Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File:                     COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier:          oInjXNRzgAlYicV6lspCa4S1bT5X+RwENqlEQoad4yQ=
Subject key identifier:   F4:1D:E3:96:74:DD:82:D5:20:07:06:3C:D5:53:11:8F:CB:10:5E:90
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer:       /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial:       019038188E79EA2C1EF920D39EC878C060AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number:          03FE
Signing time:             Fri 21 Jun 2024 00:00:51 +0000
Manifest this update:     Fri 21 Jun 2024 00:00:51 +0000
Manifest next update:     Sat 22 Jun 2024 00:00:51 +0000
Files and hashes:         1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: fgKwiORIALjpHs17RPyaR/2g93xh0TmhLm2Po0Jj62A=)
                          2: aN4RXgCqTgAh8zuYQxiHPLK4bUo.roa (hash: nBIqMbRr01yo02wNsHrh5qw7GSrKB8ZthP1lJMjm2a4=)
                          3: wMg2qN2FdZYLzGFDXed-BH8TEDQ.roa (hash: eNYoeS27t0Lj6lqrc3L8dbOUngN+atuxjX+CFkZZyUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:18:8e:79:ea:2c:1e:f9:20:d3:9e:c8:78:c0:60:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
        Validity
            Not Before: Jun 21 00:00:51 2024 GMT
            Not After : Jun 22 00:00:51 2024 GMT
        Subject: CN=f41de39674dd82d52007063cd553118fcb105e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:98:41:5b:37:2b:28:76:f0:1f:c5:b8:b0:
                    5e:0d:f5:59:47:56:cb:e1:97:c2:55:3b:05:82:6c:
                    73:b1:57:36:bc:79:37:27:77:3c:d0:b1:59:b7:ad:
                    d2:6a:e5:c6:65:24:8e:02:90:4d:52:47:60:5c:48:
                    51:b1:de:54:17:7c:1d:b3:fc:66:92:47:dc:67:82:
                    44:64:9c:c0:b7:16:f4:e1:24:98:81:06:74:db:dc:
                    66:ae:aa:58:aa:43:fb:5b:2f:d6:3b:6a:9d:c6:95:
                    a7:ac:2e:81:69:a0:20:f0:96:b3:1c:5a:e5:bf:7f:
                    20:52:ee:d9:41:c7:3a:59:1b:79:44:9f:70:2b:d2:
                    05:8d:27:e1:bb:da:33:ba:8f:46:6d:33:53:55:83:
                    13:d1:b0:cb:51:56:f7:b6:7c:ec:f2:78:97:cb:dd:
                    37:16:90:55:d8:4a:e0:7a:d4:c8:23:86:3a:22:d3:
                    c2:66:b7:5c:9a:fb:31:e4:ec:7d:11:32:8f:c3:f1:
                    46:86:28:92:26:1c:10:b2:58:02:ec:0d:a8:9e:49:
                    c2:95:5e:77:3d:06:1d:19:82:11:85:f8:fb:4a:0f:
                    93:38:17:18:7f:89:9c:07:8c:bc:b4:b3:3b:ef:5e:
                    e8:40:a5:0b:42:67:d3:93:c3:66:40:a4:cf:ed:8c:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:E3:96:74:DD:82:D5:20:07:06:3C:D5:53:11:8F:CB:10:5E:90
            X509v3 Authority Key Identifier:
                keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:35:33:d6:e3:1c:62:56:64:f0:2b:59:e3:ae:0c:57:7e:
         e7:e6:03:69:91:df:09:26:4d:0b:2e:ae:fb:c4:f5:1d:86:32:
         78:f5:4d:c6:61:f3:bd:32:05:02:b4:45:a7:c9:49:77:90:a0:
         4d:15:f6:70:d9:7a:5d:59:5a:39:0c:05:0b:49:a4:a6:3c:d2:
         5b:4b:07:28:44:55:7f:1a:c0:97:4f:26:83:71:e6:51:25:82:
         3a:bc:bb:11:09:30:3d:b5:e3:c4:78:2e:c5:f3:69:0f:7b:8d:
         bc:7e:5f:1b:32:bf:e1:3f:8b:12:72:72:2b:a1:1f:7e:69:30:
         cb:ef:2d:82:f2:b3:cb:60:85:b5:16:4e:b7:79:00:6e:5d:09:
         cd:0c:a8:ef:2c:36:15:4f:d3:5a:65:dc:6d:94:58:ba:85:f8:
         4c:dd:a0:36:57:c7:51:ad:53:fc:f5:4d:8d:e0:3b:6c:4f:41:
         43:bb:f8:18:ec:1f:0b:2f:79:c1:9f:34:79:da:c4:c2:bc:0f:
         2e:fa:0e:9e:1d:47:36:cd:57:be:04:c4:fc:9b:77:21:d2:53:
         a8:d1:91:6e:e1:10:7d:39:8f:61:39:6f:71:75:56:c5:1d:fe:
         8a:05:b7:c6:9d:c2:fd:24:a1:34:0a:af:5c:bd:a2:fd:9f:b3:
         a4:b2:04:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:26:26 2024 by rpki-client on console-fra.rpki-client.org