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number:          0965
Signing time:             Sat 22 Jun 2024 16:03:22 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:22 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:22 +0000
Files and hashes:         1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: HDZAzgjrsHdCpgUK09CODogxSabxQBW9KYVJ2dDTgx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:20:f8:c1:1b:1f:be:eb:e7:77:75:85:33:24:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
        Validity
            Not Before: Jun 22 16:03:22 2024 GMT
            Not After : Jun 23 16:03:22 2024 GMT
        Subject: CN=59c948d82629a79cee85484e883f5a238c95e4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:3b:d1:e3:6b:f7:7e:fa:01:68:2a:a7:ea:
                    bb:41:fd:91:ba:94:d0:e5:f2:9e:fe:8b:36:2b:1d:
                    5e:82:72:45:87:4a:c2:b8:85:b9:5d:a3:02:6f:34:
                    c9:1b:69:d2:2a:da:b8:63:9a:b2:55:fa:6e:03:fd:
                    c2:9b:6f:83:c0:b5:8c:c0:4a:3f:bb:8f:aa:50:f1:
                    90:ba:fc:fe:8d:8a:7e:ff:53:b7:1f:46:5f:3f:35:
                    7d:e6:ae:e2:a9:4f:c2:1e:c1:e6:ff:44:aa:08:5b:
                    dd:bc:eb:84:5c:dd:ca:e8:cf:14:e2:92:2e:84:4d:
                    09:c1:75:5a:ef:24:79:64:f2:25:51:75:05:6a:ff:
                    62:63:23:3b:8c:d7:6f:49:8a:64:f0:7c:15:cb:a5:
                    63:64:ed:d8:41:e9:37:d0:81:85:fa:ff:e1:14:4d:
                    c8:aa:d9:1e:d5:90:db:7a:a1:e6:1e:3c:97:62:12:
                    79:39:c8:4d:d6:5a:5e:a5:ae:fa:1b:fb:31:8d:60:
                    68:da:25:03:5d:1d:e8:70:6b:b3:e7:ff:eb:0d:a7:
                    6f:f1:2c:de:0b:61:76:09:3f:b0:1b:15:3f:c4:1e:
                    41:40:0c:24:ba:b4:08:f6:99:18:dd:1e:7a:8f:f5:
                    62:3e:f7:f0:22:50:24:b8:43:8f:d3:3e:16:79:25:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C9:48:D8:26:29:A7:9C:EE:85:48:4E:88:3F:5A:23:8C:95:E4:D6
            X509v3 Authority Key Identifier:
                keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:35:34:5a:5f:1f:ff:16:0c:8d:6d:1e:82:87:f9:58:db:
         39:9a:0d:15:c5:dc:10:c5:29:e9:cf:c4:df:66:47:8b:81:bc:
         f8:7e:47:ed:7a:9d:55:72:c1:1b:64:3c:28:0d:92:f3:e3:9b:
         59:48:f8:6f:ec:a6:a9:05:85:85:f4:eb:d8:62:d4:dd:49:b8:
         8a:ae:74:fb:ed:1b:31:ec:23:ae:51:52:6b:18:1c:94:b4:e4:
         55:72:00:c8:91:a9:d9:82:51:f4:33:f2:95:5d:66:88:bb:69:
         0c:db:bb:90:ac:0d:7a:63:b4:17:35:25:56:a3:98:67:af:96:
         2f:47:9a:0c:ae:a2:ac:26:6d:d4:6c:7d:a7:cd:8f:3f:3d:2b:
         8e:ce:82:3a:4f:b3:ed:22:45:44:46:66:7a:f4:13:6b:8f:c6:
         52:0a:f5:6e:b4:d9:24:cb:54:98:ff:97:79:15:9c:a7:8b:3d:
         22:10:fc:99:a5:a4:93:7f:8b:3a:db:f9:17:20:f6:a8:23:00:
         2e:cf:61:10:10:08:24:57:2f:62:4c:86:cc:4d:f9:d4:57:ea:
         83:06:a4:00:27:71:0f:e6:2a:24:d8:b1:87:cf:dc:5a:b5:94:
         d1:a9:b7:b8:4b:e5:47:23:b6:06:81:c2:0c:6a:c2:59:3c:94:
         b5:4e:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:24:18 2024 by rpki-client on console-ams.rpki-client.org