Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File:                     ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier:          M0znjDw7yHjSpb0nYHBw7gmSEiypKCsw4Fim/ec/gvU=
Subject key identifier:   4B:38:56:67:46:FF:7D:C6:2B:D1:EA:C5:F6:CB:56:40:35:AA:12:14
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer:       /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial:       01901CD80C0077650C2C8669A680E1FF5DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 17:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:39 +0000
Files and hashes:         1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: dpHIQR5pT4BZ8gQJUVOvpNH49uQV6z1PAkX6Re2gfKo=)
                          2: pVu_jMklhMOVOp_lxK-8WOWvots.roa (hash: 4EIZA4yy5sOEdsuJ8EfgVAwzuJJUfAJeCJj4KsmC8Jg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:0c:00:77:65:0c:2c:86:69:a6:80:e1:ff:5d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
        Validity
            Not Before: Jun 15 17:00:39 2024 GMT
            Not After : Jun 16 17:00:39 2024 GMT
        Subject: CN=4b38566746ff7dc62bd1eac5f6cb564035aa1214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:88:58:ff:da:24:17:6c:a5:eb:58:8d:2e:
                    e3:81:6a:c8:22:1f:f9:3f:33:68:a3:91:c4:c4:e3:
                    f1:2f:48:85:60:86:eb:07:4e:af:83:72:5b:1a:52:
                    07:1a:93:a5:bf:7b:a2:66:c6:97:b2:e4:44:9a:2c:
                    97:01:88:47:28:9a:a6:21:ac:76:6c:07:43:e5:ca:
                    35:e7:7d:31:88:a9:e9:45:66:12:62:e5:fa:93:ee:
                    59:3d:f2:be:6c:34:6c:30:da:3c:3b:e4:8d:00:7f:
                    29:f8:50:06:d8:62:c5:ff:37:2b:ab:3b:d0:93:19:
                    b1:f5:37:d2:43:47:09:0f:6f:a7:37:cb:3c:c1:56:
                    dd:75:52:47:dd:7a:88:a7:7f:ac:55:b3:fa:2c:84:
                    b4:f0:61:fa:36:01:2d:be:6f:49:f9:12:64:02:d2:
                    9d:16:b2:ca:ba:6e:53:91:75:f0:d1:48:57:3b:3f:
                    1d:ba:cd:72:bc:51:6c:31:b7:28:a1:4f:f4:df:45:
                    90:9c:6b:24:c1:94:23:53:2f:5b:5e:a3:43:67:93:
                    cf:d9:f6:92:1f:fc:14:c6:6b:c8:b7:be:78:18:be:
                    12:72:95:b2:ed:29:96:23:03:e9:c1:8e:4f:e1:2f:
                    d3:68:52:c9:c6:8f:13:35:ed:5f:94:72:a1:6f:2f:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:38:56:67:46:FF:7D:C6:2B:D1:EA:C5:F6:CB:56:40:35:AA:12:14
            X509v3 Authority Key Identifier:
                keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:23:b1:d0:e7:b5:7a:aa:52:76:93:37:7e:6c:c2:90:ce:a2:
         96:81:50:b1:5d:59:a4:e3:5e:dc:60:69:c6:57:0b:fa:7c:11:
         fe:ea:d1:e9:83:08:0f:1f:3a:5a:0c:7e:c6:7c:ef:a9:47:29:
         16:af:57:3f:49:54:21:3d:98:99:99:1f:8d:be:9b:e4:43:2e:
         80:66:13:72:d5:4d:a7:68:12:b5:b1:16:4d:b4:06:30:e1:c3:
         b9:31:98:06:f1:9b:94:0f:cf:66:9f:0f:a8:a7:ca:c3:9d:76:
         97:f3:0a:f5:6f:0f:5e:a0:59:19:b0:07:da:30:f5:fb:9f:47:
         b4:84:0b:5d:a9:90:7c:9d:9b:79:9c:66:0c:46:b5:65:58:24:
         88:fd:6d:06:d5:31:40:d8:9b:9b:dd:f8:75:d2:e9:5d:4e:c3:
         e2:e1:22:72:91:35:d9:eb:ac:5d:22:d0:c3:64:4d:8e:f6:67:
         5f:a9:b2:6c:d4:da:ff:44:b5:12:43:7a:87:ee:96:49:cd:50:
         69:37:09:0a:05:80:91:27:c6:1a:7b:81:13:0b:79:cf:05:db:
         9c:20:b8:6a:ac:fd:39:39:a8:ca:bc:a9:6c:a4:05:d0:55:ba:
         35:d6:3a:e7:9c:f9:8e:fb:a7:00:67:e3:aa:01:93:1c:bf:06:
         60:c9:fa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:05:53 2024 by rpki-client on console-ams.rpki-client.org