Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File:                     FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier:          Gmi9WN8p9W6+T7GHty84MzPuC7yn7/W5Yf7OKYgKJXw=
Subject key identifier:   A7:76:1B:E1:9C:29:CE:50:16:5F:16:F2:80:AE:E7:55:24:D4:EF:96
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer:       /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial:       01901CA195A80579F0461D1061271572EF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number:          08BA
Signing time:             Sat 15 Jun 2024 16:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:10 +0000
Files and hashes:         1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: Ulp7K6IPMqunAM2TJEX/vZdGxBz1obwTi71Kpe15cpE=)
                          2: jKupxe_itlY3U739vX4wEwX34KI.roa (hash: l7YKjFVWIR5NryBfRrIqqTTmJwLhkO8Uxr+2Rcl7Xtc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:95:a8:05:79:f0:46:1d:10:61:27:15:72:ef:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
        Validity
            Not Before: Jun 15 16:01:10 2024 GMT
            Not After : Jun 16 16:01:10 2024 GMT
        Subject: CN=a7761be19c29ce50165f16f280aee75524d4ef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:0e:f7:f7:44:09:6a:cf:56:21:75:1d:95:
                    e0:94:d7:ea:4c:ec:60:f5:a3:45:6a:03:b4:d6:38:
                    9a:07:ce:f4:47:a1:fe:75:12:a8:02:80:ba:0c:a3:
                    bf:80:43:4c:11:38:1e:d9:0f:74:d7:1a:92:33:0c:
                    36:54:36:ff:4d:6f:d8:75:1e:4c:42:20:8f:b9:a6:
                    32:87:07:3f:4e:05:5a:1e:13:41:ac:6e:9b:09:0c:
                    b2:2d:ed:f2:81:ef:4e:e1:f2:90:6e:0c:44:af:30:
                    7f:ca:a0:fa:db:f1:e3:15:c8:32:f3:37:4b:85:3c:
                    e6:46:60:16:87:8d:63:d8:81:64:17:53:1c:5d:2c:
                    ef:5e:ec:ee:97:a3:63:5b:62:91:45:8e:3e:ad:5f:
                    70:e1:37:d8:31:b4:1b:c5:cf:21:36:fa:bd:47:2a:
                    02:60:d3:2c:2b:0e:17:31:0c:d0:02:74:d5:f0:75:
                    c1:d5:b6:43:70:7f:2a:61:12:a7:39:14:48:28:ea:
                    31:51:65:da:b6:66:5f:86:a4:89:0e:0a:37:69:3d:
                    dc:f6:d6:c4:02:99:e1:2a:2c:34:34:b0:49:6f:f7:
                    8c:94:fc:e3:30:40:88:8e:40:70:42:67:7c:94:fe:
                    bf:7f:7a:29:ac:4b:10:6c:57:73:67:ec:21:31:3c:
                    0c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:1B:E1:9C:29:CE:50:16:5F:16:F2:80:AE:E7:55:24:D4:EF:96
            X509v3 Authority Key Identifier:
                keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:58:99:95:c1:1a:9a:2a:cd:4b:8b:7b:3b:87:e9:4b:e3:
         fd:31:44:97:5f:d6:9e:01:45:33:48:51:78:6c:f4:76:8c:b9:
         53:b6:df:8f:bc:34:02:e9:0e:d6:74:2b:63:fb:b3:d4:1e:d2:
         0a:0d:3d:d5:5a:a4:23:ef:7d:c3:71:c5:9d:09:d1:7f:eb:59:
         50:16:72:b8:c0:87:a1:2e:8d:72:bf:50:ee:d9:24:6c:10:c2:
         4b:fa:31:63:1f:71:b9:af:76:c2:ac:27:1b:87:2d:e5:88:bc:
         31:6d:d4:9b:91:db:14:3b:7b:97:3b:08:78:11:8f:9c:8d:99:
         75:a6:40:0d:8a:62:1d:17:f6:d3:9a:f2:9a:c1:92:90:44:58:
         a9:f5:aa:0f:10:22:af:ab:9a:26:ae:3e:dd:3c:26:0f:f2:41:
         16:fd:ef:4e:0c:26:be:c5:ab:9f:23:cf:24:74:f1:c4:b6:3f:
         e5:de:83:5a:95:7b:a9:14:b7:ff:2a:5c:00:39:9e:6e:21:5f:
         c4:26:a3:32:37:8e:c5:4e:c4:91:82:03:ac:f3:58:16:55:07:
         3d:00:61:16:f0:2a:0d:3f:10:cb:92:96:88:90:cc:c2:a5:d0:
         ba:65:3c:08:3f:d9:b6:17:7c:d8:72:81:d5:ea:23:65:31:9b:
         15:70:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:24:50 2024 by rpki-client on console-ams.rpki-client.org