Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File:                     Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier:          tihtZnYqcF9jTrNPXN4KriNmgU/UqQB/8D8Liqef8GU=
Subject key identifier:   9F:B6:5B:7F:60:BB:8B:83:7C:D4:24:9E:79:50:E6:40:91:0E:46:4E
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer:       /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial:       018F467C150EE3FDD0856A4C08243AD5AA9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number:          0DE9
Signing time:             Sun 05 May 2024 02:01:27 +0000
Manifest this update:     Sun 05 May 2024 02:01:27 +0000
Manifest next update:     Mon 06 May 2024 02:01:27 +0000
Files and hashes:         1: 0MQ6Dgmui6mT86ALOLk3UvoS6dY.roa (hash: SOI5GMds+WR2XZ8eNSNtJy/PdOzozLXluV0xCgae+eI=)
                          2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: +4RKRAnXxiVK3qA+iGsNpTKw4u9R5/ZlaH/iSS4QxBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:15:0e:e3:fd:d0:85:6a:4c:08:24:3a:d5:aa:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
        Validity
            Not Before: May  5 02:01:27 2024 GMT
            Not After : May  6 02:01:27 2024 GMT
        Subject: CN=9fb65b7f60bb8b837cd4249e7950e640910e464e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:85:99:e1:17:b2:c1:45:72:f3:e7:83:72:
                    50:eb:95:ba:f7:a7:8b:9f:1a:a2:c2:ad:ec:3f:d1:
                    05:96:b7:42:70:66:69:0c:5f:3e:49:63:3d:17:bb:
                    e8:3f:e3:40:5e:46:03:0d:cd:4b:04:39:a3:0b:7f:
                    b3:10:90:bf:9d:d7:c7:65:4f:fd:a3:7b:6e:f9:4f:
                    b5:31:f6:43:fe:84:56:d8:29:79:d2:aa:a5:b3:3f:
                    dc:99:bd:1e:5e:89:f4:6e:e0:15:78:e4:ca:c1:3f:
                    87:7e:bd:d9:65:f0:60:2a:fe:bb:4d:fe:87:c5:49:
                    71:a6:e8:53:be:99:19:c6:46:05:8d:de:85:6c:e9:
                    fe:ea:15:d8:d0:c8:39:2b:fd:a7:d7:47:ac:97:74:
                    d0:56:50:3f:e0:cf:6c:d6:7f:8c:2f:00:b7:e0:80:
                    bd:a5:f1:e2:14:c3:9a:80:88:07:68:d4:eb:ee:ca:
                    15:2a:cb:80:aa:ba:16:fb:77:2d:df:04:96:1f:7c:
                    0a:77:bd:7d:71:ea:0c:22:7c:9d:4b:ae:97:f5:4f:
                    a0:fd:08:c8:c4:52:e2:5d:d4:8e:cd:3f:0a:61:83:
                    81:eb:df:1e:9f:01:23:37:0e:f7:18:96:c6:3d:cc:
                    ec:5d:c5:71:80:a2:f6:a1:d9:38:08:cc:e1:96:71:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:5B:7F:60:BB:8B:83:7C:D4:24:9E:79:50:E6:40:91:0E:46:4E
            X509v3 Authority Key Identifier:
                keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:01:49:dc:f8:90:de:b8:9f:a8:59:22:a8:ae:56:b3:dc:a7:
         9c:4e:61:3c:6a:cc:2e:68:1f:eb:f7:02:80:fe:f9:9d:87:30:
         b9:aa:25:36:dd:4a:33:91:36:8c:d7:6c:92:4b:a8:d9:b0:f3:
         54:a5:74:d6:f2:c4:20:80:21:a0:ff:51:47:53:6c:c7:46:ca:
         7d:9f:5b:0e:16:70:1c:9d:6b:86:dc:27:bb:b9:db:72:9e:d6:
         39:19:a4:5d:21:33:45:39:05:8e:04:4f:b0:bd:20:72:1a:4a:
         70:04:e8:1a:58:5e:6b:78:35:99:e2:4b:92:64:7f:c8:72:a2:
         15:ff:4e:dc:a8:3d:68:5b:46:f6:b2:46:53:c3:76:06:23:28:
         5c:88:f2:9d:30:5d:a1:65:84:eb:c7:35:43:38:42:88:46:54:
         ec:6b:80:59:f5:75:a2:b2:1e:81:61:98:d8:6a:8c:01:63:db:
         67:94:28:03:77:76:cb:6d:72:b7:23:f2:79:f9:d6:3b:ad:9a:
         81:96:d6:b6:49:28:c2:d5:72:bb:8e:2d:2b:8b:5c:6f:e9:2a:
         62:d3:cf:4c:af:4c:85:a1:cd:cd:b0:a8:74:e9:d0:fd:17:81:
         87:57:9d:61:08:bd:e1:bd:5d:0f:29:7e:bf:9d:9f:64:44:63:
         fd:cb:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:21:03 2024 by rpki-client on console-ams.rpki-client.org