Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File:                     FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier:          WYVkO0Jwz2hKu5Nap57PUFeklynCmilnACQTWl2Ivbw=
Subject key identifier:   F0:88:76:01:F2:D7:07:ED:02:F5:3F:78:ED:88:47:E9:1C:B7:47:8E
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer:       /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial:       01901BFC5DD37FC985E9A07A5336270DA35D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number:          0F46
Signing time:             Sat 15 Jun 2024 13:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:42 +0000
Files and hashes:         1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: 72Cc6QsmCvUr80zraAAQRu02l6m0u8pYyFiwrG57vqA=)
                          2: ku3-Asq6XuVzw3HiVJxnW0rawTI.roa (hash: SpfoGDeVSONBGvlFVn8iYXcFVYA/lp2aFAVUf3PAFwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:5d:d3:7f:c9:85:e9:a0:7a:53:36:27:0d:a3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
        Validity
            Not Before: Jun 15 13:00:42 2024 GMT
            Not After : Jun 16 13:00:42 2024 GMT
        Subject: CN=f0887601f2d707ed02f53f78ed8847e91cb7478e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:5a:76:aa:47:2d:ae:0b:f3:89:5a:d9:dc:
                    f2:21:4b:27:1f:02:f5:9a:3d:25:fa:13:07:fe:53:
                    e9:19:20:d7:6f:f8:d3:fd:60:a1:5d:98:56:98:59:
                    3a:8e:4a:5a:58:1e:2c:74:14:08:d9:86:29:6d:fe:
                    55:b2:64:b0:38:c9:2d:2a:75:35:54:83:0c:df:c1:
                    1b:6f:bc:03:21:a3:b5:a8:f4:63:52:fb:2a:f8:4a:
                    ed:8d:54:5f:f8:01:c1:cc:5d:62:d4:bf:7e:bf:fb:
                    5a:4a:b2:09:58:9b:86:42:94:51:d1:cf:f1:29:b1:
                    87:32:e0:66:2e:b6:d5:8f:29:c0:cb:8e:b7:a5:da:
                    b0:cf:bf:62:39:36:96:54:5e:cc:6e:d9:ed:d8:2d:
                    0e:b6:2f:58:ef:48:26:91:d6:b6:1c:96:b4:a0:ae:
                    5f:f3:ea:e9:df:2e:6e:62:da:8b:ce:fc:c0:de:d6:
                    d7:bc:59:f8:f6:e4:c7:90:ba:37:42:5f:8a:a8:7d:
                    ac:86:8b:37:5f:5f:26:02:49:bd:af:ad:07:92:c6:
                    df:d5:89:96:6a:2b:91:25:55:60:0b:c4:f8:b7:a3:
                    8f:f1:83:5e:de:d7:0f:9c:70:37:ef:29:4a:21:29:
                    da:0a:18:35:8f:92:a5:91:20:0d:83:45:42:c1:0e:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:76:01:F2:D7:07:ED:02:F5:3F:78:ED:88:47:E9:1C:B7:47:8E
            X509v3 Authority Key Identifier:
                keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:66:dd:84:7a:37:43:6f:3d:ca:c9:68:38:7b:78:16:0d:56:
         b9:af:fd:11:70:cc:3e:35:d7:d9:da:ae:73:3a:75:1e:40:16:
         22:ff:51:a8:81:8e:2c:cd:7b:4c:40:84:d4:03:4d:4f:45:10:
         af:5c:2a:a7:81:0c:6b:c0:0c:d7:d5:99:20:9f:71:49:6f:1a:
         13:b0:4e:43:82:e5:66:80:e2:3c:30:50:49:8e:c5:8f:75:da:
         8a:36:8d:da:fa:1c:2f:aa:da:be:47:94:96:17:4a:43:01:df:
         11:30:65:c6:48:43:a4:54:89:5e:88:8c:c9:7f:50:50:d7:8e:
         92:d8:b2:be:e6:b0:ab:ab:fc:56:d9:65:12:06:5f:09:7d:2a:
         16:f5:90:44:68:cb:f8:58:c9:75:e4:73:dc:26:f6:92:89:23:
         1f:2f:65:ca:5b:92:f6:0e:09:4f:3e:3d:68:2c:f1:b4:09:b7:
         e8:f1:76:61:23:f3:19:eb:3f:13:42:14:de:04:a7:4b:8f:3b:
         2b:8a:9e:bb:10:61:da:20:df:d4:2b:bf:d1:48:42:ba:47:1a:
         27:6a:72:46:9b:af:d3:c9:eb:6f:d9:58:99:f6:f6:9f:e5:a5:
         7e:9b:a4:52:c9:e1:c7:3c:0c:1e:4f:c1:8f:d7:16:e9:38:99:
         cd:d5:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:48:24 2024 by rpki-client on console-ams.rpki-client.org