Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File:                     fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier:          jovRd/K+GlW6atOEmQ+6o0AuRhwQuarJ3Kf5YpC8fQs=
Subject key identifier:   10:9D:B7:C2:0F:5B:98:00:4A:0B:44:3B:13:A1:5B:03:36:4D:0C:44
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer:       /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial:       018F88240C8A54A2072DF37B1FDAEAA65439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number:          0EB6
Signing time:             Fri 17 May 2024 20:00:14 +0000
Manifest this update:     Fri 17 May 2024 20:00:14 +0000
Manifest next update:     Sat 18 May 2024 20:00:14 +0000
Files and hashes:         1: OAXIQA-wV0JBz8DwqMCckaigRrg.roa (hash: BDvIEFeTH+jmJIzLzoM7c+UmSMTZ+ie/g+knpvOlM7M=)
                          2: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: LSL824uwAHmKwAPj//vg2UO/9qxEIIzwR8oZhl5J63Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0c:8a:54:a2:07:2d:f3:7b:1f:da:ea:a6:54:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
        Validity
            Not Before: May 17 20:00:14 2024 GMT
            Not After : May 18 20:00:14 2024 GMT
        Subject: CN=109db7c20f5b98004a0b443b13a15b03364d0c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:ff:19:24:1e:40:2e:c1:3c:a5:c5:45:29:
                    7a:fd:5c:da:7f:0c:38:e6:6c:1e:42:2a:e2:f7:de:
                    38:27:58:6f:5a:d9:be:f0:01:0f:20:88:0c:bf:aa:
                    a2:74:2c:dc:b0:f5:83:5d:81:b4:77:f9:74:e4:74:
                    4b:09:ec:77:fe:87:6e:b1:b9:2d:c1:4a:53:80:e8:
                    1c:f6:a5:35:78:cd:23:81:16:b3:82:07:f3:f1:45:
                    a0:c6:ae:e6:61:61:95:62:ba:24:73:ef:3a:65:d6:
                    99:42:99:e9:06:fd:09:68:bc:6b:03:24:c4:08:a9:
                    f4:95:fd:a5:7d:bc:63:34:5e:54:88:9e:17:81:ed:
                    34:d4:d6:74:0c:fa:be:24:b0:28:c7:66:df:08:11:
                    96:a3:99:fc:19:9b:86:cb:22:5f:7d:4f:e6:01:00:
                    ee:57:d2:50:5f:cf:64:33:7f:a4:2f:ae:0f:1a:5e:
                    57:fe:e8:33:38:59:f1:16:08:9f:2f:af:55:73:9c:
                    25:04:d8:5b:ab:97:44:c5:b7:8c:be:e6:94:74:c1:
                    d1:1f:05:d4:cd:11:1c:11:dc:76:66:b6:44:8c:f2:
                    fa:51:1e:76:01:8a:2f:22:bb:08:6c:c1:a9:ed:14:
                    d4:25:9d:a8:db:5f:18:7c:64:15:c4:d9:23:17:51:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9D:B7:C2:0F:5B:98:00:4A:0B:44:3B:13:A1:5B:03:36:4D:0C:44
            X509v3 Authority Key Identifier:
                keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4c:10:e9:76:33:cf:72:e8:b5:56:f8:67:e1:e0:83:14:0c:
         82:ce:c6:90:14:f9:60:c1:ea:e5:1b:55:60:0b:26:72:04:0e:
         47:20:01:db:30:47:89:1f:8d:ac:7e:1d:1f:87:ea:20:3b:ce:
         4d:cd:ce:9e:11:a7:97:f7:02:e8:3a:a3:c5:a4:90:f0:aa:18:
         97:24:cc:ac:7c:8a:d3:a4:38:30:d6:aa:c2:50:fb:15:14:f5:
         82:3f:1a:55:1f:1d:d5:bf:6f:ec:19:b4:13:97:16:51:b6:91:
         4f:1a:8a:99:4c:d3:9e:48:32:6d:8c:7b:c2:c0:40:f3:b5:38:
         2e:98:c2:41:e9:bb:6b:24:1b:9a:04:4c:c0:98:a7:7c:39:ae:
         62:8d:b0:5c:23:30:d3:1a:bc:0a:47:5f:30:6f:49:59:bc:d2:
         c1:30:f4:b2:63:75:d2:80:12:8d:4f:24:b8:02:b6:41:1c:09:
         7a:b5:ce:b4:42:7f:43:11:93:23:75:19:ab:57:db:59:93:81:
         c6:36:b2:09:3b:85:ff:39:04:81:d5:b2:d1:37:63:89:e0:b7:
         53:96:20:7d:82:68:0b:91:45:5e:06:f5:b9:ee:6b:1d:65:fb:
         7f:61:0d:60:69:32:e2:b7:37:c1:04:3f:8f:b1:43:31:f5:b5:
         48:b5:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:38 2024 by rpki-client on console-ams.rpki-client.org