Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json)
Hash identifier:          tFxrlX8QgWVHI+XXX6Ozn78m6UwCO+8NA2K96Mv1DVA=
Subject key identifier:   37:E0:29:52:BE:F4:FC:91:FD:B4:BE:6D:9A:B3:4F:07:13:18:8D:55
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Certificate issuer:       /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial:       018F3BF9434A975E7483F0C891B8098E8E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
Manifest number:          0EFA
Signing time:             Fri 03 May 2024 01:02:22 +0000
Manifest this update:     Fri 03 May 2024 01:02:22 +0000
Manifest next update:     Sat 04 May 2024 01:02:22 +0000
Files and hashes:         1: 0hJ2sdq3xRMiiKVKwhbkG64wVjM.roa (hash: fAFtokEIrXqxb/g9h5/NKal5LrtkS7wx1I6JO6UpboM=)
                          2: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: p5LcbjCY6XWkAaB7v+bSpSZ16SjQI/GFmAW4um2epT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:43:4a:97:5e:74:83:f0:c8:91:b8:09:8e:8e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Validity
            Not Before: May  3 01:02:22 2024 GMT
            Not After : May  4 01:02:22 2024 GMT
        Subject: CN=37e02952bef4fc91fdb4be6d9ab34f0713188d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:ac:1a:77:bc:5f:5a:7e:08:90:b0:43:bc:
                    c0:cb:6a:0a:c6:4e:0a:86:09:f9:f6:43:da:6b:09:
                    21:49:ce:52:01:6f:20:79:27:79:56:36:c3:99:a7:
                    41:e2:80:39:79:34:a7:80:e8:75:4f:85:e1:77:72:
                    91:30:a2:c1:da:39:3c:df:02:f3:96:ac:af:fc:89:
                    87:ca:0c:80:c5:12:18:33:1a:e9:d3:55:1f:17:1b:
                    54:66:1e:16:84:02:de:dd:29:80:53:7f:a6:8f:50:
                    ba:48:03:8c:02:ca:56:af:25:0c:a0:b0:f4:7b:2a:
                    d1:13:d6:b6:a5:bc:63:34:39:7e:35:0e:1e:85:b0:
                    b3:6a:5e:19:9c:04:8b:9e:f8:59:b6:f8:a6:f7:da:
                    61:f7:70:2e:62:da:2d:6d:f5:63:77:8d:e9:46:d8:
                    fb:54:8d:e6:c6:c6:b5:51:4a:6a:54:68:89:97:69:
                    76:43:a4:10:96:85:3a:17:6b:37:ca:c0:31:e7:23:
                    36:89:00:16:3b:cd:b7:cf:97:fc:85:0a:b2:b6:07:
                    42:a6:0b:61:e3:ff:84:11:13:0e:b8:00:c3:69:0c:
                    0c:09:a4:39:6d:ef:97:1b:91:68:2f:46:83:bb:27:
                    f4:d7:e8:df:f5:53:dc:d1:97:54:b6:27:11:dd:09:
                    85:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:29:52:BE:F4:FC:91:FD:B4:BE:6D:9A:B3:4F:07:13:18:8D:55
            X509v3 Authority Key Identifier:
                keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:2b:b2:96:1f:e3:02:46:7f:2a:fa:55:ea:d4:11:c9:4c:
         e9:ae:ef:0f:12:55:f4:f4:fa:28:c7:37:44:e0:23:bb:a7:c1:
         eb:d4:e6:8a:ae:01:6e:4c:52:61:02:ff:8f:33:0b:d9:19:b2:
         3d:63:54:0a:bf:4e:1c:d6:62:fd:36:d7:f6:4d:17:ce:c3:0c:
         4c:88:42:57:32:65:82:7e:f6:2c:a6:4d:af:4a:04:6c:94:c7:
         87:e8:49:b4:dc:74:e5:4c:60:56:c4:0a:29:01:fc:03:56:d7:
         7f:8e:ea:e6:fa:dd:0d:ac:43:d6:bf:00:ae:ca:42:76:8d:a1:
         0e:dc:f6:7f:55:8b:d2:c0:27:5c:d8:61:ac:92:57:04:7c:30:
         0d:73:de:3d:c0:3d:57:94:6b:c4:fb:e9:20:9e:7e:23:d3:b4:
         bc:33:f0:61:68:55:98:12:21:0a:fa:52:32:1c:d8:4d:53:45:
         fa:49:5c:79:b7:92:1a:ac:d5:48:81:84:ad:3f:7f:aa:45:16:
         97:9b:7c:d9:cf:b1:c5:bb:d4:58:6c:d4:3c:c2:f1:e9:cd:77:
         42:ac:c5:08:7a:c6:e8:d7:f4:e3:35:ab:19:da:8c:97:0f:d2:
         4d:6a:25:cb:37:db:fb:26:b7:59:fa:fd:fc:4f:12:23:bf:fc:
         23:6f:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:50:17 2024 by rpki-client on console-ams.rpki-client.org