Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          G4dQ74diCu/th6zVTKZgezubIgturrOFWUy7hj2bcJo=
Subject key identifier:   72:B1:50:F5:BC:EA:A7:7D:58:7E:12:3D:5F:CD:0C:86:13:37:8A:94
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       01901C6AFA44456AEBB85984BCA3FD6C6DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          0EC6
Signing time:             Sat 15 Jun 2024 15:01:31 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:31 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:31 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: ITAdMnikCgRMFqySSvdN4oAHtPP6LE44UiF9rSdojzk=)
                          2: cdmuUHczpXyC1DXvPy4Ru_f8FxM.roa (hash: ro9Oeef36zRaiSzSVRDg9DcXhFXPBGzX3nKad3BtF8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:fa:44:45:6a:eb:b8:59:84:bc:a3:fd:6c:6d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: Jun 15 15:01:31 2024 GMT
            Not After : Jun 16 15:01:31 2024 GMT
        Subject: CN=72b150f5bceaa77d587e123d5fcd0c8613378a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:b8:e4:2f:e6:e4:4f:bb:8d:4d:50:91:ff:
                    8c:49:a9:3e:dd:5d:d2:dd:74:b3:d5:25:72:95:d8:
                    1a:6c:cc:28:95:68:50:17:20:d0:00:20:33:76:96:
                    01:57:ce:1e:cc:9b:74:c2:14:87:bc:f9:05:de:6f:
                    3a:92:24:ad:7f:27:57:3e:40:2d:bd:9e:6a:4d:e1:
                    23:65:da:05:c6:10:15:9f:71:bd:23:85:1b:04:a6:
                    09:d6:13:d9:b1:f3:34:82:78:9e:e6:25:ec:dc:5f:
                    f4:f7:7e:98:ca:8d:42:d6:b8:f2:a7:91:9c:38:66:
                    76:9f:58:a3:92:02:93:f1:bf:14:02:e5:46:30:84:
                    65:57:62:92:57:e4:73:cc:c3:ea:c8:35:b7:e9:54:
                    02:d7:2c:b6:e6:2f:0c:42:fb:b6:5e:5d:76:59:6b:
                    5d:0e:9d:5e:c3:ee:34:cd:04:30:ad:c4:a4:eb:33:
                    86:0c:5e:6a:88:86:54:fc:95:42:29:c5:98:35:39:
                    20:a8:f5:0a:f9:ea:7a:18:26:66:61:9b:db:e6:ff:
                    18:9f:05:f6:cb:7a:47:ad:6b:29:7e:79:7d:18:86:
                    e6:fb:34:ae:5f:90:56:9f:31:b4:68:bc:2c:f5:8c:
                    5b:cf:e9:a5:06:9b:0d:c9:e9:41:ef:25:14:1b:e3:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:50:F5:BC:EA:A7:7D:58:7E:12:3D:5F:CD:0C:86:13:37:8A:94
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:01:b1:4f:5c:aa:cc:b1:1b:b6:20:2d:6b:a8:71:a6:71:10:
         34:09:4e:85:9e:2d:ae:a2:61:f0:b7:64:f6:f3:45:65:30:e3:
         7e:12:f7:cd:ea:c6:d7:42:a0:7c:63:c8:31:2d:b7:ce:b8:7a:
         43:8c:d6:8e:20:33:e6:bd:c1:37:5b:88:af:cb:bd:4d:c7:5d:
         47:0b:a5:3e:84:92:fc:b1:23:8c:1b:68:00:a0:34:eb:a2:83:
         9d:f9:0f:ce:bb:33:3f:f2:f1:c7:39:ed:4d:fb:1b:c8:e8:e8:
         5d:a8:e5:3d:df:f2:d8:75:29:a2:4c:74:c5:8a:ac:d8:15:02:
         b8:13:cb:f8:6a:4b:c2:a3:4a:35:21:1d:39:9e:1f:70:eb:fd:
         32:0b:5e:96:d9:75:7a:7e:45:8c:50:a9:a3:bf:64:14:f6:6d:
         f3:90:de:0e:1d:98:83:f0:eb:d9:ae:ad:61:11:9c:03:e9:c2:
         7b:2f:95:73:be:be:48:b5:ae:c5:be:93:ff:29:2e:84:ea:b5:
         1d:bd:ff:11:50:33:0e:5b:a6:f3:93:95:d5:71:50:02:07:9f:
         20:77:b8:33:ae:cd:c5:41:52:2f:b6:67:76:2c:50:e5:4d:a9:
         67:62:2b:ca:cf:10:75:b3:06:ec:71:27:a9:63:41:e7:ff:b5:
         01:5b:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:12:16 2024 by rpki-client on console-ams.rpki-client.org