Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          y5CtpJRIpr/YZY5GlMIjplEX4v88BBO0Ckrf/aW2xfs=
Subject key identifier:   AA:7B:E5:40:97:12:4C:6E:A6:4C:B5:EC:91:91:3E:DF:0B:02:C5:67
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       01901BFC784F8E40A09572814870E7525635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          094E
Signing time:             Sat 15 Jun 2024 13:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:48 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: zRnBu/e8RalXwllE1vAA1exK8BDn3kowyfzLgHNxSyM=)
                          2: 6qN1bsauIEePWc0uSTCNjYJL_hw.roa (hash: fYiNckP7luq9t+YHZouJADBnA7yWq7nIusoa0j39ieo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:78:4f:8e:40:a0:95:72:81:48:70:e7:52:56:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: Jun 15 13:00:48 2024 GMT
            Not After : Jun 16 13:00:48 2024 GMT
        Subject: CN=aa7be54097124c6ea64cb5ec91913edf0b02c567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:04:28:b1:92:da:1f:2d:fe:e3:27:f9:93:
                    47:32:f8:e4:6d:df:14:41:2c:7f:3e:a7:80:21:d5:
                    f7:96:a6:3d:04:c5:ac:7a:ba:ee:d7:2b:bf:80:84:
                    f9:46:fd:de:c0:a3:e3:2a:ac:ca:5a:ae:c8:18:a4:
                    88:e9:56:a6:19:2b:01:e3:e6:1e:5c:06:fc:fe:c7:
                    4e:c9:c9:43:e1:2d:12:88:aa:90:0a:ad:a2:a9:d9:
                    77:12:3b:52:9b:f1:b9:46:35:f2:08:74:f0:1e:f4:
                    43:53:be:b8:72:10:36:6d:b4:90:7f:1c:c2:c9:cd:
                    13:b6:01:36:c7:41:9d:fe:64:3a:6c:6f:da:e2:0b:
                    18:cb:d7:ec:7b:84:be:57:11:7f:0e:17:66:f7:a0:
                    60:f8:98:2b:03:71:69:2c:e1:2f:aa:39:ba:9a:34:
                    04:c9:05:03:e5:79:d4:6b:96:8d:ff:d4:30:dc:b7:
                    05:b3:6a:86:2a:65:2a:e5:a1:91:99:00:e3:47:2b:
                    80:b4:2f:97:29:03:65:96:10:61:2e:da:af:0f:2d:
                    68:19:2e:fa:a7:b0:31:37:f8:21:ea:cd:97:1c:06:
                    d2:60:7a:65:8b:a8:a8:8f:cd:f1:b9:2e:0d:dc:a3:
                    cd:ce:44:6b:fc:4d:20:6d:c7:6b:40:59:f6:b4:0e:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:E5:40:97:12:4C:6E:A6:4C:B5:EC:91:91:3E:DF:0B:02:C5:67
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:bd:ac:c8:ba:d5:ee:0a:f9:71:98:a7:cd:6a:bc:6f:58:
         19:b1:f2:4a:75:81:83:72:e8:3c:34:49:4c:18:ef:70:b9:4c:
         d2:3f:a0:49:61:76:94:a9:93:0f:16:18:8b:23:a7:2a:7b:19:
         00:42:70:ac:ec:9b:8a:6a:49:12:1c:43:1b:74:c1:12:30:83:
         34:ff:eb:5b:8c:ae:aa:f4:4c:05:2d:fb:48:08:32:b0:b7:82:
         dc:f6:9d:28:85:c6:d1:67:ac:51:cd:aa:6b:f3:7c:c5:d0:37:
         0c:d5:7a:7b:bb:c7:4f:10:b4:9e:8b:d3:e4:2a:f5:38:92:7f:
         00:22:ea:58:83:28:dc:3d:92:5c:35:b7:d9:16:8c:29:17:cd:
         ff:e3:35:83:1c:aa:2c:5f:1e:04:24:e6:84:34:71:fd:5e:e1:
         4b:36:89:58:ca:7d:3a:aa:c5:03:59:1c:b3:7b:ce:54:07:f1:
         6e:c8:48:64:61:a8:3a:39:90:9b:a8:7c:c1:11:6c:69:b8:e8:
         ce:61:bd:c3:ea:5c:ee:53:75:cc:52:19:a3:94:21:93:5b:13:
         71:79:59:94:ae:60:79:56:55:2b:02:ba:a1:d1:01:a1:f5:b1:
         fc:e8:59:f0:b7:ab:f6:26:af:fc:21:d9:b8:6d:b3:88:1e:a9:
         92:96:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:41:33 2024 by rpki-client on console-fra.rpki-client.org