Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File:                     fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier:          BGGi0Kcox+J4gpPsQwGNV+xNzFNk4Xuyiv2u3l7hLwY=
Subject key identifier:   0E:DB:7B:11:ED:8C:70:84:0C:4A:5A:05:4B:F3:42:15:F0:F1:5B:75
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer:       /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial:       01901F34583F0FB11ED8F19C1DA75D18B6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number:          08D9
Signing time:             Sun 16 Jun 2024 04:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:42 +0000
Files and hashes:         1: 40eKQ4JJEjLGieuTPrhtiOzkupo.roa (hash: im6RkZYz30arlP7VndhpX0PvhrnxoIGRcl2NhizQJpU=)
                          2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: BuU+wMuvfx6tUSEeCmQC9ZyHEVLQRiw4pI1hL8cblXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:58:3f:0f:b1:1e:d8:f1:9c:1d:a7:5d:18:b6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
        Validity
            Not Before: Jun 16 04:00:42 2024 GMT
            Not After : Jun 17 04:00:42 2024 GMT
        Subject: CN=0edb7b11ed8c70840c4a5a054bf34215f0f15b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:15:30:3a:d9:87:4c:ea:d9:15:49:7c:8e:
                    f9:d0:b0:b0:e2:87:20:83:01:c2:4a:7c:53:08:13:
                    64:b8:11:c7:fc:88:6b:53:fb:d5:9c:db:93:76:a9:
                    a6:7e:89:b5:b5:f2:eb:d2:16:3d:43:86:90:85:c1:
                    18:29:db:c7:35:a1:20:bc:e6:09:e2:7e:8c:6b:2f:
                    e9:01:8b:e8:85:0e:7f:3a:a7:d8:02:4e:63:86:b3:
                    2b:01:e4:b7:23:ab:bf:15:19:9d:cb:cb:ce:85:f9:
                    7e:24:af:58:91:b4:bb:54:49:9b:6a:ed:85:ee:85:
                    7b:21:46:8d:08:47:e8:52:dd:54:7e:e4:9d:eb:80:
                    19:cc:0f:aa:b7:ad:01:b9:3c:09:23:35:6d:e7:f2:
                    98:cd:71:77:09:92:d8:b8:ed:e1:7c:da:97:56:a0:
                    e0:d2:b8:c0:87:3a:03:5c:65:3c:e3:b3:ab:8b:4a:
                    86:1c:84:83:19:e7:4b:40:39:d2:7e:dd:4d:5a:d3:
                    26:65:94:5c:99:84:b0:c4:0e:49:a1:d6:69:b6:8c:
                    8c:7f:24:31:75:bc:b6:16:22:48:f7:cd:53:90:4e:
                    57:a9:31:3a:d8:33:4a:90:66:c3:c5:49:4d:46:62:
                    17:11:5f:41:32:34:cb:43:5c:20:82:04:8c:bd:2c:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:7B:11:ED:8C:70:84:0C:4A:5A:05:4B:F3:42:15:F0:F1:5B:75
            X509v3 Authority Key Identifier:
                keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d7:e2:b4:25:2f:5a:76:b2:1b:46:c8:28:9f:a7:16:26:45:
         d0:21:9d:c7:1a:50:56:bc:8a:4c:e3:1e:f4:67:b8:0d:b5:33:
         50:45:e5:63:25:90:3e:6a:9c:a0:c9:23:05:70:e4:c0:ff:59:
         72:f5:57:6a:80:a7:fa:55:e2:bd:3c:83:fe:20:c0:4f:1b:7e:
         15:fc:c0:60:22:54:52:7d:02:99:a8:d9:ee:4e:b8:5c:64:ce:
         2d:ef:da:b2:d6:47:17:7b:03:9a:ea:da:c6:18:d9:54:37:d3:
         f3:e1:d4:7c:1c:d1:6b:ac:98:3b:f5:3c:dd:d8:67:65:82:ec:
         4b:02:fa:d3:fd:25:67:2a:51:35:13:c3:01:97:21:b5:5e:a9:
         d7:05:1a:ab:4a:21:da:9f:2c:01:15:29:42:99:dc:1d:93:b5:
         35:c1:eb:02:e0:49:1f:c8:98:55:19:4e:17:96:5e:53:c2:a0:
         fc:23:c4:4a:7d:73:9a:98:37:5c:8e:7f:11:82:fd:ec:2d:4a:
         89:e6:b2:2c:06:e9:ad:62:95:7a:c1:48:02:e6:ac:ab:94:47:
         38:0c:53:34:6d:7d:5d:33:e9:32:97:3d:1d:5e:e5:75:10:ad:
         b0:d6:15:c3:d1:5d:1a:be:c9:90:38:52:a3:cb:ff:a9:ef:8b:
         94:6b:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:38 2024 by rpki-client on console-fra.rpki-client.org