Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File:                     rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier:          O2U7eohchhRhlTk4V3DdnsdlhZAPi5dWeHY2Js8Z4rs=
Subject key identifier:   6D:16:05:3F:C2:09:3C:10:1A:3D:90:F4:FC:16:02:CE:CB:86:13:2B
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer:       /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial:       01901CD823F4E6FFD77A9C319EA41BD26B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number:          08ED
Signing time:             Sat 15 Jun 2024 17:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:45 +0000
Files and hashes:         1: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: sNXpnexZVKy5z1oWQsO/jornT9Tj/z+buYuMJ3fIZb8=)
                          2: xx1RSleLkv8dV3phwO40UDiukFo.roa (hash: q7EMb0e96VKtY8mE40rudwTF9iEoA6wxXkzFEJRp/uA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:23:f4:e6:ff:d7:7a:9c:31:9e:a4:1b:d2:6b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
        Validity
            Not Before: Jun 15 17:00:45 2024 GMT
            Not After : Jun 16 17:00:45 2024 GMT
        Subject: CN=6d16053fc2093c101a3d90f4fc1602cecb86132b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:d9:4d:a2:74:fc:e5:a3:05:ec:88:f3:d0:
                    62:b0:17:7c:70:68:f1:3e:36:ee:8b:b1:6c:e1:2b:
                    17:de:b3:99:5c:08:9a:c0:70:ee:17:7f:83:36:f0:
                    a4:18:e1:01:8b:3b:10:26:59:55:e7:5d:81:a3:9e:
                    c2:6f:02:d0:26:fb:91:e7:2b:fa:9d:a9:4d:d3:bf:
                    4a:8b:22:26:ed:12:45:99:34:0d:af:e9:53:b1:df:
                    0f:91:79:9d:b4:18:ad:a7:76:d5:5f:cc:95:c6:9c:
                    aa:42:61:90:3e:38:ee:ec:21:6c:ab:17:44:00:4f:
                    15:af:ed:3e:db:cf:2d:94:f6:72:02:02:83:38:95:
                    d7:fd:00:7d:5f:25:16:13:62:9e:07:cd:6b:fa:c4:
                    6b:24:84:bf:0e:2a:c1:25:c6:fa:c8:ca:95:82:bc:
                    b3:3f:30:fc:4c:6b:30:28:0c:d0:60:2d:02:0d:3f:
                    c3:3a:38:4a:3c:dd:62:d2:97:31:9e:64:39:59:63:
                    23:19:d4:74:ab:a2:78:12:70:ab:c9:d0:dd:39:db:
                    99:06:df:22:74:90:24:92:cb:1e:1e:fc:e0:f7:eb:
                    4e:f5:88:70:1a:83:7e:b4:3d:32:7e:9d:ce:83:8d:
                    83:61:3e:f7:85:cd:7a:f4:45:eb:73:01:ea:38:e2:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:05:3F:C2:09:3C:10:1A:3D:90:F4:FC:16:02:CE:CB:86:13:2B
            X509v3 Authority Key Identifier:
                keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:56:92:f0:62:0c:de:47:65:1c:49:ee:92:ab:e9:75:78:
         c9:91:d5:57:71:85:74:c5:55:26:c4:9a:74:1c:e2:5b:fb:37:
         1c:c4:81:9f:d9:82:c3:f0:5e:26:a6:b2:cf:ea:f5:f5:e3:86:
         e2:f6:05:0e:fc:5c:f1:26:0f:50:66:0c:ca:bc:1a:d5:9a:7d:
         d4:7b:3e:c6:9f:98:89:f0:ec:47:6f:76:1e:aa:f6:ec:7b:ff:
         02:08:88:43:1a:6c:c5:7c:84:ff:15:39:35:66:f4:1d:23:97:
         3a:45:19:1a:49:b9:01:5c:ec:a9:68:5d:6e:94:53:8b:71:d8:
         22:ac:30:4c:ea:7a:bb:28:2b:bf:6e:73:2f:b8:ff:4f:be:00:
         7c:01:be:08:69:be:40:fe:81:23:17:5d:41:69:b9:34:05:86:
         02:04:1c:5b:fb:80:e6:3a:dd:23:71:ec:50:88:7a:64:01:6b:
         53:5e:50:86:b0:79:eb:f7:2a:7d:ae:59:50:2b:a7:70:d7:e5:
         0c:e2:a1:d6:17:19:2a:cc:ad:0d:33:16:c6:8b:78:3d:fe:57:
         c0:43:a7:9b:b1:a8:75:22:38:5d:07:7f:2e:d1:a7:2c:9c:b2:
         60:18:3b:b8:ed:bc:60:60:39:52:d3:5a:4e:38:c1:e6:7f:1a:
         b8:7e:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:55:43 2024 by rpki-client on console-ams.rpki-client.org