Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File:                     FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier:          ZPphsSJ1XSFHU+C4iy9IMMQXPm/Bz3anxw64kMragTs=
Subject key identifier:   6B:53:01:48:23:04:B3:E9:9C:BA:A5:59:93:0D:57:EB:C5:F9:79:1A
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer:       /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial:       01901DEC6331968B31E6D8D7712E71208653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:29 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:29 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:29 +0000
Files and hashes:         1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: jNSZ6TuALXOsYVooSkzUb6E9UBCbhAagSMNWix6uTK4=)
                          2: Z521YFhT6sNOu_GAtLJWdge8hNg.roa (hash: 762VN6guJ1PKQgwMWIdJhKZGQxdNoHlXeN5G76/0NP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:63:31:96:8b:31:e6:d8:d7:71:2e:71:20:86:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
        Validity
            Not Before: Jun 15 22:02:29 2024 GMT
            Not After : Jun 16 22:02:29 2024 GMT
        Subject: CN=6b5301482304b3e99cbaa559930d57ebc5f9791a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:2f:b3:fc:2c:91:b9:18:ff:52:52:5e:4a:
                    cf:fb:0a:c8:10:a6:da:97:d0:4d:22:e3:08:41:60:
                    82:da:19:b0:73:c3:63:2f:71:a3:d1:37:4d:14:75:
                    46:30:24:15:e3:5a:4d:d4:50:d9:9b:75:bb:ff:96:
                    e8:45:c8:18:c6:4e:3c:43:d8:cc:54:c6:e2:5d:3e:
                    bb:fb:39:24:6d:d2:81:bb:69:76:c9:26:7c:59:e8:
                    0c:81:46:e9:61:cf:a4:2d:b1:5e:72:38:ce:22:20:
                    6b:50:c5:dd:73:52:cd:31:61:c0:5d:46:ea:04:75:
                    30:6f:b5:79:c9:79:55:d7:59:e9:65:cb:04:14:7b:
                    7a:9b:aa:e5:de:1b:36:00:00:40:de:70:15:06:11:
                    4a:a8:dc:3e:7c:f0:24:d5:f6:ca:9d:e6:dd:ed:bd:
                    0e:f8:fe:3a:6b:23:62:70:7e:29:db:e3:8b:f5:27:
                    7d:dc:fc:ae:c5:57:25:f3:59:c0:26:e0:a7:1c:53:
                    da:cf:d8:65:17:75:f7:d8:b1:bb:a4:de:2d:9b:09:
                    44:5c:f7:0c:1b:0f:cd:7d:b5:a7:92:e0:92:76:d6:
                    c2:5e:91:0f:64:fe:e2:42:32:9c:f2:cd:fc:e8:d2:
                    be:83:6e:00:ed:90:5c:f1:56:f5:be:2f:63:92:0e:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:53:01:48:23:04:B3:E9:9C:BA:A5:59:93:0D:57:EB:C5:F9:79:1A
            X509v3 Authority Key Identifier:
                keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:20:f0:df:a9:6b:88:ca:5e:f6:fd:b2:c6:97:46:da:48:
         35:e3:f7:77:e0:32:18:94:ea:59:13:13:ce:96:9a:25:01:a3:
         57:29:37:dc:b8:ba:4a:f8:6a:54:92:f8:2d:f2:ea:48:f4:db:
         8a:9f:00:12:6b:0d:a7:34:d6:45:7b:7c:48:89:07:35:79:ad:
         59:2d:b8:b3:45:c6:21:93:14:be:78:1b:9d:4e:f1:b8:60:d8:
         76:f2:14:91:39:50:43:d1:5e:03:5f:6f:3f:92:97:ff:24:a3:
         2a:a2:ee:4f:ae:1e:38:d4:2e:7d:bf:37:14:af:5a:12:b8:fe:
         1a:a7:c2:10:08:21:5a:05:87:4a:81:a4:46:c2:de:94:7e:20:
         41:16:a3:f3:32:af:ae:94:3a:23:eb:4c:58:fc:cc:10:95:43:
         0f:7b:04:a5:02:bb:27:ba:bd:5a:c5:ea:1e:f8:c3:c7:6a:ec:
         08:98:69:6e:4d:c0:3c:06:cd:d4:bc:0f:dd:b0:07:f5:74:5c:
         4e:33:07:80:5a:37:82:78:19:f9:2a:30:38:ce:dc:80:26:e2:
         78:aa:c3:a4:37:0d:46:5e:10:18:ec:05:5c:47:c8:da:1a:e3:
         6f:ef:57:4f:3e:1b:b6:3b:a4:1c:d5:e8:fd:f8:29:59:1a:3d:
         18:01:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:45:06 2024 by rpki-client on console-ams.rpki-client.org