Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          yQ/E3JYVgLTcZN45WXsfGSuvpHxlMpONcTc4EAV2gwE=
Subject key identifier:   8D:29:CE:1A:27:20:6A:3F:55:71:AD:80:BF:14:E3:32:89:7A:7E:88
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       01901D0F15CE797F2CE7D4CC329B9985674A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          07BC
Signing time:             Sat 15 Jun 2024 18:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:46 +0000
Files and hashes:         1: FEBnWSOhkAHylQ1z4IYGiohFceQ.roa (hash: AX/4cqmT8wivr3fDr/N+2BuO87R6xzTwDKG4aTSB8XA=)
                          2: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: NQmC8MYpLCt0Yrr9O2wk+v2ehOnq3mMOqgnLq88KDQQ=)
                          3: bZ-IPMKnqn2JjIKSzaRgBK9Ht5Q.roa (hash: MmXbKvQVX5/1P3BgGMrIe7BI8lFoHL8uHL7LvAKk74w=)
                          4: xt15D8PFXfvljIQZHc-0jvFV1pk.roa (hash: zS8eYvdk7HNyeg+txADB+i+G10Up4HyCF5SH+TBWu0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:15:ce:79:7f:2c:e7:d4:cc:32:9b:99:85:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Jun 15 18:00:46 2024 GMT
            Not After : Jun 16 18:00:46 2024 GMT
        Subject: CN=8d29ce1a27206a3f5571ad80bf14e332897a7e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:25:47:51:b8:2a:29:b0:fc:cd:22:8c:84:
                    67:61:ba:df:9c:87:8f:c4:a8:1e:e5:95:59:e1:d2:
                    de:f8:00:ed:47:6b:8f:6b:75:68:a9:b0:48:8b:ea:
                    e7:23:1d:e0:2d:ed:1d:f6:87:c4:38:3b:46:97:63:
                    1b:77:74:11:c3:3b:35:45:c3:67:53:7f:83:9c:07:
                    28:bd:90:f9:a1:41:de:0d:b7:42:4a:a6:58:97:a6:
                    a5:71:ca:01:56:28:68:78:df:e6:63:2f:e2:de:30:
                    7c:75:3f:60:bc:66:13:c9:da:15:18:44:3c:e1:35:
                    db:3d:8b:a9:8f:e2:96:83:38:b1:45:35:8e:83:ce:
                    a1:ed:41:14:2e:ef:cc:48:63:a8:1c:68:02:de:02:
                    14:d0:48:67:60:79:b0:dd:ca:19:34:b2:4d:9f:2a:
                    e2:5a:cc:21:23:96:3d:23:5e:cd:61:91:0f:4c:f6:
                    d4:d8:14:00:8a:4b:6f:4a:79:eb:ae:df:38:f6:55:
                    60:6b:44:68:fa:88:0f:e2:55:6a:b0:ee:53:da:b3:
                    39:83:12:b5:8a:7c:53:31:cc:60:ce:63:ed:a8:d8:
                    04:b4:61:95:91:71:b5:9f:6f:4d:fc:77:85:33:ec:
                    13:42:82:75:63:60:85:e6:04:6e:31:77:51:79:24:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:CE:1A:27:20:6A:3F:55:71:AD:80:BF:14:E3:32:89:7A:7E:88
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c8:d7:fe:bc:ea:ad:c7:71:f7:44:ce:98:17:2c:7d:6b:2a:
         d1:fe:f2:92:b1:89:22:3a:35:5d:b0:3d:7d:60:c7:4f:cb:bd:
         54:0c:72:e7:3e:a5:6a:08:e5:a4:45:96:b4:f5:f1:3a:1e:05:
         ed:bc:a8:87:bc:94:c0:3d:ca:9d:4e:95:c5:74:ba:35:0a:5a:
         01:2c:da:b7:fe:dd:d3:e1:06:8e:0d:96:20:db:8f:c6:6e:8e:
         ce:39:93:22:0e:e5:38:7f:c4:f3:fe:b8:20:86:cb:c4:c3:97:
         ff:7a:ea:8c:6d:ab:58:11:62:e9:72:0a:b0:0b:ba:42:88:8c:
         b6:ac:ea:fb:ea:bb:f4:43:c0:97:32:73:89:af:2c:65:50:36:
         fb:e4:19:6a:08:69:8d:ad:00:ae:f9:2c:c4:cc:75:50:b3:f3:
         bc:15:40:0d:77:cc:6e:e9:58:0a:7b:dd:cd:cf:e6:90:de:71:
         ef:a7:7a:9a:41:70:15:9f:4c:03:41:42:d5:2f:b8:04:cc:82:
         d4:73:77:84:ff:4b:cc:36:0d:4b:e3:42:44:cf:2a:20:14:a6:
         2a:66:5f:e3:0f:a1:12:a1:5e:dc:dd:d7:3a:bd:8b:5c:dd:9d:
         5f:2a:3c:ab:c9:57:c3:ac:2d:75:3e:65:6d:63:f1:1c:1b:8b:
         f4:3c:89:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:25:03 2024 by rpki-client on console-fra.rpki-client.org