Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File:                     fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier:          3tNkAB8qUn6LPD+R0JL/JT2C6cn+dncl2qpvs4ynUhA=
Subject key identifier:   6B:97:4E:61:B1:A0:F9:20:2D:55:15:B6:5D:CE:49:F6:DC:DC:11:C9
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer:       /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial:       018F86A3D448A0F141F46056B73F31319396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number:          0FCC
Signing time:             Fri 17 May 2024 13:00:34 +0000
Manifest this update:     Fri 17 May 2024 13:00:34 +0000
Manifest next update:     Sat 18 May 2024 13:00:34 +0000
Files and hashes:         1: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: udpR2X2aaBTk4k5dOv8+gme2ZywlM7Rj//f8bsze8Qo=)
                          2: iYRg4Kon-4YvHLJz7la9I8oITE8.roa (hash: +sKJZEdLz4uvnfYmlsht1oxgb7hA0tkkfwojbWk975k=)
                          3: v0-1WvqdPopOt_kaXYWVc4YsNvM.roa (hash: uemxayWVfnaNdPlHJJkugkWq+eY/BzTmbjqNFPv/S+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:d4:48:a0:f1:41:f4:60:56:b7:3f:31:31:93:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : May 18 13:00:34 2024 GMT
        Subject: CN=6b974e61b1a0f9202d5515b65dce49f6dcdc11c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:af:87:7b:07:26:cd:47:17:d7:83:1f:5e:
                    81:9c:66:5c:a6:73:c5:f7:c2:28:bb:0f:d6:27:b8:
                    07:15:22:c4:f9:29:90:aa:15:ab:5c:18:83:70:b9:
                    fa:9e:94:35:61:20:3d:17:22:86:9b:a0:7e:3a:72:
                    bc:dc:c6:4f:12:bd:b4:f3:cc:fc:86:aa:0c:af:90:
                    b2:36:ab:90:7d:3d:10:38:aa:3e:97:25:41:a6:8f:
                    f6:a2:85:80:1d:9b:06:27:93:9e:cf:c8:9e:3d:65:
                    44:59:82:7c:be:77:28:73:f3:4f:98:f8:46:01:7a:
                    7b:15:de:59:1e:22:a9:76:63:ec:ac:f5:be:14:c2:
                    6d:cd:4e:6d:3f:b4:98:9a:05:e4:d4:fb:66:85:63:
                    f9:1c:f6:9e:02:08:f0:b0:38:46:75:1e:d3:95:68:
                    15:a0:61:94:d5:7a:f5:c3:75:ec:6d:f5:6c:85:06:
                    03:90:13:2b:f8:7d:76:bb:af:fc:be:10:08:76:0f:
                    ec:6b:4b:a7:78:37:b1:23:cf:e8:8d:3a:47:93:41:
                    99:35:91:9a:4d:71:46:27:db:56:ed:76:e0:ad:7d:
                    8e:9c:04:1a:15:fc:a6:07:95:b6:b9:6a:82:81:ba:
                    89:41:e7:8d:88:34:1d:76:d1:83:47:3d:e6:e4:78:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:97:4E:61:B1:A0:F9:20:2D:55:15:B6:5D:CE:49:F6:DC:DC:11:C9
            X509v3 Authority Key Identifier:
                keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:94:f7:de:75:4d:03:ce:b9:cd:e1:8b:c2:29:4d:a4:b9:f9:
         0d:d0:df:d8:90:77:77:76:0d:da:94:9d:7c:11:69:a6:0e:3a:
         f8:e8:63:30:ba:d7:08:3f:45:52:e9:7c:b9:be:66:c6:c9:00:
         00:32:83:9c:76:aa:d0:8c:44:17:a3:b4:a2:d6:08:32:19:c0:
         45:b0:50:61:2e:8b:b6:d0:b1:62:89:dc:df:df:1c:62:d0:81:
         03:3e:d8:ce:1f:f1:dd:14:df:60:53:92:8a:77:1d:9c:a5:61:
         0c:0b:dc:79:3d:a6:ab:fc:77:7b:1d:67:c4:90:6a:e7:96:d6:
         17:8a:59:f8:b2:56:9b:e5:a6:77:d1:62:6a:75:d4:99:b9:a4:
         06:9d:0d:22:b5:ed:f2:1b:0b:e2:a1:29:0a:9c:8e:45:f7:66:
         54:26:61:2b:ff:fc:79:03:d7:5c:34:4a:1a:e4:28:00:6a:9b:
         2a:b4:1e:a0:ae:6d:a7:26:9b:00:be:7a:09:9e:61:af:53:12:
         87:b7:d2:e4:da:2e:72:8b:9b:49:e4:d4:22:c3:6a:74:32:df:
         e4:63:73:ab:5c:7e:b7:09:49:62:f5:eb:8f:d9:f6:15:5f:59:
         5b:32:0b:f8:65:d0:90:38:0b:0a:b9:65:e7:2e:d1:a3:a1:e2:
         ed:59:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:15 2024 by rpki-client on console-ams.rpki-client.org