Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File:                     fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier:          fquG3cdRIGEG6pymGOYDDfH9CuE/dYGgE00OhkYbL3E=
Subject key identifier:   12:30:26:DD:09:15:E5:8C:C7:00:09:77:CD:7E:6A:0A:69:CA:59:7A
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer:       /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial:       01904566E221EE2E1FAE8BF0E1DDA40ADF11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number:          0C49
Signing time:             Sun 23 Jun 2024 14:01:28 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:28 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:28 +0000
Files and hashes:         1: ZUXaWRnpfH9iI3UAzKMBPJF-z9E.roa (hash: sZRzFQSDYOa9JnwDa3fgl7efOc16Hql41Z8+L3YpmQ8=)
                          2: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: 8p+mbrqN87xdzZaDJHT3JUstYsoHjILRSE3WI8LVO/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:e2:21:ee:2e:1f:ae:8b:f0:e1:dd:a4:0a:df:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
        Validity
            Not Before: Jun 23 14:01:28 2024 GMT
            Not After : Jun 24 14:01:28 2024 GMT
        Subject: CN=123026dd0915e58cc7000977cd7e6a0a69ca597a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:9d:20:36:4a:8b:4c:11:5c:e6:73:46:e1:
                    e4:2d:ce:13:81:82:e0:7b:30:0c:29:9a:03:fd:5d:
                    bd:c5:4c:1c:3f:d5:8d:2d:a2:8c:e8:d3:60:c7:e5:
                    0f:64:83:7e:50:4c:ba:d7:ef:d7:fc:e7:57:82:d3:
                    34:da:cf:76:11:fe:66:5d:70:d4:41:94:8e:cd:64:
                    b7:25:b8:95:f9:43:2f:a5:b9:87:1e:a6:b3:90:32:
                    32:60:0a:66:30:6d:28:20:89:ad:54:3d:b3:20:bd:
                    e1:88:22:8d:2f:99:cb:55:71:1b:51:a5:7f:db:ee:
                    e1:18:28:c5:70:21:a9:fa:06:89:35:6b:65:f7:12:
                    91:6f:b4:e2:1d:e8:af:3a:49:0e:29:cd:88:13:5a:
                    e1:e4:b3:42:0f:7d:7f:47:71:38:b9:0b:9e:8c:29:
                    73:d4:b6:a9:d7:92:b8:c5:e4:47:43:68:f1:1d:04:
                    77:c5:ab:88:51:9a:90:a3:5d:c7:61:7a:43:fd:1e:
                    02:35:f1:a6:a1:29:96:28:d6:46:ef:78:7a:2b:81:
                    19:db:18:24:a2:1a:17:45:f8:67:a8:94:cb:0b:13:
                    31:01:80:f5:2a:94:cf:9a:02:2e:2d:29:99:aa:e9:
                    e5:06:2b:51:40:a4:c9:55:8b:fc:8a:52:f3:21:64:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:30:26:DD:09:15:E5:8C:C7:00:09:77:CD:7E:6A:0A:69:CA:59:7A
            X509v3 Authority Key Identifier:
                keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3f:f5:30:ca:7b:a3:cf:b2:00:fc:d6:fb:bf:ff:bb:34:63:
         c1:4f:41:ec:6e:19:35:95:98:26:44:62:23:b4:1c:a6:04:73:
         9f:f1:4a:3b:f1:67:bf:61:30:c4:d0:3c:ff:3e:22:c6:3c:6e:
         fa:c9:d7:b9:01:60:59:77:83:3f:ff:ee:82:81:5a:a6:03:65:
         29:03:90:d9:4e:9e:cf:09:5c:bc:4d:8a:46:ed:26:3b:06:83:
         6a:a4:65:a0:da:7a:44:90:a1:36:ed:01:2a:9d:ca:6c:84:47:
         bc:e5:c5:dc:f2:70:c4:e1:65:97:2a:93:19:f6:ba:19:d8:d4:
         89:29:a2:6f:1c:06:6c:e3:ef:99:05:da:0a:02:a1:7f:00:12:
         e9:6a:68:27:16:1d:90:a0:ff:e0:b2:9f:c6:be:7f:51:6c:87:
         20:b4:23:b7:e1:35:21:18:2f:d7:a6:d8:73:4f:3a:b4:b4:07:
         df:58:74:68:32:f7:ee:ef:30:a0:df:e2:a0:17:19:4c:9c:86:
         7a:db:c9:cc:9c:58:8d:9f:f1:e4:97:8a:de:e9:51:d1:52:9d:
         6b:35:ec:60:8c:73:5e:99:24:bd:12:49:4e:f3:f8:9d:40:fd:
         b3:c5:da:2e:b6:b0:c4:cf:16:b6:a1:3c:ee:79:88:78:2c:3f:
         51:1b:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:06:11 2024 by rpki-client on console-ams.rpki-client.org