Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File:                     fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier:          zV2pRmR6iD3OrVvVHhezgBrPl3czI5mj+MbIWlw4S3M=
Subject key identifier:   D6:15:52:F4:99:4D:11:C7:7D:F9:0D:1B:CB:5B:97:6D:CF:5F:BD:88
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer:       /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial:       018F874928C692E75975FDFAA343D3BA7F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number:          0A77
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: S2mxySA6r4cR5OHli7BmUPghwQg.roa (hash: QvjRJXZoqzZDgy3Tu5o0jmgXlMUVpJd96nsgV0QtykA=)
                          2: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: k/bRwSk8E1qqT3Zj1kkNKaUdwbGbTpKbbRZIuV+gbQc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:28:c6:92:e7:59:75:fd:fa:a3:43:d3:ba:7f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=d61552f4994d11c77df90d1bcb5b976dcf5fbd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:5d:5b:6f:8c:74:2c:51:97:fa:06:71:d4:
                    5c:5a:6d:93:9f:85:0c:ee:2f:b6:0d:07:16:c4:d0:
                    f3:07:30:b8:91:75:af:8e:34:5a:90:5a:02:cf:80:
                    be:8e:a3:5d:3e:bc:d2:25:15:16:1d:25:17:33:ee:
                    36:e8:68:f9:b5:c1:ea:5d:fe:88:ff:fb:da:15:67:
                    da:fe:7f:0c:a0:3f:71:36:24:b6:7b:f4:49:50:be:
                    6f:60:78:0c:ba:c1:38:64:1e:06:07:1d:26:06:fe:
                    2b:39:a3:da:6c:69:6a:52:16:9d:22:8f:8b:b6:3b:
                    5a:5c:9a:e1:07:a5:dd:9e:c3:d4:6b:b8:96:a9:ff:
                    09:de:a4:3a:af:48:bf:53:f3:f7:04:b3:1c:b7:50:
                    69:bd:7c:09:f1:48:b6:53:4d:e9:95:d5:59:d7:0c:
                    bb:82:53:26:cc:e0:36:27:72:2a:e1:7c:d7:03:d2:
                    c7:a5:8e:55:4c:89:c9:58:e2:3b:1d:19:a6:91:4b:
                    f5:30:6c:95:77:83:a0:69:22:6c:be:14:31:98:b0:
                    ad:06:a5:17:99:a4:e5:2a:6a:32:ae:71:75:3a:e3:
                    89:d6:27:04:74:c7:b8:72:bf:f5:ba:8e:28:aa:f8:
                    c3:e7:b2:aa:a3:6a:e2:11:fc:43:66:07:05:93:39:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:15:52:F4:99:4D:11:C7:7D:F9:0D:1B:CB:5B:97:6D:CF:5F:BD:88
            X509v3 Authority Key Identifier:
                keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:5d:87:57:1e:1a:4c:be:d7:56:b4:af:ce:35:90:b8:8b:
         5d:6f:4e:7e:cc:6d:d6:69:0f:3a:fb:b0:b3:72:dd:37:ce:e0:
         13:4a:78:36:c0:48:5d:bc:26:87:36:fe:2c:ea:7b:39:9a:f9:
         8b:bf:be:0f:0d:cf:5d:d7:a7:2f:ae:ef:c5:9d:d6:15:4b:36:
         a3:a3:3e:e9:fa:86:bb:0d:a0:89:82:d6:87:ce:02:21:a4:a6:
         e2:82:d2:93:ce:a0:dc:71:84:a7:0e:00:34:bf:9e:df:fb:b1:
         ed:b5:3f:08:6a:19:6d:ed:80:d4:f7:55:76:79:08:85:89:3d:
         44:a6:d1:2c:af:00:3c:e6:8a:1d:7b:e0:f9:9d:f7:37:aa:5e:
         82:cf:35:b7:dd:ef:69:7d:94:0c:f8:b1:fc:53:13:b2:48:d3:
         4e:13:9b:aa:5a:45:0e:bd:2b:20:07:fb:f6:40:19:05:41:c5:
         52:a4:86:cd:fe:c0:49:e7:b2:03:a6:eb:ba:06:be:c9:a8:b3:
         50:88:57:43:d6:7a:85:1a:c2:8e:8a:61:08:9e:eb:dc:d3:74:
         fb:16:3a:2c:24:1d:e2:46:77:47:45:9e:a4:9c:ed:a0:89:72:
         df:90:38:05:e2:46:d5:b4:bd:7f:43:15:b2:43:bc:30:1a:b8:
         eb:9a:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:02 2024 by rpki-client on console-fra.rpki-client.org