Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File:                     FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier:          P4HGxgrxpJ93Cv1bs7X9KU+G61CFYfG77DoeG3LLplo=
Subject key identifier:   17:95:5B:A8:8D:83:DF:72:F1:76:53:B9:0A:80:C3:99:6F:F3:3B:29
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer:       /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial:       01901E8FAFA44757695ABA1C36654CB3AB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number:          1156
Signing time:             Sun 16 Jun 2024 01:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:51 +0000
Files and hashes:         1: 4HFTtP0e7E8r28tOGbp6vkNsnm4.roa (hash: 1jYRuu3ag2qh5tF4jIXjq574fA6AuM78+YA0A6uTX9I=)
                          2: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: iKO3kxutJGAA6jvkjRW/rlY99iJnGnkgo1uTlA4/BHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:af:a4:47:57:69:5a:ba:1c:36:65:4c:b3:ab:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
        Validity
            Not Before: Jun 16 01:00:51 2024 GMT
            Not After : Jun 17 01:00:51 2024 GMT
        Subject: CN=17955ba88d83df72f17653b90a80c3996ff33b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ee:1a:90:5c:c8:22:ed:7a:10:b4:0a:e9:e1:
                    63:99:47:4f:df:69:91:ce:18:27:5f:fc:6d:cf:9f:
                    31:68:0f:e3:e4:3b:74:c0:28:61:a9:7c:31:61:3f:
                    18:62:24:0e:d3:90:00:0a:57:bf:ce:5a:bc:71:85:
                    c3:2e:76:0f:18:0f:25:94:0d:05:27:6a:3e:02:3c:
                    28:ba:90:4b:cc:ef:2b:92:75:a1:2b:12:56:57:a9:
                    35:70:cd:a8:f1:81:ec:a7:f4:77:0b:cb:6d:75:a3:
                    a8:f3:a7:e8:10:e8:77:16:e7:4e:7b:e0:ce:a6:27:
                    85:c0:c7:f8:dd:40:e3:9b:65:a4:7f:d8:c2:49:aa:
                    76:ae:82:0a:f9:a3:c7:c2:cf:0f:1e:b2:a9:05:87:
                    b5:5a:eb:2f:a5:d5:4e:cb:61:c8:20:79:66:f1:ef:
                    58:56:c8:7f:c6:c5:dd:29:62:7a:c3:17:1a:6a:c4:
                    87:a0:b8:6f:8f:62:08:a0:39:76:ae:47:86:88:06:
                    cb:db:e8:bb:8a:35:3a:52:11:af:cc:04:d0:9a:b5:
                    e9:7d:21:91:1c:f2:c0:6f:e7:bb:d8:b9:fb:dd:b0:
                    83:89:01:c4:5e:18:42:57:b5:7b:b8:8e:66:7b:15:
                    5e:e6:df:b4:ae:82:e7:23:f9:47:30:eb:cb:89:fd:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:95:5B:A8:8D:83:DF:72:F1:76:53:B9:0A:80:C3:99:6F:F3:3B:29
            X509v3 Authority Key Identifier:
                keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:8e:e4:c8:94:88:a2:a1:10:40:72:9e:ec:19:db:06:a5:
         0c:14:d3:38:a8:7d:22:13:8b:7a:47:e8:45:ff:b2:0c:3e:70:
         ce:ed:f4:9c:f5:c6:8e:d5:52:28:d5:f0:5f:ce:0f:31:ea:e5:
         d4:b4:b9:fb:a8:22:9b:43:f1:81:f4:c1:94:1d:92:5b:07:8c:
         e7:35:57:63:98:f9:0d:3e:df:44:28:88:d9:11:b8:a2:fc:f0:
         3f:dd:c2:7b:aa:35:e0:d2:78:d3:8c:02:9f:ae:30:70:42:6b:
         c0:ab:58:1c:c8:51:4d:76:c6:e9:59:aa:a5:be:cc:1b:58:10:
         55:a4:30:e6:9f:f9:14:3f:fb:a3:bc:12:5f:ec:e7:b3:b0:8e:
         e9:b6:f3:ff:46:f9:e2:4e:14:b0:b7:de:e2:11:f8:5c:98:47:
         33:74:ee:91:bb:4e:f4:66:e4:0f:98:a7:ab:74:ba:d5:80:95:
         09:33:9f:ad:42:18:a3:67:f0:f3:21:9d:ad:1c:59:0c:99:d4:
         b3:53:e5:70:f0:70:cc:ae:bc:37:bb:54:aa:b0:13:7d:33:f2:
         d2:d1:61:74:7c:26:dd:93:e2:2b:e8:c6:df:35:e3:43:65:b2:
         95:8b:db:06:4e:53:c9:37:ee:21:a4:9b:27:c5:4b:73:bc:b4:
         eb:d8:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:12 2024 by rpki-client on console-fra.rpki-client.org