Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File:                     _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier:          cyZkPxNfFqcqTCSqZtYQGbOYo3KRwnLhtO7n35Nbii0=
Subject key identifier:   FD:DA:F8:4C:F2:95:C4:CD:B7:98:6C:54:4C:05:49:C7:D2:D4:D8:0F
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer:       /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial:       01901E591F0591B13B60BE2FDEDC62FD1765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number:          01F4
Signing time:             Sun 16 Jun 2024 00:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:15 +0000
Files and hashes:         1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: ZTHJCKcELNIKKJnGrIeCeWEpVND9r28JBzZfaoSByIk=)
                          2: iYN-eM1qyxJqy8tzPSYcL3ugwZc.roa (hash: LkDDxDbD1kjkP0QRvBxLmj7DvnAxIvFzKB45c368ePg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1f:05:91:b1:3b:60:be:2f:de:dc:62:fd:17:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
        Validity
            Not Before: Jun 16 00:01:15 2024 GMT
            Not After : Jun 17 00:01:15 2024 GMT
        Subject: CN=fddaf84cf295c4cdb7986c544c0549c7d2d4d80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:49:f8:72:fb:3a:a4:ac:a5:8c:80:cc:8b:17:
                    67:5a:30:26:b5:11:b5:66:7f:b2:3b:cd:0b:2c:a2:
                    fb:44:b3:df:e6:e8:55:24:79:93:98:7e:c3:98:13:
                    7a:03:21:03:45:1e:7c:f0:7c:f3:02:3e:38:70:c8:
                    7b:33:0c:7a:dd:54:d5:9a:28:44:f9:82:db:6c:8f:
                    08:b3:b2:0e:1b:ae:cb:01:19:2d:b1:8f:0d:54:04:
                    d4:e0:4f:23:31:61:5b:0e:e1:f9:52:d4:28:b1:8c:
                    31:17:92:4f:da:f9:bc:76:bc:12:9b:6b:0d:fc:c8:
                    81:ed:fd:61:71:dd:8d:a0:63:fe:eb:c8:8a:97:4b:
                    1c:b2:bd:b5:1b:4f:e4:8e:ba:c2:d8:58:7b:fd:83:
                    81:a7:07:a9:71:9d:c2:43:f4:67:45:d7:9d:09:99:
                    20:71:63:d8:53:58:05:ba:99:84:7b:74:a2:a4:c9:
                    bb:7d:71:4d:44:24:8f:1a:ce:f2:6b:0f:f9:de:6e:
                    b7:58:a9:33:0c:05:be:4c:93:8b:f9:5c:37:fe:5e:
                    dd:d3:63:e3:39:ea:57:2c:b0:8c:ee:fb:57:18:ae:
                    e0:ba:f5:14:dd:59:a4:84:e4:53:50:87:d1:1b:9f:
                    7d:c0:50:ab:bb:9a:38:b8:49:45:8d:a0:2b:54:7d:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:F8:4C:F2:95:C4:CD:B7:98:6C:54:4C:05:49:C7:D2:D4:D8:0F
            X509v3 Authority Key Identifier:
                keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:65:4f:62:b5:b5:6a:34:0f:15:ca:d1:0c:4b:01:c8:1a:
         58:77:d1:c2:fb:83:5c:f5:f5:bd:3c:c5:49:d5:f1:85:df:56:
         02:4d:c2:22:39:09:6c:a8:2f:19:b4:03:89:c1:c1:4e:2c:22:
         f7:97:d5:c4:c6:40:26:04:d0:3a:ce:21:32:7d:b6:c0:8f:3a:
         2d:5f:56:83:69:fe:cb:fd:28:be:f7:ac:30:3d:c2:4f:df:83:
         9f:61:e4:9f:a1:bd:3e:48:b1:d8:7e:45:75:cf:be:99:1e:03:
         74:7a:b4:13:a8:48:b8:4f:92:35:4a:ea:e4:c8:c6:9b:42:3c:
         37:fb:63:f2:45:42:0c:50:84:17:62:5a:02:49:7d:32:41:0f:
         20:6e:79:5d:1f:28:1c:55:82:13:97:56:1f:e7:2e:2d:c8:5a:
         b6:33:30:19:00:24:77:aa:8a:1b:b5:a3:54:15:aa:d2:79:82:
         7e:de:6f:ab:86:9a:44:99:84:7c:b4:a4:8c:c6:a2:cf:ac:06:
         86:14:e9:81:f7:ab:67:ca:2e:48:e0:76:85:4f:3b:1a:f2:85:
         59:e1:33:55:df:47:a5:10:df:4b:d3:31:75:2c:84:f4:f8:40:
         ce:5c:e2:14:0f:7c:49:1e:a3:8d:66:9d:77:53:3c:fa:8a:56:
         d2:8a:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:07 2024 by rpki-client on console-fra.rpki-client.org