Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
File:                     F43VHX5As0tDn4_fTQUUEcU0cuo.mft (raw, json)
Hash identifier:          XVB0u6+/OSeeFvkyTbQOW0w6DbxMR+kkO/TS86RitE8=
Subject key identifier:   F0:80:E5:E0:9D:C1:25:45:C6:F7:A4:B1:19:58:64:C5:2D:70:C4:6D
Authority key identifier: 17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
Certificate issuer:       /CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Certificate serial:       01936CA305A6944C815958DB944ECA5C33E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
Manifest number:          0142
Signing time:             Wed 27 Nov 2024 08:00:43 +0000
Manifest this update:     Wed 27 Nov 2024 08:00:43 +0000
Manifest next update:     Thu 28 Nov 2024 08:00:43 +0000
Files and hashes:         1: F43VHX5As0tDn4_fTQUUEcU0cuo.crl (hash: n7re8cSIbqjKk8POmIvfX90bFZT8j74ru1yn4uxpKKk=)
                          2: ZooDYPz_59-dwA0Y2SVI1APcvqw.roa (hash: FISfVO3kzkBZDNMTXS7Vnw21/BCQ7uMYvK1qt+OxPB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:a3:05:a6:94:4c:81:59:58:db:94:4e:ca:5c:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
        Validity
            Not Before: Nov 27 08:00:43 2024 GMT
            Not After : Nov 28 08:00:43 2024 GMT
        Subject: CN=f080e5e09dc12545c6f7a4b1195864c52d70c46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:d2:45:76:10:9c:8b:fd:c7:03:c4:48:25:
                    06:f4:be:f9:d6:d6:28:50:89:d8:e9:01:df:5a:f0:
                    be:79:85:06:ad:64:c4:14:55:c6:91:5c:d8:8f:af:
                    de:c4:65:bd:b1:b7:98:19:28:b5:d2:7e:53:a9:f6:
                    19:a0:d2:b1:f6:8d:7c:d3:09:b1:c6:26:29:76:2a:
                    f4:aa:ac:88:43:c0:9e:25:6d:58:1e:61:91:a1:fb:
                    6f:d8:fc:d0:7f:dd:8d:d9:28:30:bc:cf:da:06:99:
                    0b:13:e8:9c:ef:48:b1:e6:60:7c:47:c4:09:0a:12:
                    19:a5:9a:ac:29:77:f8:14:94:e7:9f:9a:35:3b:0b:
                    df:10:a4:1c:f1:0b:27:bd:20:43:6c:8d:5e:6a:25:
                    61:b4:46:c1:21:47:d3:f2:66:7f:ad:39:df:7f:d8:
                    c8:7b:a4:47:54:9c:5e:08:48:2c:e5:82:95:70:9e:
                    df:84:75:2b:88:76:37:2b:61:f5:0b:ee:71:6e:af:
                    a4:d7:27:47:14:0c:07:7f:51:96:63:ce:12:38:3a:
                    48:6c:2b:83:0c:21:9a:52:44:f9:fa:28:e9:8c:6c:
                    68:6d:ee:8e:28:85:75:10:22:3e:73:a6:73:55:aa:
                    64:c0:a2:28:50:91:87:3c:05:af:69:d9:ab:0f:3e:
                    c3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:80:E5:E0:9D:C1:25:45:C6:F7:A4:B1:19:58:64:C5:2D:70:C4:6D
            X509v3 Authority Key Identifier:
                keyid:17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ba:f3:21:6f:6e:50:6a:9e:7c:42:9d:13:18:68:f7:0b:42:
         99:46:5f:fe:0b:e4:3d:cc:a8:4b:26:ff:06:1b:13:bf:a0:1c:
         85:97:07:03:3d:c2:2f:0c:8a:cc:fa:e1:09:2d:9c:2a:e1:c1:
         08:15:67:85:af:b1:59:18:f6:6c:19:3f:49:84:b3:d1:c5:10:
         66:dc:02:03:5e:1a:5a:75:cd:61:d9:18:ca:3e:89:18:ea:7a:
         4c:4e:e7:69:20:c0:ed:3c:db:ef:b8:35:00:a5:54:62:92:d9:
         4c:78:19:21:71:c6:22:38:2e:26:4f:8c:34:b4:ad:2a:0a:13:
         80:4f:d8:61:08:47:c2:6a:9e:bd:67:5d:b0:7b:98:80:a6:00:
         8c:35:01:04:65:6e:82:b4:1a:3a:01:6d:15:65:b3:8e:c3:9f:
         24:ba:59:91:40:7f:4b:68:23:e4:3b:b6:2a:34:72:40:8d:b8:
         54:3e:69:23:e4:db:87:1e:fa:81:0f:9e:0b:5e:d2:bc:d9:45:
         66:6a:3b:f4:b7:f7:09:73:d5:2f:2e:3a:e5:bc:f8:b5:c3:f4:
         02:12:df:cc:64:80:92:de:64:1a:6b:c7:bd:14:e9:5d:01:92:
         43:df:c5:ab:c2:a6:53:63:12:62:d6:54:70:38:a8:c9:a8:7e:
         26:63:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:33 2024 by rpki-client on console-fra.rpki-client.org