Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File:                     Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier:          GDqotgmCu/s0kC5/rkLFXSBfPmCUuYJHyCpxFrVk29w=
Subject key identifier:   D4:E1:2D:CD:9D:4B:35:CF:D7:9B:63:13:FB:24:DD:DE:2B:E8:69:CA
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer:       /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial:       018F8F703C0BFEB7A2C6EBD123F4D2E04860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number:          0A4B
Signing time:             Sun 19 May 2024 06:00:48 +0000
Manifest this update:     Sun 19 May 2024 06:00:48 +0000
Manifest next update:     Mon 20 May 2024 06:00:48 +0000
Files and hashes:         1: 0Mex44MRoFLHSwNhuaPB71-KtrE.roa (hash: 0WA5s2hWIqvWfDEM8od7DVBlFjOGEc4kvaxiGUeF3kk=)
                          2: F1rvLzKeDSBXys_Gs2aIr-ZvLr8.roa (hash: TzjIJ/UkXckvLpAJGCGOzuibO/RDLi5GqootPOEELjQ=)
                          3: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: UrTF7BD2SkorAk4HSC6uRByBU1tMFyQqaVrrvpr9A30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:70:3c:0b:fe:b7:a2:c6:eb:d1:23:f4:d2:e0:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
        Validity
            Not Before: May 19 06:00:48 2024 GMT
            Not After : May 20 06:00:48 2024 GMT
        Subject: CN=d4e12dcd9d4b35cfd79b6313fb24ddde2be869ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:d7:51:be:0c:1e:ae:ac:05:2b:8f:ee:7e:
                    22:b7:3f:1b:d9:09:85:4b:ad:15:b0:52:0e:b2:09:
                    e6:91:89:6a:19:19:9d:0b:4d:db:55:66:28:30:40:
                    76:30:05:34:4f:c4:ec:fe:31:3a:c7:c6:c1:dc:05:
                    1d:43:42:5f:b1:6a:ac:ad:0e:6d:5b:3b:fa:db:21:
                    a0:72:9b:0e:41:28:85:58:d8:26:6e:ca:0b:01:b7:
                    f9:6e:55:43:7f:1d:b2:a9:7d:3e:67:7c:d1:1a:5c:
                    3f:b4:4c:a6:bf:28:f1:2d:e3:bf:cf:fe:c8:4e:85:
                    fb:7c:57:d6:5f:47:1d:83:2c:cb:ff:55:04:7a:5c:
                    90:92:d4:2d:4a:31:bd:e0:bc:a6:ea:07:48:ce:a3:
                    36:ef:a9:c9:cd:fd:6d:e0:b2:f2:06:27:2b:f0:fe:
                    71:49:e9:60:f3:d0:68:63:6a:d9:bb:da:cc:cc:0f:
                    01:a3:18:b8:d0:7d:2f:32:80:6c:ea:32:c0:72:62:
                    1c:84:23:8b:27:a8:65:ea:69:e0:6f:f3:8d:b5:72:
                    b6:f3:a5:31:c3:7d:81:b9:67:c7:9b:45:9f:e2:3b:
                    a7:89:9f:3a:10:8b:bd:37:91:82:06:5a:6c:53:aa:
                    e4:ff:12:68:c7:8e:2f:b7:cb:d5:2e:8d:e3:97:a0:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E1:2D:CD:9D:4B:35:CF:D7:9B:63:13:FB:24:DD:DE:2B:E8:69:CA
            X509v3 Authority Key Identifier:
                keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:8e:a5:c3:5b:6b:02:2e:9d:9e:7a:21:88:d6:61:70:2d:
         21:d2:b3:96:6e:55:c6:f0:38:47:28:f7:65:50:53:06:46:68:
         e1:ca:a2:10:6b:6f:67:e2:8d:fb:09:90:d5:5e:13:c8:03:c3:
         df:59:dd:29:f3:7e:2b:e0:cc:df:00:a7:fa:ec:c2:31:05:32:
         0f:8f:69:74:11:be:88:3e:79:06:fb:0d:52:6c:8d:c7:30:2e:
         b9:71:fa:f1:75:cb:c1:3d:65:b4:87:d8:6d:58:a4:3e:90:c7:
         55:f6:60:d0:a9:f7:5e:ea:e7:2d:80:43:c8:03:49:ab:37:44:
         bc:6d:eb:0c:cb:e8:af:9b:38:2e:94:6d:66:3e:9d:e8:c9:4e:
         dc:d5:e0:9c:00:11:93:2c:8a:6c:fd:21:64:2f:15:e3:74:42:
         64:39:30:f0:4b:1a:00:6e:a9:b0:e3:33:ab:94:bf:33:19:fb:
         45:15:15:3b:60:de:e2:04:61:8b:e9:21:ab:1a:b6:8f:e9:59:
         fc:44:c3:3b:39:11:44:68:ca:0a:a6:94:d6:6b:6b:c1:25:c6:
         84:f6:c1:f9:e8:77:79:8c:73:83:55:82:26:96:2c:b8:47:2f:
         51:75:d7:1c:76:31:eb:8d:27:b2:d2:3a:b8:79:e9:d9:fe:75:
         22:50:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:10:30 2024 by rpki-client on console-ams.rpki-client.org