Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File:                     FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier:          rg/JsfE02S5Gq9L2s/AMG/ZVLXd8xDo93vD+It+eg/Q=
Subject key identifier:   12:B2:F5:E6:AE:CE:72:45:D1:0F:EF:47:8E:88:92:98:16:9C:DA:79
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer:       /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial:       018F8FA709A2F8D72BBF4EE46EA4821B45B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number:          0C82
Signing time:             Sun 19 May 2024 07:00:39 +0000
Manifest this update:     Sun 19 May 2024 07:00:39 +0000
Manifest next update:     Mon 20 May 2024 07:00:39 +0000
Files and hashes:         1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: F22a2WXhFKQoZhuKMrkAH3zzp7quBdjepCG+A1DKQww=)
                          2: uOEyephpBWhjCJFhXPW41OUjzw8.roa (hash: lWxoiYao6lXvmtLHd79z+UcBgbho/xVaqOlYxuyQ1wI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:a7:09:a2:f8:d7:2b:bf:4e:e4:6e:a4:82:1b:45:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
        Validity
            Not Before: May 19 07:00:39 2024 GMT
            Not After : May 20 07:00:39 2024 GMT
        Subject: CN=12b2f5e6aece7245d10fef478e889298169cda79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:31:6e:e0:f2:51:e5:bb:8d:cb:5a:e5:7b:75:
                    ae:5e:87:09:4e:b6:dc:54:60:cb:02:14:be:f2:a0:
                    e2:28:80:ca:a0:4d:45:21:ce:de:7a:42:f2:bd:63:
                    80:60:b0:55:89:65:82:fd:c8:fc:e9:74:a8:7e:3f:
                    94:0f:03:e1:92:9a:4e:b7:98:5b:38:d9:71:3c:c2:
                    fd:e2:6b:61:1b:be:33:9d:88:ab:fc:53:2f:f4:5a:
                    d3:98:20:61:98:49:56:e3:22:4c:60:5a:4e:a6:2f:
                    c9:06:c9:f1:91:9e:8c:c5:66:cd:84:0b:40:55:e7:
                    a0:fc:14:60:2a:63:20:d6:a6:c5:23:a7:2a:d0:51:
                    fa:70:93:c4:fa:0d:91:80:f4:54:e9:93:66:fc:ba:
                    dd:05:c9:61:97:93:74:c8:a6:3d:01:9e:27:33:12:
                    7b:38:9f:fe:62:b7:82:24:e7:aa:5f:e3:a6:67:19:
                    bf:c1:db:b1:fe:c2:4f:f2:87:59:3e:5c:db:4f:60:
                    0a:14:35:28:9a:41:fa:eb:3c:02:9a:41:57:19:cb:
                    ea:8a:f6:43:41:10:83:f3:c6:c0:63:7c:5e:67:3f:
                    4a:a5:66:3f:b5:7d:cd:ab:bb:70:6b:08:c3:fe:19:
                    87:af:e7:70:e4:36:ab:d2:72:79:c4:5f:9e:9f:5d:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:F5:E6:AE:CE:72:45:D1:0F:EF:47:8E:88:92:98:16:9C:DA:79
            X509v3 Authority Key Identifier:
                keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:18:12:0c:2c:16:8d:7d:b4:b4:87:50:70:45:24:7d:e8:
         5b:25:0c:a3:bd:7a:77:38:42:73:10:7f:2c:fa:56:c9:f8:4a:
         c3:f5:ec:24:80:41:a0:8b:ac:af:ce:65:fa:b3:af:ef:b9:98:
         3e:98:44:e7:9f:11:df:d2:0e:0c:8c:ba:ad:9d:68:2f:e1:e3:
         0e:1f:89:6b:db:1a:fd:9f:8f:39:ff:f5:ce:d6:d2:13:2d:08:
         6b:82:cc:92:62:8d:16:1c:50:cb:64:70:1d:c3:b1:9a:95:85:
         e7:c5:5e:66:d0:0e:99:37:a3:eb:61:3e:99:d4:9a:e8:7d:db:
         13:e3:a6:0e:17:fa:16:73:86:34:66:2d:f9:43:de:8b:f1:81:
         c8:85:19:b6:91:56:21:3d:c7:7f:4d:4a:d8:1f:08:15:18:d2:
         f7:c9:2b:1c:62:5a:6a:c9:41:4f:69:73:ff:ec:dd:60:d0:0d:
         a1:45:7b:ac:ce:21:0d:ad:d8:78:28:64:be:85:8e:62:fd:2e:
         40:5f:1f:a9:a0:59:77:3b:fc:a4:f4:a5:99:e4:00:3f:aa:42:
         46:9d:8f:b3:4b:aa:6a:f3:20:8e:c4:bb:88:c3:1e:64:15:10:
         10:3f:30:f9:02:20:23:6f:3f:0e:fa:9b:f0:6e:d1:0a:f1:40:
         ac:2c:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:55:24 2024 by rpki-client on console-ams.rpki-client.org