Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          xv2BhrWT6CU1TEMAVL/cEf21zLKlysV+NrHj3jj57Mw=
Subject key identifier:   71:4E:96:70:C2:DF:D5:16:E7:EC:A4:E2:37:95:B8:97:D2:C6:25:D6
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       0190411C19CF57EBE04644D2BB71F7490465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          0ED9
Signing time:             Sat 22 Jun 2024 18:01:18 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:18 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:18 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: oFWCvKv4YXioyWm85Al03cUH0n7BoKxHvzEs2IgrSR0=)
                          2: cdmuUHczpXyC1DXvPy4Ru_f8FxM.roa (hash: ro9Oeef36zRaiSzSVRDg9DcXhFXPBGzX3nKad3BtF8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1c:19:cf:57:eb:e0:46:44:d2:bb:71:f7:49:04:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: Jun 22 18:01:18 2024 GMT
            Not After : Jun 23 18:01:18 2024 GMT
        Subject: CN=714e9670c2dfd516e7eca4e23795b897d2c625d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:20:de:c1:ab:b3:92:45:fc:da:99:c0:01:f5:
                    93:cc:ea:bf:f4:24:6f:19:a6:97:39:0e:08:32:d2:
                    e4:79:88:3b:c0:99:a5:02:95:20:3e:6a:0e:e5:fb:
                    95:0c:ee:4e:6b:4b:92:0d:f2:d7:9d:30:25:68:6c:
                    ff:a9:bf:12:e8:2b:c2:9a:02:69:da:05:30:26:a7:
                    9d:ee:75:e5:a5:fd:5e:dc:e2:c5:25:42:0d:ed:d9:
                    fc:1f:3d:3e:2e:4b:d5:a9:d2:62:17:97:e1:d7:36:
                    03:bc:7a:66:ea:76:36:14:76:d2:a5:e8:aa:31:57:
                    08:76:a7:90:06:35:4d:1c:ff:fc:01:f7:2e:64:17:
                    4e:2e:74:46:27:e4:29:96:b0:9a:d1:8a:5d:8a:98:
                    7a:ba:2f:ee:d3:d3:6b:f0:d1:f8:f6:15:fe:05:5c:
                    61:e9:35:cd:aa:38:7b:cd:73:53:fa:e1:ba:98:e7:
                    bf:e4:9c:8f:02:92:76:34:89:01:39:bf:88:b5:4a:
                    73:a6:ea:2d:9b:bf:2b:77:4a:e3:c0:00:e3:98:22:
                    ed:37:83:fb:a2:8b:19:ec:a0:77:17:3a:a9:c7:ca:
                    68:8b:cb:f4:53:da:9e:33:83:9e:ca:e7:45:21:0a:
                    e7:6b:7f:2e:6b:4a:70:29:7e:9e:0f:d4:0a:0f:4f:
                    e4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4E:96:70:C2:DF:D5:16:E7:EC:A4:E2:37:95:B8:97:D2:C6:25:D6
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1c:de:2e:43:3b:e2:2b:e9:d3:58:70:b0:fe:88:a9:ee:63:
         45:26:6c:4c:2e:d6:83:2a:48:8f:29:7e:a6:5c:b2:f7:39:47:
         f4:44:88:3d:14:a8:09:07:0e:62:3b:18:5f:b5:a5:e1:cc:56:
         44:9b:dd:f2:8b:fd:b6:03:08:31:e4:af:b6:50:81:40:1b:4d:
         0a:8b:ee:97:10:29:dc:72:a9:32:5c:dd:ed:10:81:7d:27:c9:
         f8:a8:cb:7f:7d:2c:f7:e3:64:a1:7e:ef:3c:ec:e8:90:3c:7a:
         52:a2:9f:8d:54:dd:ec:2f:43:2a:2e:37:55:ef:8c:bb:b7:39:
         9e:c8:9e:4b:77:42:63:94:68:d2:6b:f6:c6:8b:bf:02:54:05:
         fd:ed:8e:7c:37:1e:99:2c:71:c1:2a:5e:ad:fe:1b:5e:f3:00:
         33:1a:21:47:0d:a3:f9:6f:d6:d2:17:4d:f3:1c:59:02:1c:8e:
         33:b0:92:44:6d:f0:77:79:57:ba:e1:64:1e:2f:c0:89:cf:10:
         27:2f:7e:3c:1a:81:3e:01:bd:67:c1:6f:17:78:98:80:b9:ac:
         fd:1e:7a:da:d0:02:3b:ad:dd:63:75:f6:a4:1e:29:bc:6a:58:
         a1:da:4f:63:ae:b2:95:70:e6:7a:24:4f:b3:bd:db:96:54:d6:
         f7:f8:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 20:58:27 2024 by rpki-client on console-ams.rpki-client.org