Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File:                     xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier:          Y/HAztAWkKw/vV8fxr1NP8qyX0E1ispNl+JayAUYtHk=
Subject key identifier:   0F:D6:63:DB:EC:51:CB:CC:13:F4:8F:69:97:13:C9:15:5B:E3:58:18
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer:       /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial:       01901D7CD47092EC1D6939F654CA0463C2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number:          10F7
Signing time:             Sat 15 Jun 2024 20:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:38 +0000
Files and hashes:         1: 9g3h73EzpZqX0f5xj7K8S2kGTTY.roa (hash: D/zJeq6oXyURaFtXUmkWsQwO5ifPIM9UYgz6cN7WHe4=)
                          2: pcmtGjojejGcUFhd101DwNsmFmk.roa (hash: fWeU0eFmkRKeMwshSwPHIONlScsI1xyzJs64bnAuo0A=)
                          3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: pTHgVH7HWzXPE+OqpLre+rncLJNr7gkiGS23jCkbbmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:d4:70:92:ec:1d:69:39:f6:54:ca:04:63:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
        Validity
            Not Before: Jun 15 20:00:38 2024 GMT
            Not After : Jun 16 20:00:38 2024 GMT
        Subject: CN=0fd663dbec51cbcc13f48f699713c9155be35818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:d2:ad:0b:b6:3c:90:dc:a0:8a:f4:ac:91:
                    e4:60:2b:52:6c:56:95:db:32:1f:96:47:a0:e5:7d:
                    ee:15:ff:55:fa:fa:92:30:b0:4f:42:b9:b0:56:e4:
                    f4:69:7d:4b:d8:60:74:b9:00:c9:82:5c:19:c3:44:
                    0e:51:14:46:2a:53:01:d4:bf:49:e5:f4:76:f8:b2:
                    89:a7:96:5e:02:f4:c0:04:89:d0:37:23:69:98:83:
                    ce:35:20:7c:83:9d:8e:df:b3:06:1b:a5:a3:10:0c:
                    86:2a:81:18:d5:10:6a:c3:84:5f:d9:01:1a:90:3e:
                    43:80:e0:4a:d4:25:67:53:7b:b5:3f:28:07:3d:94:
                    de:8f:54:42:cf:bc:68:0c:6a:d0:d7:26:40:e2:8c:
                    cb:ff:38:29:bc:20:50:fe:c4:bf:2b:b9:02:b3:1e:
                    ad:de:8b:63:c7:7a:85:8a:a7:c8:f6:49:fd:c0:b5:
                    74:1f:fb:31:13:be:b2:c5:d1:c9:fd:d9:04:e9:45:
                    0d:68:b9:78:d4:48:b2:2a:ee:00:df:c7:db:a5:e5:
                    dd:29:c5:6d:bb:96:11:13:ef:82:d6:0f:2a:aa:8a:
                    a6:a4:f6:dc:d3:ab:d6:cd:56:74:57:ee:e0:04:a6:
                    50:10:1c:ba:d5:81:95:15:9d:84:37:df:1e:44:42:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:63:DB:EC:51:CB:CC:13:F4:8F:69:97:13:C9:15:5B:E3:58:18
            X509v3 Authority Key Identifier:
                keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b7:71:0a:48:0a:fd:a3:52:9a:0f:4c:58:cc:56:78:8c:b5:
         dd:ed:b8:49:90:5e:1a:4b:0d:ff:4f:5d:2d:cb:18:6b:86:1b:
         6c:1c:2f:81:4f:56:a3:b8:f2:56:e1:7c:41:3b:9f:92:e2:88:
         02:eb:6c:61:3a:f8:e5:0d:df:f4:e3:4b:42:02:f6:52:95:ca:
         77:ac:88:0c:be:0d:5e:be:f1:3b:bb:de:48:2a:0a:b9:18:87:
         5f:d5:0b:98:9a:a1:0e:9d:cc:c8:8d:12:07:71:d5:ea:d6:9d:
         c2:fa:45:09:80:67:f5:59:13:1f:25:7b:7f:df:5d:71:2c:e2:
         d5:be:57:df:ce:dd:7a:ed:e0:f8:5e:04:cf:e5:c6:b6:47:d6:
         ca:af:49:d7:17:6e:ec:d2:0e:20:ee:3f:0e:2b:0c:97:fa:a8:
         19:77:fc:be:d1:6e:14:88:7a:61:f7:5e:77:c9:6e:fa:f4:4d:
         d2:7d:5a:60:22:fb:aa:4a:2b:27:98:76:a3:4f:cc:97:57:eb:
         f9:ab:e8:b2:85:34:be:9d:9e:7f:3e:f1:cb:bd:74:a1:6a:e8:
         ca:81:b4:f9:ce:5d:c7:b5:68:33:6b:54:09:fb:29:e2:a7:4f:
         a5:18:8b:2f:ea:41:b7:39:2e:1d:3a:97:80:40:b8:93:62:6c:
         87:31:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:33 2024 by rpki-client on console-fra.rpki-client.org