Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.mft
File:                     fBePTksOLCDmqIgCDI5tApopNJY.mft (raw, json)
Hash identifier:          OoLeDy/9+rDiAGAFNHYVrWRFi+FeI2Fjd/JcahsitQ0=
Subject key identifier:   FC:83:FD:53:94:3C:F1:4B:C6:3B:5B:6A:96:76:6B:73:E9:16:18:7B
Authority key identifier: 7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
Certificate issuer:       /CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Certificate serial:       01901EC697BC6C471CE5233C20D33E749332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.mft
Manifest number:          10BA
Signing time:             Sun 16 Jun 2024 02:00:49 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:49 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:49 +0000
Files and hashes:         1: b40urTfVsJryFJOrMggXV73yp9A.roa (hash: IX6IO9qYSeHZc2bJ4b2uojgMBmwDK+xARRYu0xLKY8E=)
                          2: fBePTksOLCDmqIgCDI5tApopNJY.crl (hash: QpJdtOxriRp8RQUmWnMj7OAC0th4q0iJMyb7JcGbVzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:97:bc:6c:47:1c:e5:23:3c:20:d3:3e:74:93:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
        Validity
            Not Before: Jun 16 02:00:49 2024 GMT
            Not After : Jun 17 02:00:49 2024 GMT
        Subject: CN=fc83fd53943cf14bc63b5b6a96766b73e916187b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:7f:e5:f0:28:b7:db:8e:87:e6:15:83:62:
                    ec:7a:89:c8:b2:27:ac:a9:5d:18:6f:95:a7:89:84:
                    32:16:ab:61:b1:52:f4:ba:b2:38:56:e1:40:f1:11:
                    76:f5:59:d5:8a:54:e7:cf:95:ae:be:8c:31:ae:83:
                    eb:6d:f8:14:4e:27:29:39:ff:cc:67:05:05:f9:e0:
                    c2:80:6d:42:23:a6:a2:6f:be:bf:63:2d:ff:ca:0c:
                    80:0c:3c:0b:ee:c4:15:01:2c:6e:d0:28:20:7c:a7:
                    58:b0:70:c0:e7:dd:3f:e2:91:c1:54:47:80:ad:9d:
                    64:d6:e0:47:11:91:94:2e:7f:56:02:f9:30:3e:c8:
                    28:fe:da:07:f1:dd:a1:55:ff:ea:7d:b8:bb:41:69:
                    04:b8:d6:9c:3a:16:9e:88:ed:0e:a5:29:62:d0:2b:
                    f9:db:49:91:8f:5b:78:c3:9c:3c:2e:d8:06:4f:be:
                    06:84:fd:ae:18:03:cb:c6:9d:c0:09:90:c6:db:5b:
                    98:fc:82:e9:64:82:da:61:11:23:8d:67:82:74:93:
                    20:9a:4b:bd:7b:79:06:17:6e:22:d1:d4:f5:67:5d:
                    69:a0:47:68:e9:89:2f:96:86:08:25:1c:93:46:5d:
                    9c:eb:0d:1f:b2:75:1d:41:2d:d3:da:80:9e:26:3a:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:FD:53:94:3C:F1:4B:C6:3B:5B:6A:96:76:6B:73:E9:16:18:7B
            X509v3 Authority Key Identifier:
                keyid:7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d8:c4:8c:64:40:08:8b:bb:e5:66:64:60:2f:b5:6c:fb:68:
         69:90:5b:9e:c3:5f:e1:fc:d0:35:15:ef:08:50:34:52:30:71:
         b5:ab:7b:95:73:d7:04:34:45:75:8f:f4:59:19:26:b5:90:02:
         ff:0a:a2:c4:fc:e8:61:b4:59:3c:45:85:0a:00:4e:4f:02:45:
         e9:ba:ff:30:ff:25:9d:bb:a5:73:79:52:cb:7b:cf:c3:2a:6c:
         35:1c:3b:8c:8e:37:16:46:e7:4a:c8:ac:5f:e9:06:3e:97:8e:
         89:04:a7:cf:ba:23:9a:18:de:d3:98:87:d0:93:ab:6e:8d:2a:
         b1:53:0f:98:d4:ad:6d:ec:6d:4e:a0:5f:b5:8c:ef:02:34:53:
         d0:7a:16:4b:ba:26:a6:ce:9d:b4:00:e1:f5:01:31:48:7f:04:
         25:50:ec:69:ac:92:cc:8d:8f:a7:08:72:82:99:ed:7e:fd:4a:
         45:b2:ad:e0:dd:12:8d:36:28:07:66:8a:bd:bf:40:36:1c:40:
         5d:9f:04:a4:2e:46:e3:f4:6e:03:5b:4d:bd:da:87:12:ff:bc:
         cf:3f:e9:d8:c0:ca:fc:6d:5c:66:e2:76:2b:8f:d0:e5:02:74:
         aa:b2:55:57:6d:6f:f7:97:9c:05:fa:ca:62:d3:11:91:e4:8a:
         57:3d:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:09:35 2024 by rpki-client on console-fra.rpki-client.org