Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File:                     FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier:          mbAnk4VQDbjTqbcm7AvyirUjbOXnSXewGnyJbqk0j+A=
Subject key identifier:   7D:DD:2D:31:7F:A2:C1:F7:D1:DE:E6:25:62:98:43:AF:E0:5D:74:6F
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer:       /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial:       01901D0F16E761CE3D064D0F3F6A35735FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number:          0A4B
Signing time:             Sat 15 Jun 2024 18:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:46 +0000
Files and hashes:         1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: x1R5NN80UYHVSirAivI7ly0QNAREXpHthpA//JbTLZY=)
                          2: GAnBcsaOYglC_8Zoq-_h__bWrtQ.roa (hash: Km/dmh7oLdeIkcIqFI9xW3jLc4fH79jBoqnP1WQgnlM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:16:e7:61:ce:3d:06:4d:0f:3f:6a:35:73:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
        Validity
            Not Before: Jun 15 18:00:46 2024 GMT
            Not After : Jun 16 18:00:46 2024 GMT
        Subject: CN=7ddd2d317fa2c1f7d1dee625629843afe05d746f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b6:34:a1:a9:53:0d:56:0e:3a:38:03:79:55:
                    c6:0f:80:40:71:8d:ce:14:f0:26:ab:bf:21:a0:2e:
                    51:fe:3d:14:68:e2:20:46:e2:18:e2:17:79:5d:57:
                    77:80:ef:b1:8a:02:a2:b7:c3:b4:25:78:29:ed:57:
                    e4:c6:b2:e4:12:2a:71:9b:4d:66:12:75:57:76:1d:
                    c2:ae:87:63:ce:0f:7b:f9:d8:c6:29:63:ee:a4:37:
                    b4:d9:7e:13:90:24:d0:20:42:59:d3:e2:67:95:20:
                    f1:59:de:11:f0:18:30:75:3a:56:bd:6c:49:1e:f5:
                    43:79:4e:37:01:44:08:be:0e:71:b9:61:e4:2f:00:
                    a8:55:71:70:8f:31:13:54:5a:9d:e4:08:0a:f4:84:
                    0f:7b:c9:1e:d6:9e:1b:eb:8a:29:52:2c:79:6a:5f:
                    07:93:23:7e:79:da:98:a0:27:87:f4:ca:95:ea:41:
                    39:b9:9c:c3:41:44:35:fc:6d:4a:35:6f:ae:72:74:
                    1f:48:fe:e4:9c:20:c4:aa:9f:7a:98:eb:1b:6c:b1:
                    fe:df:1f:8e:47:7c:f7:e5:fc:95:30:da:d7:c1:f7:
                    55:28:77:25:e5:de:6f:97:36:ae:dc:df:86:18:53:
                    c6:7c:f5:f4:99:ab:ff:cb:86:4a:c5:06:86:90:07:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DD:2D:31:7F:A2:C1:F7:D1:DE:E6:25:62:98:43:AF:E0:5D:74:6F
            X509v3 Authority Key Identifier:
                keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4a:b8:c0:8b:72:8d:f1:be:bb:1b:8a:02:0d:7e:a9:84:1e:
         63:6f:32:ac:27:f1:5d:18:71:de:88:61:62:fe:35:1e:a5:86:
         3d:20:85:24:4d:97:c5:c1:df:75:39:4f:32:7d:9f:60:c9:a0:
         02:d7:cd:17:63:be:b6:c2:04:fc:de:b6:aa:ae:51:b9:e0:ea:
         6c:aa:4b:27:07:1e:32:0b:10:94:6e:07:04:72:d3:94:25:72:
         35:6d:eb:73:6a:79:d0:ab:62:ea:7e:d0:5d:fe:4b:51:49:84:
         1a:7d:aa:d8:5c:9b:7d:6b:df:b8:8b:e9:6f:b6:91:c6:13:5d:
         47:e2:54:c7:46:99:a2:5d:f1:da:0a:2a:a9:8c:b7:c9:b5:6f:
         1c:cc:55:f5:64:4a:7f:40:75:8b:8f:14:e2:a7:6d:c3:7c:c8:
         b8:3d:28:29:e6:7c:6d:a8:cf:43:bb:23:bb:41:65:83:c4:be:
         aa:8a:ba:32:c5:82:e6:20:e0:2d:d3:f5:0b:80:b6:1a:b3:9d:
         db:c8:14:3f:88:aa:97:84:a0:67:0f:ef:23:84:38:7b:bd:39:
         9d:f8:85:51:b3:67:6a:27:44:7f:2a:a8:1a:30:fa:13:2f:db:
         26:67:7a:0c:9f:89:c1:50:26:e9:0e:8d:73:38:ec:1e:84:97:
         ed:1d:c5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:15:31 2024 by rpki-client on console-ams.rpki-client.org