Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File:                     15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier:          AJP0/o19VnVIc6UIeEvYYUklfbjQ78r0IcWzfB/FTf8=
Subject key identifier:   D7:C6:95:19:89:A6:74:3A:CB:32:10:F0:EC:01:D3:CF:E8:A5:E0:6D
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer:       /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial:       01901C6A974A03AACF5F84E419B60BAFBCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number:          0245
Signing time:             Sat 15 Jun 2024 15:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:05 +0000
Files and hashes:         1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: mrzFiojflaC715/TTQ6VqhNdDfID2XI9TsmB6QlQRZo=)
                          2: 2ySkL2qL_FgkdTeGQ1hmgpMmPNE.roa (hash: BQKgclTUvTPSmzy2UisilQ8q5HohxKH+c7EOze1Ddbg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:97:4a:03:aa:cf:5f:84:e4:19:b6:0b:af:bc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
        Validity
            Not Before: Jun 15 15:01:05 2024 GMT
            Not After : Jun 16 15:01:05 2024 GMT
        Subject: CN=d7c6951989a6743acb3210f0ec01d3cfe8a5e06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:0b:64:51:af:c1:3f:50:8b:ca:19:c9:28:
                    e2:63:d5:d9:9d:1a:37:77:bd:b0:cf:90:87:5a:e4:
                    a6:e3:39:24:3e:9b:42:92:03:d7:e2:fa:30:40:97:
                    de:f6:c1:03:06:71:d2:95:e3:5a:bc:59:bc:3f:07:
                    52:bd:50:73:f4:08:2a:55:b1:45:83:44:85:5c:38:
                    42:f6:cc:39:50:09:72:2b:79:f0:70:a5:83:bc:78:
                    80:e8:d7:f0:9d:51:fe:4e:d0:44:fa:bb:cd:e4:22:
                    61:13:26:73:de:06:f6:d2:46:78:e3:b7:47:fc:1d:
                    d4:0c:a0:cc:fc:f5:5c:c9:59:3e:c1:8e:1c:ed:03:
                    2e:54:64:72:64:01:46:51:32:cd:29:f5:3e:00:79:
                    dd:77:50:c9:d5:0f:b5:24:43:9c:ab:59:1f:66:f8:
                    20:22:0b:e9:91:15:01:90:a6:96:38:ff:ba:8c:08:
                    ea:09:28:64:e7:10:d0:6a:c1:db:a6:9f:62:79:84:
                    89:2c:ea:c6:30:e3:73:0b:38:10:90:31:e9:5a:8d:
                    0b:0d:58:97:9b:61:3d:e6:5c:56:74:8b:50:73:10:
                    2b:2b:42:47:72:35:4b:34:45:d4:97:97:ba:7e:89:
                    60:22:84:10:e0:13:ba:d0:de:5e:2c:f1:6e:f9:01:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:95:19:89:A6:74:3A:CB:32:10:F0:EC:01:D3:CF:E8:A5:E0:6D
            X509v3 Authority Key Identifier:
                keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:14:d7:94:bf:a7:20:82:94:7e:40:b7:8a:80:56:a3:ba:
         16:9b:65:28:34:09:a4:ac:59:e2:26:3d:2d:4b:3d:86:90:18:
         5d:6e:ea:07:9b:10:ea:69:48:11:61:41:86:0b:70:ed:47:1e:
         35:5b:03:6c:00:6f:c5:21:fe:1c:93:31:c8:24:73:ce:5b:85:
         1c:eb:85:7b:2c:1b:67:b4:a1:07:2a:42:e3:14:f1:1c:8e:b7:
         83:fb:ad:0b:3f:e7:d9:cc:08:f4:1d:a5:3d:25:79:a4:9c:bd:
         c2:ba:f7:a5:6b:00:79:5a:7b:23:27:5d:a0:ff:d4:fe:33:5c:
         b0:67:36:f9:cf:f5:ec:8a:3b:21:52:58:43:fc:20:6d:71:47:
         ca:0b:a8:41:db:7d:f2:86:f5:42:7c:8e:f7:89:dc:65:04:56:
         1b:0f:ad:c8:8e:52:03:4c:4f:fc:b6:44:c3:37:e9:a1:e4:56:
         14:41:4f:51:bd:c3:03:2d:a4:3c:f1:2f:12:1f:12:24:f9:1c:
         22:f2:78:bd:7b:13:1c:2f:b6:3e:24:30:64:26:7d:97:1e:53:
         5c:9a:d0:8f:ec:84:2b:40:2b:c3:13:f7:09:6b:19:7a:f6:c5:
         5a:21:5f:7f:57:06:44:5a:1b:26:78:dd:dc:c8:22:d6:ee:ed:
         91:71:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:35:15 2024 by rpki-client on console-ams.rpki-client.org