Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
File:                     FTD76iUBSVl304gVrTwnCCbwY6A.mft (raw, json)
Hash identifier:          4XO8+T3VC/9WPhMftMiMWKSinT/pEWqM3pawOwjcAJw=
Subject key identifier:   87:D6:6E:A8:2B:80:75:C2:CC:06:C2:B0:86:2D:5F:01:C8:E9:C3:51
Authority key identifier: 15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
Certificate issuer:       /CN=1530fbea2501495977d38815ad3c270826f063a0
Certificate serial:       01901D0F43522AFCC20BC95315693561CFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 18:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:57 +0000
Files and hashes:         1: FTD76iUBSVl304gVrTwnCCbwY6A.crl (hash: xxmL3QPzU0nL323/6hKwqRSL7C86FLDXR6EPo4nIL6I=)
                          2: LLtzq4Kl8IjeImB6lumfuNP43dU.roa (hash: m/lOe4OPzZqQj8m0aDLsSooyH5ea2bDkC6kLnC46Z88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:43:52:2a:fc:c2:0b:c9:53:15:69:35:61:cf:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530fbea2501495977d38815ad3c270826f063a0
        Validity
            Not Before: Jun 15 18:00:57 2024 GMT
            Not After : Jun 16 18:00:57 2024 GMT
        Subject: CN=87d66ea82b8075c2cc06c2b0862d5f01c8e9c351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:b1:97:75:fa:61:68:b3:4b:57:77:55:12:
                    e1:56:30:69:7f:89:06:be:40:b1:f4:d5:1d:29:40:
                    4e:ca:01:db:3c:77:65:e7:d8:26:ce:99:da:05:98:
                    70:23:1c:b7:ce:b8:1e:d7:29:ff:fe:1c:88:b6:3f:
                    cd:33:69:9a:d5:14:7e:35:b5:99:00:25:13:e9:a4:
                    a6:71:ac:60:7b:d0:56:b0:5d:11:41:f5:28:82:b4:
                    60:f1:27:97:11:39:20:51:e6:2d:43:46:29:46:78:
                    25:be:70:92:76:98:a8:c5:1c:c7:09:17:bc:1b:ac:
                    f6:09:d0:99:66:86:49:93:75:1b:3e:52:a8:c3:22:
                    65:eb:f6:d2:84:3d:fd:a7:b8:fb:35:b4:22:8d:ee:
                    92:3f:f0:a7:4b:f0:80:04:a6:56:02:43:14:f3:df:
                    c7:9e:4a:69:99:5f:e6:b8:4b:60:3a:37:99:7c:7a:
                    b1:fc:1b:ab:ba:f7:6c:ae:07:ee:a0:fe:9e:67:1b:
                    11:dd:c0:79:2c:8a:d3:42:c2:df:0d:f0:f0:db:da:
                    cd:8a:f4:6f:8d:e8:dc:77:00:78:a6:13:5a:d9:05:
                    cc:ca:a7:64:74:cf:83:70:81:c3:3a:d4:07:d6:8a:
                    2f:0e:39:c9:0b:78:f6:9d:15:f5:1b:4f:e9:8f:74:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D6:6E:A8:2B:80:75:C2:CC:06:C2:B0:86:2D:5F:01:C8:E9:C3:51
            X509v3 Authority Key Identifier:
                keyid:15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:ca:4d:b0:b0:9c:89:60:d2:42:27:d9:ee:03:58:73:94:
         7a:a2:26:a4:9c:bb:58:5b:4f:d8:ff:6e:76:f9:e2:86:f7:95:
         b4:63:a1:05:b4:b8:7e:6a:68:aa:2d:f4:c7:2a:32:60:4d:ce:
         38:5f:86:8d:87:f1:d3:d6:07:02:a4:97:5a:80:ec:bc:0e:bb:
         c9:7f:1f:67:cf:08:2b:51:4c:48:d3:63:2f:56:04:19:2f:ee:
         ac:dc:af:c0:51:90:12:2e:48:8e:2c:00:14:14:20:5c:e1:4a:
         43:e1:50:70:52:b5:6c:64:aa:82:d9:ec:24:1d:76:19:13:c1:
         7f:67:c6:b0:5f:aa:07:06:7d:14:92:f5:38:52:cb:3b:05:88:
         a8:22:dd:ac:ea:93:40:cd:85:3b:59:0f:e5:13:4d:47:a5:10:
         b1:f5:ff:bb:37:8d:0d:c2:ad:cc:0d:8b:ee:ef:e6:02:ce:c2:
         e0:f1:32:96:08:e9:32:b5:e8:0e:17:c0:4c:04:dc:06:ed:31:
         22:c9:96:91:78:a4:d0:ee:12:d2:7e:3e:33:24:ff:c9:03:59:
         ff:ae:fa:4c:06:c0:08:f5:ff:36:59:20:4c:ea:67:d8:1b:c5:
         60:f0:57:0a:1c:f7:f9:3c:28:86:31:18:b2:60:2b:70:52:69:
         ad:bc:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:57:05 2024 by rpki-client on console-fra.rpki-client.org