Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File:                     Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier:          WOhqTaYXsCrSzyINfXi/x1ovivIvSQR6Erw8MJk1LEA=
Subject key identifier:   F7:26:4F:F3:29:13:1F:99:70:AD:1E:27:38:BA:BD:03:90:13:F9:DE
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer:       /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial:       01901DEABF254D8C0C9C8CB7981EE78A10E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number:          0852
Signing time:             Sat 15 Jun 2024 22:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:41 +0000
Files and hashes:         1: Cvbl7Uuw865nD-wNji9JxbYmPg0.roa (hash: FZhwrFKGfQkWd+5BBXg078GNki3ZrSr0KhbjWFVjtn8=)
                          2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: qiMQClGqBLQeuQAFg65RnUm3beTWjWqmQcKBOLhgJew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:bf:25:4d:8c:0c:9c:8c:b7:98:1e:e7:8a:10:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
        Validity
            Not Before: Jun 15 22:00:41 2024 GMT
            Not After : Jun 16 22:00:41 2024 GMT
        Subject: CN=f7264ff329131f9970ad1e2738babd039013f9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:4d:ff:34:77:d7:3a:af:01:d0:4b:5c:6b:
                    fa:05:4c:78:64:0f:08:02:a6:69:3d:3a:a2:4e:82:
                    74:80:a1:64:f4:93:10:cb:4f:bc:85:f0:c6:34:3c:
                    a5:96:9c:45:ac:79:9b:a1:6d:8e:38:68:35:d6:d0:
                    83:54:b8:b4:d3:ba:d8:00:6b:ef:7d:5c:ea:79:c7:
                    ec:2d:eb:b2:0a:ac:5f:6b:f2:8d:01:bb:fc:d9:2f:
                    be:2c:25:17:9c:ce:1d:75:27:c1:b9:83:1f:29:36:
                    cd:0e:5e:7f:24:97:95:23:13:5f:0f:58:29:52:57:
                    ae:67:c5:f8:89:e4:58:29:c3:90:c6:6c:7c:08:8c:
                    59:b1:5b:c5:ae:58:7b:53:71:1f:e7:8f:93:6d:36:
                    8c:1a:b2:e8:07:43:38:4a:23:ba:90:cd:ee:e2:6d:
                    78:49:a8:37:b2:76:d1:7b:12:a0:04:4d:90:42:97:
                    68:6b:ed:19:23:dd:db:f3:cf:a4:18:2c:c2:2f:89:
                    64:9d:10:cf:c7:03:a5:4b:70:c7:bc:e9:0c:c9:cf:
                    7a:00:70:97:1d:96:89:64:69:1c:c4:c1:73:ec:df:
                    c4:39:a1:e9:a9:15:d0:88:32:1e:c3:f3:c5:ac:f1:
                    72:ba:26:30:ca:7f:e0:96:80:91:a9:42:58:95:52:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:26:4F:F3:29:13:1F:99:70:AD:1E:27:38:BA:BD:03:90:13:F9:DE
            X509v3 Authority Key Identifier:
                keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b5:50:b6:d7:f4:5c:8c:8c:af:92:bd:3e:1f:76:a6:b2:5d:
         63:f3:71:52:fa:91:eb:88:89:49:4b:44:fa:85:6d:01:db:dc:
         63:e5:c7:be:53:ec:fc:08:e8:7d:65:fe:01:5e:2e:7d:8b:64:
         2a:ba:24:0b:83:08:06:cf:22:46:6f:7c:aa:11:17:3d:28:fe:
         8a:91:ca:93:94:2e:71:8e:62:ce:92:f4:88:3a:dd:66:e3:bf:
         d3:21:23:f7:0a:62:18:70:82:2b:58:a3:a3:0a:22:a3:ec:6e:
         c2:72:d6:2e:51:b7:24:ee:3f:16:ea:45:20:2d:14:f5:b0:dc:
         4f:38:7c:e8:12:74:8f:47:63:f3:e5:33:b3:c0:43:a9:68:01:
         fd:2e:48:d7:f1:5d:04:77:dc:d6:ea:5a:2e:7b:19:bb:17:93:
         c9:72:44:87:80:53:db:e8:09:1a:b6:fa:73:af:03:51:86:63:
         85:63:c8:c7:7b:2b:6d:94:39:0b:8e:bf:21:a5:6e:d7:bd:b2:
         c6:9e:21:86:0c:07:4e:9f:1d:7b:f9:4b:11:d9:b8:21:0d:23:
         64:04:08:43:31:94:c4:e9:6e:e4:16:e0:0e:9f:5a:a8:86:4a:
         00:03:12:43:99:22:52:e7:e2:58:b1:ce:3b:66:da:0c:6f:65:
         51:68:1b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:48 2024 by rpki-client on console-fra.rpki-client.org