Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File:                     ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier:          PNjVfT8/Gr3wWkFOiScw9yvUaY1tROjiGuvgXhTFi9Q=
Subject key identifier:   36:96:BD:B0:A0:8F:CF:83:6F:62:F5:0B:D3:17:7A:52:89:7F:7E:A7
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer:       /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial:       01901DEAE651F28061ADFAE7AFC1E04B30D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number:          0953
Signing time:             Sat 15 Jun 2024 22:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:51 +0000
Files and hashes:         1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: vvxVsrMvH4KK+y4C88u1IvdvH5fMjK1bhE7mBo12RSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:e6:51:f2:80:61:ad:fa:e7:af:c1:e0:4b:30:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
        Validity
            Not Before: Jun 15 22:00:51 2024 GMT
            Not After : Jun 16 22:00:51 2024 GMT
        Subject: CN=3696bdb0a08fcf836f62f50bd3177a52897f7ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:03:f4:42:36:0f:4f:d0:59:f6:f1:be:47:
                    a3:34:06:5f:d0:4a:7d:21:72:a5:cc:a7:ad:14:00:
                    8a:28:a9:a2:60:26:7b:b5:b9:15:b6:9c:46:f4:98:
                    a0:75:9f:a6:a1:23:74:5e:47:0b:be:87:9b:65:ba:
                    1a:69:55:d4:40:4d:c8:f9:64:6b:87:ee:9f:4f:4c:
                    61:84:e4:2f:96:71:18:a7:19:46:85:c3:77:b0:b8:
                    e3:38:62:ea:3c:3c:f3:de:76:0c:f0:54:d9:69:bb:
                    fb:65:39:47:e3:d0:02:92:8b:03:8b:e0:71:9b:1e:
                    c2:b5:51:16:8c:11:c2:f0:1e:5c:12:94:ec:53:2f:
                    2a:d7:df:77:74:56:b0:8d:21:c1:22:0d:2e:be:4b:
                    39:e0:0c:5d:c5:45:e0:9d:b3:50:24:c8:20:21:60:
                    03:68:63:9b:71:ae:45:c2:19:90:b7:5c:b7:06:78:
                    a5:1b:4b:d1:3f:5e:fe:a3:e7:08:e6:a8:11:2f:78:
                    05:6c:5f:35:cb:21:73:c6:83:b6:0a:b3:0d:f3:d4:
                    2e:8f:ad:8f:ef:a6:92:7e:e5:5b:ce:e7:85:e6:8a:
                    76:ec:08:d0:72:89:36:52:9e:9e:4a:a3:c9:d8:21:
                    1e:41:02:b2:a5:4d:ef:57:98:9d:ba:9d:87:5f:b1:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:96:BD:B0:A0:8F:CF:83:6F:62:F5:0B:D3:17:7A:52:89:7F:7E:A7
            X509v3 Authority Key Identifier:
                keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:7a:6a:3b:97:8a:9b:48:62:ec:ac:11:a8:5e:63:54:e2:
         6b:10:f4:3e:59:aa:b6:12:00:6e:2c:fb:f0:5c:25:15:2f:15:
         87:fa:d1:b8:0e:2b:d3:99:3c:33:61:ea:da:cd:c1:fa:68:e4:
         69:06:e8:c4:14:3d:8b:be:c1:d8:29:77:74:0e:5c:3d:dc:2d:
         58:07:77:3f:12:f1:f6:75:78:c3:d7:6c:6f:97:4d:10:0c:8e:
         1f:78:e2:22:12:c4:77:e4:82:1c:a5:69:34:b3:56:30:a9:e0:
         98:be:d2:d8:9a:82:2a:1a:ab:5b:96:31:ff:56:df:4f:0d:e5:
         f7:2c:36:0a:4e:9d:fd:15:20:93:69:df:40:11:ae:27:7f:3c:
         63:18:34:3a:fb:28:74:97:4f:09:9f:e5:49:1b:0d:fa:39:01:
         3a:e6:f0:92:b2:f7:a2:31:51:83:a3:5d:ec:d2:63:84:d2:48:
         f3:fc:f0:73:de:61:60:72:be:30:90:0b:43:f9:79:35:39:0a:
         1e:43:51:16:60:19:35:4e:b2:ba:8a:36:6b:da:d9:aa:1d:94:
         91:de:66:2f:a4:97:d3:d7:ba:ed:12:16:43:a1:2a:c0:68:78:
         84:fb:60:a8:58:7d:de:99:01:56:65:2d:6f:d9:b7:e6:0a:58:
         a1:41:25:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:35:03 2024 by rpki-client on console-ams.rpki-client.org