Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          8gKjpkz5MbarUMq2haoQHeVsg/uDG1qphi66m+69Hrc=
Subject key identifier:   1C:25:17:62:85:AC:A3:B8:A3:67:C6:4B:5C:0C:D7:3A:95:CA:AE:62
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       01935989E82B57B05F435C387AE6166C88CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 15:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:30 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: 3FcLG4fvagAAKfxqjy/ND8lcHILS2pAGcHJrqiufwd0=)
                          2: rWOAbIpzGCqQdXIVzmzNOIqs9M8.roa (hash: zO4kfJZ27Onb2pTvjOHSvjh3dJzDY02hMAy8EQurg5w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:e8:2b:57:b0:5f:43:5c:38:7a:e6:16:6c:88:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Nov 23 15:00:30 2024 GMT
            Not After : Nov 24 15:00:30 2024 GMT
        Subject: CN=1c25176285aca3b8a367c64b5c0cd73a95caae62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:03:a2:77:40:75:42:d3:c5:46:66:8e:c8:
                    d7:b8:24:05:5f:38:2e:bb:8a:06:8e:26:a9:78:2c:
                    5b:78:60:f7:79:3b:c5:4c:bd:47:45:8e:27:3f:97:
                    a2:e3:8b:81:65:b8:c8:59:fc:65:d2:58:35:da:a3:
                    63:d0:1b:85:cd:34:66:33:1a:96:2d:db:81:1a:29:
                    bb:ae:4e:17:3d:3c:bc:d4:69:2e:33:a2:76:63:39:
                    09:7b:c1:29:91:47:f7:65:13:e8:c5:4e:dc:70:67:
                    e7:dc:c9:5c:2a:7e:01:bb:d3:53:28:c3:a3:0c:41:
                    11:3d:57:99:a7:0c:32:4a:4a:e1:6a:22:cd:11:b2:
                    35:db:46:59:c8:c0:b1:84:9b:e0:7c:57:18:d9:01:
                    11:e3:7d:bf:db:a3:6d:c6:0e:43:f4:c0:ba:35:25:
                    f7:b8:c0:a4:1c:69:23:c4:65:dc:ca:58:de:6e:2e:
                    82:74:9f:11:6b:9f:0a:c8:0d:d4:83:a7:03:68:7e:
                    24:63:39:69:9a:ad:a6:a2:18:63:a4:90:f6:8b:3b:
                    e8:84:6a:cf:97:67:70:1e:00:37:18:3a:c9:01:25:
                    13:50:c2:fc:6a:a9:12:4b:1e:ad:57:68:d0:50:65:
                    de:e5:4d:7a:a3:5b:1b:9b:73:3d:81:65:c6:a3:bd:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:17:62:85:AC:A3:B8:A3:67:C6:4B:5C:0C:D7:3A:95:CA:AE:62
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:02:7a:41:b6:88:28:1c:a5:c7:c2:70:db:60:e1:35:8d:
         66:15:a9:14:87:99:e2:f5:66:c7:b5:41:31:bf:a6:41:30:80:
         18:8d:e8:db:80:bf:dc:a2:e9:5d:4d:6a:d1:db:c8:90:0f:e2:
         40:27:ee:50:4c:9a:c5:3c:05:01:3a:81:57:12:40:e7:cf:70:
         22:c0:a2:bf:7b:d4:3b:b1:fc:4f:f6:1f:78:49:8a:84:0b:1c:
         74:a1:d0:ec:f8:ea:f1:af:c3:fc:27:cb:52:c0:f9:1f:92:c4:
         ec:1f:c1:e2:90:19:b9:0c:18:bf:b9:09:fc:c2:68:00:78:d3:
         5e:63:9e:a7:b1:b6:44:90:e5:41:38:b6:22:cd:ca:9b:59:8a:
         e3:d3:1a:cb:93:10:37:ba:bb:85:58:d9:65:7f:4d:ef:5e:af:
         60:25:d1:56:7a:3f:64:f4:79:ac:3e:2a:64:bf:45:b2:24:d8:
         79:ab:9f:f4:e4:c0:d7:14:10:49:17:6a:46:2e:06:0b:17:c1:
         1c:ad:ee:f6:35:65:e0:ea:19:c4:40:45:5b:96:49:23:1a:10:
         d6:e8:76:ca:f4:f8:eb:10:d5:1a:51:6e:b3:21:50:56:12:4a:
         e9:17:28:73:5b:60:d0:d7:f3:af:0d:f7:3a:60:4e:c4:e1:9d:
         0b:b7:05:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZiegrV7BfQ1w4euYWbIjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTQ5MjU4ZGM3NjU0NmRjNTk1MDg0ZDI1OTNlMTgxY2Q0
Nzk4M2YwHhcNMjQxMTIzMTUwMDMwWhcNMjQxMTI0MTUwMDMwWjAzMTEwLwYDVQQD
EygxYzI1MTc2Mjg1YWNhM2I4YTM2N2M2NGI1YzBjZDczYTk1Y2FhZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLwDondAdULTxUZmjsjXuCQFXzgu
u4oGjiapeCxbeGD3eTvFTL1HRY4nP5ei44uBZbjIWfxl0lg12qNj0BuFzTRmMxqW
LduBGim7rk4XPTy81GkuM6J2YzkJe8EpkUf3ZRPoxU7ccGfn3MlcKn4Bu9NTKMOj
DEERPVeZpwwySkrhaiLNEbI120ZZyMCxhJvgfFcY2QER432/26Ntxg5D9MC6NSX3
uMCkHGkjxGXcyljebi6CdJ8Ra58KyA3Ug6cDaH4kYzlpmq2mohhjpJD2izvohGrP
l2dwHgA3GDrJASUTUML8aqkSSx6tV2jQUGXe5U16o1sbm3M9gWXGo7150QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwlF2KFrKO4o2fGS1wM1zqVyq5iMB8GA1UdIwQY
MBaAFBbkkljcdlRtxZUITSWT4YHNR5g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZjE2ZjctMTQ1NS00M2RiLWFjYjQt
ODMyN2E5NTJiMmI4LzEvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZjE2ZjctMTQ1NS00M2RiLWFjYjQtODMyN2E5NTJiMmI4
LzEvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsQCekG2
iCgcpcfCcNtg4TWNZhWpFIeZ4vVmx7VBMb+mQTCAGI3o24C/3KLpXU1q0dvIkA/i
QCfuUEyaxTwFATqBVxJA589wIsCiv3vUO7H8T/YfeEmKhAscdKHQ7Pjq8a/D/CfL
UsD5H5LE7B/B4pAZuQwYv7kJ/MJoAHjTXmOep7G2RJDlQTi2Is3Km1mK49May5MQ
N7q7hVjZZX9N716vYCXRVno/ZPR5rD4qZL9FsiTYeauf9OTA1xQQSRdqRi4GCxfB
HK3u9jVl4OoZxEBFW5ZJIxoQ1uh2yvT46xDVGlFusyFQVhJK6Rcoc1tg0Nfzrw33
OmBOxOGdC7cFEA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:04 2024 by rpki-client on console-ams.rpki-client.org