Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          PmLpGGqscnOK3QFIauZrxjQjYPTsv7vEQ5HfEN8PewU=
Subject key identifier:   4E:7F:E1:49:ED:16:8D:4F:F4:B5:A7:CF:BE:33:EF:83:67:B8:24:D6
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019021C91E31A8752868C30F3D5837B62698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          0C10
Signing time:             Sun 16 Jun 2024 16:02:26 +0000
Manifest this update:     Sun 16 Jun 2024 16:02:26 +0000
Manifest next update:     Mon 17 Jun 2024 16:02:26 +0000
Files and hashes:         1: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: ENNQJ4c94g6PdT/6NSTIJVj9+dit/cPEW2KzWoczdkc=)
                          2: rVNS5ZLJ0DneG9cmkLjv3g05yH4.roa (hash: wch70Ap5xhYxbnT/Ll8b0Jhpuqvb5dshXYH/a2RUZq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 16:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:21:c9:1e:31:a8:75:28:68:c3:0f:3d:58:37:b6:26:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Jun 16 16:02:26 2024 GMT
            Not After : Jun 17 16:02:26 2024 GMT
        Subject: CN=4e7fe149ed168d4ff4b5a7cfbe33ef8367b824d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:cd:71:76:da:cc:ea:76:33:ec:c2:b6:1a:
                    00:88:9e:bc:ff:19:ef:ad:b1:df:3a:14:1e:11:dd:
                    4c:6d:2e:b0:d2:cf:f1:47:a9:0c:d1:4d:c6:b0:cc:
                    40:c5:5c:cb:16:09:f5:77:fc:76:a1:48:d3:2a:b9:
                    fe:f6:b3:af:b5:a3:6e:d1:56:1b:09:fe:c3:14:92:
                    f5:c6:12:a0:ba:c0:c4:5f:6d:07:29:64:f5:f1:9f:
                    66:b1:37:da:6d:8c:c5:73:74:29:ad:29:4b:53:58:
                    6f:5f:c9:72:56:9f:1d:6b:df:79:b1:e8:9d:1a:ce:
                    dd:46:05:93:ab:a1:8e:0b:14:ca:36:af:1f:1c:41:
                    be:18:56:9d:b3:95:2c:b4:14:dd:1f:44:ad:ab:7e:
                    d7:77:d9:5e:9e:ba:e7:7a:e9:5d:eb:37:e5:e2:35:
                    0e:75:76:f4:30:6d:74:5d:45:55:f4:89:21:78:17:
                    98:7b:d4:93:81:1b:fd:42:d6:71:ab:64:4b:c4:8b:
                    83:80:01:2f:4f:f9:ff:5e:fb:3d:ac:34:c9:17:12:
                    3d:de:87:c0:c1:10:cf:74:3a:c7:81:28:cc:d3:5f:
                    0e:6b:89:9c:75:c7:36:70:e7:01:b0:92:10:66:a2:
                    5a:a1:d8:6a:34:d2:f6:d8:93:da:0a:4a:c8:02:5d:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7F:E1:49:ED:16:8D:4F:F4:B5:A7:CF:BE:33:EF:83:67:B8:24:D6
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:23:96:62:1d:fc:3f:ec:a1:9b:f2:63:00:dd:95:cb:b4:
         1b:6a:ca:9b:84:96:27:e1:82:b2:a1:e3:80:ad:f9:b5:17:ac:
         b4:04:e6:4e:f4:a8:28:6a:22:3e:cc:17:32:c5:46:ef:21:57:
         38:3a:3a:c1:3f:28:fb:e6:33:54:bd:52:62:03:2e:73:d1:78:
         b3:2c:9f:f1:71:7f:71:42:03:32:d9:7a:06:ed:e3:1d:e8:1e:
         f0:2a:1b:71:2c:76:90:41:a1:ab:24:dc:59:8e:51:b6:68:bc:
         8d:5b:5e:9a:0e:d4:41:3b:f6:77:9c:fb:46:f8:5e:80:a4:ce:
         37:a2:74:6c:f0:da:1a:6a:06:be:dd:5b:4d:d5:73:ad:6f:57:
         3a:2d:b0:6e:53:2a:fe:86:dd:9e:25:b2:7f:65:b2:66:d0:7b:
         db:55:01:d7:7e:a6:57:d2:34:ae:c8:8d:58:c8:28:23:43:b7:
         fd:da:57:45:fc:a7:fe:aa:41:7a:e1:f0:ee:6f:0d:09:ec:49:
         0c:f9:14:23:c5:a0:83:9a:ce:9e:6a:84:52:47:18:49:75:d4:
         1e:3b:5d:6e:fa:a7:09:f0:85:e7:a7:b7:75:1c:7b:df:95:b4:
         be:1c:99:36:d0:4a:07:ca:42:4e:9c:45:1b:4d:c3:8c:26:d2:
         65:52:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 20:55:33 2024 by rpki-client on console-ams.rpki-client.org