Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File:                     RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier:          /0u6PCsZkBhZaDhkXkA8SHAxdDnkDHr0L9ZL9+OcaiQ=
Subject key identifier:   3A:68:F1:CA:19:60:BD:BF:FC:2D:B0:19:BF:53:A4:FC:9B:CF:6F:B1
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       01901DEDADDE6B817FFA3C52E76A890DC940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 22:03:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:54 +0000
Files and hashes:         1: NNNXg75Aj6uLI1haMrYdjm0gQRE.roa (hash: 5/Z55oLnEQKaAsh3DDICld+9/ijJDPXWW1Kfr5Eyj2o=)
                          2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: BbfAF3fyj/80K0xsFvPdCCvTWJIM5h8C/DnTqL//GJ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:ad:de:6b:81:7f:fa:3c:52:e7:6a:89:0d:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: Jun 15 22:03:54 2024 GMT
            Not After : Jun 16 22:03:54 2024 GMT
        Subject: CN=3a68f1ca1960bdbffc2db019bf53a4fc9bcf6fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:30:99:05:d5:13:8c:ad:7f:cc:be:6f:29:
                    4c:fe:8f:fd:f2:56:a3:3a:93:cd:67:bc:96:92:f4:
                    96:24:91:35:22:14:56:56:ed:e2:d8:d2:83:bc:c5:
                    fc:bc:80:c9:bb:76:e9:b7:70:ed:dc:a0:47:20:d0:
                    db:35:51:aa:e6:63:10:90:07:22:9a:9a:7e:6f:14:
                    79:2c:e3:82:05:75:cb:89:2a:af:d3:b4:8a:a4:e6:
                    3f:92:bd:75:4a:79:c5:07:b1:2d:74:25:54:ac:c5:
                    cc:a5:57:cf:6b:88:a2:bf:87:c5:41:5e:09:a5:ba:
                    55:64:93:c4:3c:e4:ae:12:cb:4f:69:4a:bd:9f:f2:
                    1b:10:6a:45:46:8c:5b:1d:88:e3:bb:95:96:02:89:
                    00:11:85:04:78:20:bf:62:6c:69:ff:d7:d4:ce:9d:
                    6d:3e:39:ea:9f:36:63:25:88:57:41:2f:c7:ad:40:
                    de:da:c9:39:a8:28:03:c4:39:52:6c:5c:81:a4:07:
                    c2:f9:33:18:48:e9:4e:e8:56:19:72:5e:9d:30:32:
                    f4:3b:18:31:3b:7e:5b:dc:c5:d4:3e:0a:47:f2:8c:
                    6c:50:fa:4d:dc:de:60:7d:e5:24:7a:a0:66:1f:ee:
                    26:09:14:14:6c:e6:87:65:f8:4b:74:d8:ca:08:a4:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:68:F1:CA:19:60:BD:BF:FC:2D:B0:19:BF:53:A4:FC:9B:CF:6F:B1
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:ed:ec:3b:2f:6d:ce:aa:3b:8d:ac:bc:ae:30:9f:b9:af:
         ea:6f:ec:5e:74:d1:46:b6:98:46:bd:fa:8d:84:ae:f0:d5:b9:
         d7:b4:3a:8a:18:ee:df:14:a8:d6:f5:91:8b:30:8c:8c:ce:ae:
         ba:bc:47:ac:2e:75:66:25:36:48:42:14:e6:4e:7d:56:2b:1b:
         07:9e:1b:49:06:dd:4e:f3:e2:eb:31:4e:27:73:59:d5:ef:2f:
         a7:7a:3f:14:4e:25:5c:d3:db:26:23:48:de:83:87:23:2d:4c:
         d6:f8:ed:92:b9:3b:6c:9f:d0:dc:64:a3:dd:5d:8b:b0:9c:ee:
         af:9d:b5:1a:7d:ee:7d:6e:91:3d:f3:e0:00:0f:9e:0c:30:a3:
         fe:1f:2d:6f:8f:5e:36:ba:15:18:29:dd:df:44:3b:07:43:53:
         d1:cf:ea:fb:5a:11:17:cc:c4:a9:ba:79:62:2d:60:a4:6e:a0:
         73:27:10:85:bb:c6:6a:01:2f:bb:98:ce:c6:2c:64:a5:6b:6b:
         7e:21:70:2a:fc:56:83:49:1a:e3:62:f9:c4:d4:1d:f5:13:8d:
         40:b3:cd:4d:ed:63:fd:14:db:2f:0a:74:66:5b:47:f5:50:62:
         8e:2b:c4:49:49:c3:d6:cb:9c:eb:18:42:da:da:2a:a2:cf:8e:
         35:d6:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:45:53 2024 by rpki-client on console-ams.rpki-client.org