Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File:                     F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier:          iRDiAPpDDa2hJA0iV6xEVeTCQ7l0TCi4Y/mqRYnnAsE=
Subject key identifier:   51:4E:AC:3B:87:1A:6A:38:71:44:F1:35:E5:E6:06:08:1E:58:49:18
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer:       /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial:       019355AD0A3488F6E0542DAA629FA864D9D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number:          0C41
Signing time:             Fri 22 Nov 2024 21:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:23 +0000
Files and hashes:         1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: Sk2Ch/tcHKMvQ5oCnyCVtO8lv8eGLFxMkcRp6gRMDeo=)
                          2: fmfax-B5bsHPXY_UTyDMokB0Jvc.roa (hash: rMGVner7d48NGxbJxNee+0KtddgiekXS54fkkb7MfDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:0a:34:88:f6:e0:54:2d:aa:62:9f:a8:64:d9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
        Validity
            Not Before: Nov 22 21:00:23 2024 GMT
            Not After : Nov 23 21:00:23 2024 GMT
        Subject: CN=514eac3b871a6a387144f135e5e606081e584918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e0:75:3b:b3:a3:5f:39:c6:20:cb:5a:79:3e:
                    c4:d7:02:88:37:a0:70:b4:89:6e:29:21:ba:22:0d:
                    9a:b0:78:40:75:6d:96:5d:ef:c1:0a:92:42:90:19:
                    04:34:1f:8b:84:05:21:17:1c:de:7f:5d:11:3e:13:
                    e4:16:56:18:7d:19:87:5a:32:97:32:56:c3:ea:01:
                    fd:e6:c2:9f:93:f6:19:45:c1:e1:97:7f:04:33:e5:
                    31:c2:1d:04:39:fe:d5:07:18:83:68:77:79:56:cf:
                    6b:f5:c6:87:90:c6:d5:57:c0:da:ae:55:7e:4b:b9:
                    4f:6b:19:df:e0:77:e0:4a:86:95:23:5f:95:01:9b:
                    0c:86:ae:ce:85:0c:37:ef:11:9c:41:38:f8:fc:ff:
                    10:6a:98:64:05:0f:6c:b2:f7:5a:03:b9:e4:11:50:
                    ef:cc:76:3f:f9:df:72:26:0f:48:80:d6:59:9a:e8:
                    eb:e1:96:f9:cb:56:9d:03:31:1d:50:da:b5:59:17:
                    81:c5:ad:dc:89:4a:6a:d7:74:e9:c8:d7:d4:19:22:
                    bc:a7:19:3b:83:20:81:cc:5b:c7:02:ec:90:6a:ec:
                    67:64:2a:e3:cc:2e:a5:33:32:96:22:e8:fc:8f:9f:
                    bf:67:92:6f:45:57:6c:1a:9c:47:29:90:3a:e6:ba:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:AC:3B:87:1A:6A:38:71:44:F1:35:E5:E6:06:08:1E:58:49:18
            X509v3 Authority Key Identifier:
                keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:78:10:5a:16:36:25:6d:81:8f:89:5a:7d:d2:1d:60:24:06:
         6d:6f:a1:48:bb:7c:f7:2a:56:78:84:4c:bc:50:8c:7d:83:23:
         c4:d8:91:51:2b:7c:24:fb:ec:42:3d:37:a2:b8:6e:8f:fc:58:
         36:b1:c1:c9:fa:a6:35:60:89:00:97:83:ab:d3:83:c0:0d:0a:
         41:0f:5b:68:46:1d:cb:ee:fd:47:37:2e:a6:ca:8d:00:aa:22:
         70:9d:a8:8b:25:9d:34:40:86:7e:4d:62:44:4b:ab:cc:bc:18:
         06:da:74:e1:ac:bc:f7:01:70:e4:7a:ed:45:5d:4c:32:76:d1:
         ef:cd:28:14:a0:d1:d0:2c:b0:57:35:84:53:46:eb:ff:e9:da:
         14:5f:8c:5b:3e:bc:82:b8:73:23:ee:65:8b:27:a9:2e:03:e1:
         62:34:33:32:cf:12:a7:f3:b6:f1:12:d4:54:7b:c8:12:b4:2d:
         aa:e0:6a:83:e0:eb:41:75:d0:47:6a:44:3b:24:cc:d6:04:6e:
         9c:ce:4c:9c:cf:e7:9c:7d:32:80:25:fe:32:2d:18:56:00:39:
         2e:a9:07:ec:4b:a4:05:b3:83:a0:f8:48:76:9a:c2:b3:61:35:
         f9:2c:b3:ba:d4:63:91:7c:f0:6d:39:56:a4:60:75:08:7f:f7:
         fd:f6:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:55:42 2024 by rpki-client on console-ams.rpki-client.org