Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File:                     Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier:          IH7qd1I2kMtA0NkkpFX1ryhf6E6kcjhh+KexeYCzoZ8=
Subject key identifier:   FE:C8:78:2D:01:D9:2D:1B:7D:43:FF:5A:02:5A:ED:44:A3:18:C1:53
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer:       /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial:       018F4F495F3D24EA30B4B800751F0CD8F89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number:          10EA
Signing time:             Mon 06 May 2024 19:02:39 +0000
Manifest this update:     Mon 06 May 2024 19:02:39 +0000
Manifest next update:     Tue 07 May 2024 19:02:39 +0000
Files and hashes:         1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: LtveAHYnoOd0HQy0kY7ZnmBwLklHVHVoyI5B8LXloHo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:5f:3d:24:ea:30:b4:b8:00:75:1f:0c:d8:f8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
        Validity
            Not Before: May  6 19:02:39 2024 GMT
            Not After : May  7 19:02:39 2024 GMT
        Subject: CN=fec8782d01d92d1b7d43ff5a025aed44a318c153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:34:3d:ab:0c:f6:4a:af:e2:a1:38:a5:42:
                    ea:ef:d1:72:d9:42:dd:aa:1a:0f:5c:ca:5b:fb:19:
                    93:f4:bb:b2:77:a5:1d:51:a6:82:20:5d:b6:19:a9:
                    b7:8d:08:92:02:2c:d9:98:a7:8e:3b:3c:d1:da:e8:
                    cc:03:88:95:86:88:b4:b6:38:4c:1f:dc:59:a4:b3:
                    34:79:09:7c:cc:b7:a3:da:4d:ff:82:15:8a:41:95:
                    cd:25:ab:42:d0:b1:15:c2:8f:de:a1:d7:a4:63:ea:
                    39:a1:d1:cb:30:59:94:e8:26:69:ea:25:21:e1:a4:
                    8a:0f:2e:ee:97:67:82:7b:79:95:25:63:b5:b8:81:
                    c2:4a:47:02:de:c7:e6:88:19:44:51:bb:b9:2c:5d:
                    42:83:c5:c8:70:34:e7:e1:65:ef:41:73:49:ea:8a:
                    49:4b:1a:04:a6:7f:8e:f1:5c:f2:95:b7:d6:f9:7b:
                    51:44:15:8b:e5:01:52:5a:99:31:00:ff:3e:40:06:
                    0a:d0:bb:13:63:a3:b9:ab:cd:92:9d:6c:2c:a1:8a:
                    a6:50:85:6f:f8:75:34:c8:03:84:88:84:f6:95:01:
                    ce:99:3d:0f:47:56:49:1b:28:c9:35:78:41:a9:22:
                    7f:69:31:5a:27:5c:9d:73:76:0d:e3:fe:51:5f:01:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:78:2D:01:D9:2D:1B:7D:43:FF:5A:02:5A:ED:44:A3:18:C1:53
            X509v3 Authority Key Identifier:
                keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:0f:31:4f:68:64:f4:7b:bb:43:3d:7b:35:67:00:f5:90:
         c9:42:a6:8d:3a:d3:1d:16:27:0b:5b:d5:b5:b4:0a:0e:12:bd:
         c5:9f:bc:a1:4e:b4:3f:bb:bf:16:48:fd:d2:a8:43:65:2e:ef:
         b1:50:09:5f:c2:c5:17:b1:79:39:06:30:f6:17:54:44:50:dc:
         ee:ec:7e:6c:5b:45:15:8f:1e:0e:d7:bc:65:11:6a:33:50:61:
         ca:98:83:e9:de:a7:98:6e:fb:ce:c0:99:25:a7:79:36:bb:83:
         9f:50:36:83:36:a8:7d:4a:9a:10:c7:71:0d:a6:02:56:ce:a9:
         45:c4:88:0a:21:f8:4d:8e:54:6f:85:f7:90:f8:d8:8a:34:92:
         10:7d:73:df:78:c4:16:8c:4a:d4:8e:5c:e1:1e:8b:1d:e7:c5:
         1c:95:61:23:b1:4e:34:fa:97:5b:39:ee:1b:44:2a:bc:23:34:
         2e:54:15:d9:1f:83:f4:fc:1a:d3:3a:d0:fc:43:3f:20:ea:4e:
         be:0c:e4:a4:81:96:46:3d:5b:14:8a:ef:8f:ec:4d:93:8d:1d:
         ea:dc:e4:90:9a:82:e8:d1:bc:f2:21:7e:63:b9:f0:e4:d6:dc:
         07:66:00:00:10:d2:e1:b5:56:cb:66:bd:0b:58:b5:1d:ea:37:
         fd:7e:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:54:56 2024 by rpki-client on console-ams.rpki-client.org