Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
File:                     FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json)
Hash identifier:          nFGvGnxhGhJ021tiDVd/pDjlLBWudqjMecnePxENO2o=
Subject key identifier:   41:4E:F5:BA:8B:32:AD:20:6B:52:F4:89:80:1E:D3:1A:D3:1F:B1:AC
Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
Certificate issuer:       /CN=1532415c319fad65875bd1aa035a55888ceb733e
Certificate serial:       01901DEC0A6A100C7F0B9C6BFC7603B12AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
Manifest number:          11A0
Signing time:             Sat 15 Jun 2024 22:02:06 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:06 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:06 +0000
Files and hashes:         1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: kd98mITwupK+Pa506bWk+7+AULZaZJ4p7w/BXFNi3I0=)
                          2: zVSRtl3M-BUN9rLzv4udQo20uOY.roa (hash: nW8eZ2PRIx3zDV30UgDIZFnf/xjSp5ofccE6zlSSBgs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:0a:6a:10:0c:7f:0b:9c:6b:fc:76:03:b1:2a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e
        Validity
            Not Before: Jun 15 22:02:06 2024 GMT
            Not After : Jun 16 22:02:06 2024 GMT
        Subject: CN=414ef5ba8b32ad206b52f489801ed31ad31fb1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:9a:3e:f9:7c:f1:32:34:fe:8f:d1:8b:c7:
                    fd:94:c5:6d:d1:32:51:20:ea:9c:5c:d0:fa:d0:e4:
                    5d:8e:54:32:de:27:13:83:39:c5:a1:29:c4:ac:9e:
                    48:d7:af:6a:72:63:ee:d4:60:99:6a:5f:06:a3:fc:
                    8c:ed:b7:ae:91:74:56:8c:1b:d1:a1:0c:d3:20:29:
                    f3:26:99:6b:b4:97:9e:32:27:d0:1a:4d:d8:c6:76:
                    21:a7:55:14:94:3b:cc:42:d9:ed:25:53:38:07:8f:
                    60:d4:97:5f:dd:a0:e7:33:e4:81:a4:9d:fd:77:71:
                    d2:03:13:81:a2:7e:0b:13:bb:1c:fb:09:6e:db:cd:
                    a7:44:e3:71:97:8f:ff:4f:29:c2:fe:a2:a2:ac:66:
                    24:53:8e:eb:61:49:ac:ea:e4:84:fa:30:dd:30:d5:
                    6d:b3:6a:a0:5f:14:64:81:5b:36:00:1d:90:e4:9c:
                    99:3b:27:f9:b7:33:97:06:b1:40:ed:d7:67:59:c9:
                    67:24:7e:e9:06:f1:94:99:f1:f5:0a:bf:23:b4:42:
                    62:2e:86:53:dc:1e:26:78:de:ca:5a:7e:40:87:9c:
                    3f:64:9f:7f:81:bf:01:89:39:79:76:b2:2c:20:96:
                    2b:81:d8:fd:aa:15:6d:15:92:0c:4f:7c:9c:c8:8d:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4E:F5:BA:8B:32:AD:20:6B:52:F4:89:80:1E:D3:1A:D3:1F:B1:AC
            X509v3 Authority Key Identifier:
                keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a8:85:3f:36:40:7b:cc:cd:9d:46:eb:83:94:54:09:fa:53:
         85:2d:0d:4c:ef:1a:df:e7:af:2e:11:e9:fe:5b:76:f6:34:74:
         ed:4e:46:97:56:2b:39:47:b0:eb:aa:4d:ec:d5:e2:6c:15:60:
         d8:10:07:58:35:e6:27:d0:14:be:9a:d0:76:e0:01:c6:6b:84:
         f1:ff:4f:c3:a7:6e:27:37:23:f0:3d:e0:c3:82:37:f7:f6:d7:
         73:0d:bd:ce:7e:0a:1b:0d:13:09:03:70:e6:99:b4:09:76:c9:
         a3:90:ee:2b:2f:6e:00:2c:3f:4b:07:e6:60:5d:63:00:a2:55:
         c5:0d:99:af:e5:e9:6e:3d:40:a5:68:36:ea:ac:22:a3:7c:1e:
         5d:65:ec:60:92:c7:f4:67:f0:68:4c:f0:3e:eb:ee:24:a5:bd:
         71:7d:21:07:d1:51:4f:ef:bd:cc:a4:fa:25:40:d9:ba:89:91:
         e3:5d:2a:74:46:76:5b:da:9b:96:bd:d2:ed:f8:18:eb:2b:f3:
         f1:60:79:80:42:4e:c1:76:26:7b:56:cf:51:2b:fa:81:de:ad:
         65:56:96:b1:e4:ee:ab:e0:ef:8f:65:3c:50:4a:a9:db:f8:0c:
         46:d4:81:79:b0:bc:1a:bc:70:de:a5:f6:94:0a:31:5e:df:9c:
         69:ce:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:33 2024 by rpki-client on console-fra.rpki-client.org