Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File:                     1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier:          /9AZPDV+BEUMW0MinrT+AbT4rGGdkiCl71qiPoj0OLI=
Subject key identifier:   15:6A:23:C3:E5:93:FB:92:4A:58:5E:AD:6C:86:3C:90:78:15:48:22
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer:       /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial:       01901DEAFF20A8A1D11A9F97100BFBBA0105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number:          1159
Signing time:             Sat 15 Jun 2024 22:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:58 +0000
Files and hashes:         1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: f+ehhBnQ70JJYcMLIhx+x7mky0zNxNmZQ1ukxNyhkMM=)
                          2: S-Y0C7F9cfOt_lEfPSBf4khUPRQ.roa (hash: 0+EEYM3V598fmGLxiSFOJuJ1CXpFmYOTFZhNam/jw5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ff:20:a8:a1:d1:1a:9f:97:10:0b:fb:ba:01:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
        Validity
            Not Before: Jun 15 22:00:58 2024 GMT
            Not After : Jun 16 22:00:58 2024 GMT
        Subject: CN=156a23c3e593fb924a585ead6c863c9078154822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:1c:41:34:dc:2d:7d:c8:8f:35:48:56:c5:
                    27:65:f1:eb:84:e1:33:64:59:01:51:ea:e3:54:00:
                    62:18:3b:11:c6:3f:77:cd:ff:a8:8a:fe:1b:d8:4f:
                    59:1f:8e:95:85:8e:aa:a9:49:5f:46:6c:c2:be:a5:
                    1b:5d:93:bd:9f:63:f2:a4:2f:8f:56:f6:e3:b7:76:
                    5a:b1:34:f2:d4:a9:c8:9a:40:b0:24:45:d1:ff:3b:
                    98:0b:d8:aa:55:79:81:d7:c1:24:db:71:a0:5c:44:
                    c8:ef:42:be:bf:2a:e2:9a:dc:22:a9:f6:b1:23:e5:
                    73:ba:6f:1e:c0:98:6b:b3:b5:bc:23:a6:ac:5c:23:
                    3b:83:62:c8:5f:a2:cb:6c:89:50:b7:05:5a:7c:48:
                    16:07:e0:66:67:2b:14:6c:b6:6e:5c:da:c2:55:fa:
                    6f:81:51:37:ba:2a:9d:bc:84:00:9e:ea:3b:bd:61:
                    84:1a:d4:2d:ec:a3:7b:5b:45:35:c4:c3:c1:ea:35:
                    71:6d:66:74:9a:25:d3:43:50:49:5d:3b:c6:1c:8f:
                    7a:62:ec:a6:3e:49:1b:7f:ff:5b:de:0b:ef:3a:50:
                    23:84:59:88:ae:eb:e2:dc:31:18:4a:7a:3e:85:86:
                    d1:13:91:27:b8:86:4e:63:dc:08:28:84:47:3c:12:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6A:23:C3:E5:93:FB:92:4A:58:5E:AD:6C:86:3C:90:78:15:48:22
            X509v3 Authority Key Identifier:
                keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:73:f7:74:ff:5d:99:23:92:5a:25:33:65:2d:c7:b9:ac:
         68:6c:a5:ac:47:f0:5b:e4:1d:e1:65:3a:7e:fc:8b:c0:2a:1c:
         20:66:dc:4d:53:d2:f3:56:2f:03:00:97:ec:4d:ff:0f:ac:b4:
         17:e0:aa:e7:2d:44:54:00:db:71:d2:32:f9:a9:5b:b6:22:96:
         c6:d1:b9:a3:63:6d:76:26:fe:78:88:5f:32:75:f5:5c:57:44:
         ed:70:e5:2b:a2:87:1d:c2:b7:fc:f1:00:83:ee:a0:4d:15:85:
         04:52:b7:ef:29:1b:a5:8e:e2:15:08:5e:b1:bc:9d:36:2d:9a:
         35:e0:01:c3:a9:50:ab:20:c9:1f:a2:e6:9c:1a:0f:cf:b5:45:
         1e:34:76:d2:44:17:ac:d0:5b:d2:ee:8a:49:10:ca:70:29:26:
         59:ca:1f:ca:fa:09:8b:a0:5f:5d:7a:65:76:6f:dc:de:e9:5d:
         a4:cd:08:37:bb:d0:1e:52:cb:58:5e:73:87:6a:00:66:bc:76:
         3c:4a:16:33:54:d4:48:6a:13:7d:93:c9:a5:95:95:4b:93:e7:
         81:0e:4b:bd:ed:e5:62:e0:40:85:c5:a5:2c:54:5c:c3:a0:f0:
         fb:fb:e8:16:84:95:43:62:d3:8a:b8:4c:e3:48:9f:68:75:3e:
         37:5f:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:00 2024 by rpki-client on console-ams.rpki-client.org