Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File:                     FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier:          x76r3Egx9UvA59Ff1qGorY23tSjxSdOWoIAY3g4MfeA=
Subject key identifier:   14:4A:36:7E:79:91:C8:FE:6E:F3:4D:61:6D:08:28:74:5B:5A:9D:E2
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer:       /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial:       018F4CB4F49EB03811FED6C3CB93C232D070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 07:01:18 +0000
Manifest this update:     Mon 06 May 2024 07:01:18 +0000
Manifest next update:     Tue 07 May 2024 07:01:18 +0000
Files and hashes:         1: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: l2Ypj+ERPH5pKdYXjqSRiHaE3i0daLmB44XzWyIznjc=)
                          2: gCM1y-e2zsjHt9RkX-D5d5aYgX4.roa (hash: 8JrUBoe68L2ZgIqhKYS2iruFHlqx62TZjL6Y842fJ1s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b4:f4:9e:b0:38:11:fe:d6:c3:cb:93:c2:32:d0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
        Validity
            Not Before: May  6 07:01:18 2024 GMT
            Not After : May  7 07:01:18 2024 GMT
        Subject: CN=144a367e7991c8fe6ef34d616d0828745b5a9de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:b4:37:e2:8b:27:de:4e:ac:c1:01:46:d3:
                    10:2b:aa:06:b2:b2:45:54:b9:a4:d1:2e:30:95:d5:
                    92:64:97:4d:33:64:17:ce:90:e9:4e:43:e1:97:13:
                    e1:30:cc:36:15:87:42:86:06:d6:3a:12:0f:8e:fd:
                    e7:66:5f:9c:70:d2:30:2a:5d:bd:8f:d0:a5:ca:08:
                    db:1a:c6:a0:0f:44:2a:c7:41:98:28:ee:57:38:04:
                    b8:17:ea:82:e5:ed:3e:6b:c9:9b:c3:3b:09:66:46:
                    c5:c8:cf:aa:bf:a9:cb:47:d7:9d:26:e0:36:58:7f:
                    a3:2f:b8:6f:af:4a:a3:36:26:84:32:05:3d:a7:f9:
                    00:70:da:c3:39:2d:ed:e1:3e:38:93:f8:39:b1:1b:
                    bc:26:6c:66:5b:24:e9:d5:e9:b6:9e:04:15:34:aa:
                    d6:21:7a:2c:7a:b7:17:05:83:b0:ae:3e:1b:2d:68:
                    d8:cf:ee:15:25:e4:be:61:79:59:c2:45:b0:f2:b1:
                    92:aa:a7:33:47:10:ff:d8:e6:f1:a7:ba:ab:5b:95:
                    c4:b5:15:4e:bd:c1:cb:55:fa:81:a6:e2:c8:84:82:
                    8f:42:5a:1d:d7:82:65:d3:40:04:e5:b6:ea:f9:bd:
                    1a:20:4a:10:ef:e2:dc:b4:0f:ab:7e:9c:2c:e7:1d:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4A:36:7E:79:91:C8:FE:6E:F3:4D:61:6D:08:28:74:5B:5A:9D:E2
            X509v3 Authority Key Identifier:
                keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7a:07:71:e4:bd:8e:08:23:fc:3a:a8:f5:c8:98:41:f2:32:
         77:31:70:2e:33:6d:aa:32:d7:35:fe:86:df:1f:81:40:5a:e6:
         6d:02:5e:09:ed:af:bc:f3:91:3d:5b:52:57:68:ec:51:5f:69:
         8b:48:8e:e7:98:8d:a0:53:3e:fa:f8:0d:5b:13:71:d6:e7:ac:
         38:d7:0b:6f:2d:bb:ea:5a:71:dd:a3:7b:f0:8b:6b:6b:48:5d:
         00:f9:17:1e:7e:6a:fb:77:9d:41:82:63:77:fb:f9:e1:3b:b1:
         83:05:35:09:39:37:63:1c:77:ab:33:2f:51:66:73:81:a9:5a:
         cd:7c:a4:50:3f:3b:2b:02:95:1b:cf:a4:bb:74:e2:d8:3d:5e:
         ff:06:45:b5:6d:4b:bc:2c:5d:51:7e:0f:66:6b:8f:d7:a0:34:
         c9:f8:95:98:44:37:4f:ec:84:28:90:0e:5d:cd:30:7f:22:c8:
         52:2a:bd:c0:bf:ea:76:74:11:a2:4c:fa:eb:d6:00:a1:c2:f5:
         9b:2d:83:58:c8:b6:e2:e4:fb:68:bb:8f:47:d5:98:36:91:d6:
         d3:f6:eb:59:db:e9:5c:d5:c3:93:85:6a:df:85:07:be:dc:4e:
         da:70:40:99:f7:e8:dd:4b:d5:93:e4:1f:6b:5a:8a:5f:8e:bf:
         ff:e1:76:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:21:10 2024 by rpki-client on console-ams.rpki-client.org