Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File:                     9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier:          3QPgYOOr8TgoJ9fYxA78dfjShiDXvSfnomOSO1r/Iok=
Subject key identifier:   A0:1E:F8:1A:0E:28:9B:83:4B:99:5B:83:28:44:1C:D2:6D:17:80:91
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer:       /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial:       01901D45E131C9D767FCE711763B423B5D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number:          0891
Signing time:             Sat 15 Jun 2024 19:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:37 +0000
Files and hashes:         1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: /HviWbtWNz/sV3wCijz46Fvw9GqGzJ1lsjdiVp/kyKo=)
                          2: ANpQ1Omro56EO2uKdMmEfREStF4.roa (hash: bHeVP0U3ciLYtu9q1BsNC/Ih45s0waOT7TV3lEXyjEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:e1:31:c9:d7:67:fc:e7:11:76:3b:42:3b:5d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
        Validity
            Not Before: Jun 15 19:00:37 2024 GMT
            Not After : Jun 16 19:00:37 2024 GMT
        Subject: CN=a01ef81a0e289b834b995b8328441cd26d178091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:b8:02:6a:0c:1c:ba:7d:86:c7:7f:8c:57:
                    39:cb:97:1b:53:db:8a:c6:aa:ee:cb:50:4f:3e:53:
                    8f:80:03:ca:46:d2:58:85:1a:36:73:d6:56:bb:03:
                    b0:a4:e0:33:a1:1a:70:9c:59:6b:8b:8b:31:70:e1:
                    bd:f6:0c:91:29:f5:b5:41:33:4c:99:f8:22:47:80:
                    8f:8b:59:39:0b:3a:f9:6b:c7:27:51:c6:3e:ed:f4:
                    c9:b7:4e:da:fd:f9:9e:c6:39:95:49:57:8f:c3:7d:
                    44:49:39:34:ab:98:05:96:e4:2f:b2:13:d2:ab:34:
                    2a:61:99:fe:d3:88:18:42:b9:c9:f7:15:e8:0a:1a:
                    5e:92:09:b7:56:ca:b2:61:75:8a:e6:c2:73:b4:d1:
                    68:11:dc:d7:e7:c7:4d:be:be:e3:08:69:f1:1f:ae:
                    3f:8f:e6:50:eb:55:46:4e:5d:d5:2f:37:2f:37:3e:
                    cb:36:e3:aa:33:b0:0d:e9:99:0e:57:94:f2:e0:ae:
                    18:68:91:b2:a1:58:73:1f:f6:d9:4f:a3:3b:cc:d2:
                    79:45:5c:9a:61:22:60:eb:0f:da:1f:85:d7:84:20:
                    d6:8f:dc:44:a5:60:f2:f1:50:28:d0:01:62:4b:28:
                    a6:d3:5f:fb:14:64:7c:bb:6e:c5:61:f0:d5:71:db:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1E:F8:1A:0E:28:9B:83:4B:99:5B:83:28:44:1C:D2:6D:17:80:91
            X509v3 Authority Key Identifier:
                keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:69:24:8a:d2:60:9a:96:06:d0:3b:4d:9a:ec:e7:1e:d5:
         b1:3a:11:e4:d0:85:7c:7f:df:2e:1f:58:e5:0f:4c:b6:e1:5c:
         23:4c:29:ac:d8:17:66:40:b4:22:1a:80:da:54:12:f4:0e:5a:
         0c:ab:0a:1d:b8:a3:7f:7b:09:e7:b1:a0:fe:1e:7f:c4:34:7b:
         f3:e5:5b:35:22:72:b8:6b:6e:b8:bf:24:4e:eb:40:54:b9:c6:
         d1:21:c7:b4:81:ed:9b:1c:73:6e:ae:cb:79:cd:a9:85:3c:a9:
         c6:f4:f3:06:55:a4:33:ec:da:bc:68:d6:4f:e1:18:e7:86:26:
         22:5e:e6:58:c0:d2:cb:07:5e:a0:8a:91:1d:75:a6:2c:c0:d0:
         8d:05:73:6d:37:30:03:33:3c:99:bf:04:aa:e9:82:ff:ad:43:
         f4:fe:20:26:a6:04:f8:ae:01:52:ec:95:dc:7f:f9:68:88:69:
         95:e4:7f:8c:ee:b9:9a:b3:8b:4b:83:ae:35:65:2d:99:17:f2:
         8e:fe:24:9c:fc:de:0b:1b:ab:de:0b:98:9f:ec:b3:ac:76:1f:
         af:e5:65:e5:ed:ae:59:d2:7b:ce:bf:c6:13:6b:72:b2:50:24:
         dd:df:48:53:ec:f5:57:9c:dc:c8:87:be:b8:33:5f:7e:14:f1:
         50:8e:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:36:12 2024 by rpki-client on console-fra.rpki-client.org