Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File:                     FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier:          D96NtjSLA8tS/FlOVTPTPzbkLWacxhjubnm4gTyhzfM=
Subject key identifier:   44:E1:FA:CC:A2:46:20:80:03:FF:9D:43:D8:C0:FA:F1:47:12:6B:FF
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer:       /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial:       01901E8F9082C3C9D22AC119497D0CEA7997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:43 +0000
Files and hashes:         1: 7YydcanuV8r2kOzg0awFYdnXVf8.roa (hash: UBJKM21NN3psV+GgDJbyKK5iQmeUadxfLRWhXVMR/cA=)
                          2: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: bLgslGNMbh6yUfzJ0BZR5VxEvQlpWvpompFjcgv09QY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:90:82:c3:c9:d2:2a:c1:19:49:7d:0c:ea:79:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
        Validity
            Not Before: Jun 16 01:00:43 2024 GMT
            Not After : Jun 17 01:00:43 2024 GMT
        Subject: CN=44e1facca246208003ff9d43d8c0faf147126bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:52:46:66:67:15:a5:7b:12:30:1d:c7:2b:
                    9a:62:e2:4f:5f:2d:87:17:f6:44:0f:d8:89:a5:36:
                    e3:98:a7:c7:ea:f5:3d:dd:a1:16:d5:bc:b0:dd:c4:
                    36:e8:c3:64:1e:db:78:89:21:f7:0c:48:79:0b:99:
                    9a:61:da:bb:e2:c9:44:de:a7:96:69:2c:e2:f8:d0:
                    fb:2b:70:59:43:2f:ee:a8:b8:0a:76:0c:80:bc:0d:
                    f3:cf:39:ad:7b:16:a2:01:83:7f:83:a9:d5:8a:b2:
                    75:2b:24:08:7d:10:9f:3e:bb:b1:7f:ab:75:74:11:
                    cd:4f:2e:49:85:2a:71:42:0c:57:18:f3:d3:24:7c:
                    9a:01:39:5d:6e:0c:dd:5d:43:ba:21:d7:9c:86:d0:
                    5b:a7:94:8b:3e:8c:26:8d:dc:10:58:d4:c4:c6:97:
                    16:c8:41:d5:79:d4:8e:3f:17:8b:f1:67:d2:ff:de:
                    65:7c:d1:7b:ba:e6:dd:60:75:4e:27:b7:94:d9:b8:
                    4a:03:56:a5:e7:7f:3e:9e:b2:43:99:5e:da:04:17:
                    ed:3a:dd:1f:9b:89:d7:f7:5a:ac:09:31:7d:f9:e2:
                    3f:32:f2:45:4a:2e:a5:e6:d0:82:74:62:5a:d6:c2:
                    e3:d5:5b:8a:69:07:d7:10:8f:57:4b:14:0d:34:3a:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E1:FA:CC:A2:46:20:80:03:FF:9D:43:D8:C0:FA:F1:47:12:6B:FF
            X509v3 Authority Key Identifier:
                keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:73:70:0f:40:b9:a3:1a:fc:ef:17:73:cb:27:ff:e9:a9:5d:
         1e:5e:03:79:34:17:46:4b:a1:8f:3e:88:e4:e5:80:ae:85:af:
         17:1e:19:0b:eb:55:66:b1:f9:83:d2:e1:ed:05:cd:08:bd:70:
         d0:3e:86:e9:3a:65:53:bb:dd:4e:6a:a3:d3:b2:b6:e5:0e:7f:
         e7:88:57:76:47:bd:7b:a4:97:50:8f:74:6b:86:c1:1d:d3:23:
         50:e7:6b:ff:5d:1d:76:52:67:f3:28:aa:0b:6f:eb:7c:f9:41:
         9f:9e:09:9f:ef:5e:9f:89:ab:0f:b9:d1:91:59:a3:a4:50:c4:
         91:e2:0f:00:ee:e6:2f:02:9f:6d:f6:ac:06:0e:57:eb:6f:75:
         96:af:83:fb:5b:c1:e4:08:ea:d7:11:b7:1a:70:2b:cc:e7:7d:
         f3:6a:33:18:b4:ac:51:14:69:c2:97:fd:d8:86:b0:b0:2f:bb:
         18:c3:7c:61:d3:22:48:b1:cc:0a:af:32:07:85:9d:9a:da:2c:
         e8:2c:79:e3:54:80:40:b4:a6:cc:e7:ce:57:07:93:e0:8b:53:
         0d:50:b4:fe:7a:4a:d8:93:c5:8f:15:8c:24:e2:d7:97:db:0b:
         95:bb:9d:09:fc:5e:de:0c:54:d8:2f:17:ec:a6:48:b9:37:91:
         15:71:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:23 2024 by rpki-client on console-fra.rpki-client.org