Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File:                     FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier:          WmoDG0UICUCDdciWN2zMh5FcolQ44au5yh79L4I4jeI=
Subject key identifier:   C7:D3:79:76:62:EB:1E:DD:A3:C0:7A:51:E9:78:02:3B:50:3C:06:A3
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer:       /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial:       01901BFE1225C70CD1A81CBEA17133E3D408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 13:02:33 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:33 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:33 +0000
Files and hashes:         1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: EceP5ceXB1wJvHUrxuyha45/cVLwoXbsgmC+YFDqVFU=)
                          2: Z521YFhT6sNOu_GAtLJWdge8hNg.roa (hash: 762VN6guJ1PKQgwMWIdJhKZGQxdNoHlXeN5G76/0NP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:12:25:c7:0c:d1:a8:1c:be:a1:71:33:e3:d4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
        Validity
            Not Before: Jun 15 13:02:33 2024 GMT
            Not After : Jun 16 13:02:33 2024 GMT
        Subject: CN=c7d3797662eb1edda3c07a51e978023b503c06a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:1f:88:e2:7f:36:42:f1:6f:5d:d0:d9:c5:
                    95:ab:3b:89:4b:19:7b:99:98:1c:85:38:a6:c4:5b:
                    b3:f0:d9:c0:3e:f7:ec:e1:ef:c6:8e:4a:eb:db:9f:
                    83:d0:43:ab:2f:2f:07:4d:e1:85:b1:79:11:b8:9a:
                    c0:11:0c:b7:3c:f0:2c:4c:56:66:59:71:6d:62:12:
                    54:12:06:34:61:10:72:9e:7b:05:c7:48:d5:ba:f7:
                    37:5f:b4:59:b2:43:15:57:79:11:77:fd:60:ee:7b:
                    9f:d6:8d:11:b4:64:d4:25:09:92:e0:c6:21:d7:5a:
                    6e:3a:da:f0:5d:80:21:fc:cc:d8:2c:27:6f:d6:e8:
                    a6:0e:81:cc:33:c0:ec:90:d5:c4:da:f7:c3:b2:bd:
                    9c:72:9e:ec:3e:9e:b6:78:9f:cd:0f:5a:20:8d:71:
                    71:df:69:b6:4f:ae:e6:ac:3b:90:a2:c3:dd:e1:1e:
                    e6:4e:4e:f3:8b:4c:41:9b:51:e5:ba:9e:af:c8:02:
                    47:b1:73:77:94:1c:d7:b3:30:18:f2:7d:68:71:f4:
                    e6:90:2b:eb:d8:05:ef:3c:77:be:1e:07:eb:35:1b:
                    7b:86:1f:75:99:2a:5f:2c:89:93:c4:bf:22:4d:69:
                    6f:4a:28:ba:64:32:15:94:9d:0b:6f:4e:20:4c:3d:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D3:79:76:62:EB:1E:DD:A3:C0:7A:51:E9:78:02:3B:50:3C:06:A3
            X509v3 Authority Key Identifier:
                keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:42:1e:bf:67:16:42:0e:ce:5d:7c:30:13:b1:23:21:73:
         7f:6b:d1:8e:aa:67:38:82:d1:05:b1:93:9e:fc:60:dd:a6:92:
         35:7d:de:19:35:00:22:a4:01:a1:75:13:c5:62:b1:59:41:c7:
         af:b3:10:69:7d:04:21:c7:14:04:e0:db:a3:9b:85:92:21:f9:
         10:18:f9:29:0d:79:a8:57:54:df:26:cf:8d:2c:0a:ff:8a:31:
         aa:24:df:89:15:76:41:db:6d:2e:01:6c:85:e9:10:3a:68:fc:
         2d:ee:a3:39:d8:b8:ad:69:45:8c:f0:74:c3:fb:33:e9:24:08:
         e4:7d:1b:67:7b:a6:a0:0b:74:04:7e:d6:43:0a:21:be:40:49:
         84:d7:93:72:92:93:3a:07:6c:8d:de:ab:f6:c5:65:cb:4f:77:
         a1:2c:5a:bb:e4:c6:d0:eb:85:b0:48:fc:ff:5e:3f:fe:66:90:
         42:f2:4e:16:b1:f9:cc:90:f3:f8:58:40:9f:bd:35:29:32:57:
         40:e3:7a:fe:42:27:65:9b:79:eb:31:55:c2:d5:c9:cc:f3:e0:
         d2:ea:a1:10:a4:f8:ca:49:a9:85:83:c6:7d:54:a1:b9:06:78:
         7f:6a:fa:5a:5e:1e:c2:aa:16:1a:39:4c:c5:75:e4:85:a7:52:
         c3:7e:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:45:21 2024 by rpki-client on console-ams.rpki-client.org