Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File:                     FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier:          DGWIcAbnoEGg6th39zy6pEjJByLy3Cstd30uyCkqcto=
Subject key identifier:   89:EA:8F:0F:91:4B:28:DD:26:23:42:A7:8F:C4:9E:16:D5:82:F3:06
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer:       /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial:       018F4D5AA3D33427B3405EC5837015C6BC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number:          10ED
Signing time:             Mon 06 May 2024 10:02:16 +0000
Manifest this update:     Mon 06 May 2024 10:02:16 +0000
Manifest next update:     Tue 07 May 2024 10:02:16 +0000
Files and hashes:         1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: tRWT9sV6pJ3CG6KCOq9ZqQDgtjbFRKHsvzR+T6Vfj6g=)
                          2: ppsqp4Ev23bKI-PXkUU_kD0Y_AI.roa (hash: /UnD97Ve4KRCd/IuF9FFNrUl10o2XuTYW7qm8hshx5E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:a3:d3:34:27:b3:40:5e:c5:83:70:15:c6:bc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
        Validity
            Not Before: May  6 10:02:16 2024 GMT
            Not After : May  7 10:02:16 2024 GMT
        Subject: CN=89ea8f0f914b28dd262342a78fc49e16d582f306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:6e:17:42:78:3c:88:d5:6f:c2:8d:99:44:
                    1b:33:19:74:ed:10:1b:9d:49:6e:55:9e:39:f6:f9:
                    a9:c6:1c:cc:41:a2:a0:9d:15:e4:e0:62:f0:96:b2:
                    21:92:80:1b:23:a1:29:34:24:19:8a:9e:e3:93:23:
                    d7:a0:36:ec:4d:cd:98:89:c5:5b:49:93:bb:fd:df:
                    26:d3:e8:63:7e:38:ec:95:b2:68:dc:aa:46:8d:aa:
                    b1:a1:e1:03:02:ab:d3:28:1e:33:0b:ca:94:70:71:
                    ec:a3:ce:83:af:c9:6a:2c:64:f6:f5:90:58:c6:4a:
                    8f:08:c7:64:db:ef:23:7c:54:f2:ff:1b:d2:c2:5f:
                    a1:2f:30:64:69:82:74:fb:d1:d2:72:56:26:49:4e:
                    e7:a7:03:d1:2c:5d:35:9d:f0:36:26:08:91:75:75:
                    f0:f3:97:64:7e:19:18:03:f7:a0:d4:46:c6:40:64:
                    a6:5d:20:aa:d2:ac:5f:3f:91:be:f8:e9:bc:12:5a:
                    ee:df:3d:3e:8f:c7:c2:bb:0f:8b:13:d2:b0:be:9f:
                    e0:54:3b:2a:10:84:ea:e2:df:4d:87:f3:cd:34:17:
                    0c:2a:8d:0b:34:66:c9:b8:bb:d4:7c:0e:26:f7:64:
                    0f:33:d3:8d:33:ce:50:8e:9f:05:e3:ba:2f:45:83:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EA:8F:0F:91:4B:28:DD:26:23:42:A7:8F:C4:9E:16:D5:82:F3:06
            X509v3 Authority Key Identifier:
                keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:70:17:98:73:f5:95:07:0d:0d:a6:13:0a:41:6b:69:97:ff:
         fc:58:2e:12:bf:e3:2f:48:f1:45:9b:ab:f5:9e:3b:f9:a5:ac:
         fd:db:77:a8:14:39:95:de:33:46:44:07:98:16:c1:6a:a8:b4:
         41:0c:b8:b0:dc:de:28:30:f5:5c:19:e3:5c:61:5f:13:1e:31:
         64:05:bd:4b:15:7a:18:fa:53:49:bf:af:f8:a7:22:67:66:bd:
         7c:b0:00:bd:76:6c:5c:0e:67:e6:06:cf:35:8d:9b:fb:73:67:
         70:b2:d4:b1:3d:52:06:cd:4f:8c:69:94:2a:0c:39:f9:49:fb:
         db:81:ab:4e:f9:37:2b:d8:15:34:ab:b7:50:ec:d6:c1:2a:c7:
         1b:86:ea:dc:0f:e7:aa:a7:17:a1:e2:7a:6c:2a:7b:94:62:90:
         46:b4:14:36:14:d3:5d:5c:78:2a:d4:53:98:15:cb:96:e9:8f:
         50:3e:26:63:ae:16:81:e5:a5:77:a1:fc:13:be:b8:1e:1e:57:
         7f:9e:ca:99:5d:27:d0:b0:2d:3a:77:62:07:48:db:61:8b:fe:
         71:aa:4b:f9:bc:0f:3c:c8:09:ef:73:6a:f4:3c:d8:89:a2:d0:
         05:6c:eb:9b:c9:e2:84:64:47:fa:b8:de:f1:6c:b0:a2:b0:db:
         3e:35:49:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9NWqPTNCezQF7Fg3AVxryVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk
NzkwYzkwHhcNMjQwNTA2MTAwMjE2WhcNMjQwNTA3MTAwMjE2WjAzMTEwLwYDVQQD
Eyg4OWVhOGYwZjkxNGIyOGRkMjYyMzQyYTc4ZmM0OWUxNmQ1ODJmMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p5uF0J4PIjVb8KNmUQbMxl07RAb
nUluVZ459vmpxhzMQaKgnRXk4GLwlrIhkoAbI6EpNCQZip7jkyPXoDbsTc2YicVb
SZO7/d8m0+hjfjjslbJo3KpGjaqxoeEDAqvTKB4zC8qUcHHso86Dr8lqLGT29ZBY
xkqPCMdk2+8jfFTy/xvSwl+hLzBkaYJ0+9HSclYmSU7npwPRLF01nfA2JgiRdXXw
85dkfhkYA/eg1EbGQGSmXSCq0qxfP5G++Om8Elru3z0+j8fCuw+LE9Kwvp/gVDsq
EITq4t9Nh/PNNBcMKo0LNGbJuLvUfA4m92QPM9ONM85Qjp8F47ovRYNsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInqjw+RSyjdJiNCp4/EnhbVgvMGMB8GA1UdIwQY
MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct
MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2
LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnAXmHP1
lQcNDaYTCkFraZf//FguEr/jL0jxRZur9Z47+aWs/dt3qBQ5ld4zRkQHmBbBaqi0
QQy4sNzeKDD1XBnjXGFfEx4xZAW9SxV6GPpTSb+v+KciZ2a9fLAAvXZsXA5n5gbP
NY2b+3NncLLUsT1SBs1PjGmUKgw5+Un724GrTvk3K9gVNKu3UOzWwSrHG4bq3A/n
qqcXoeJ6bCp7lGKQRrQUNhTTXVx4KtRTmBXLlumPUD4mY64WgeWld6H8E764Hh5X
f57KmV0n0LAtOndiB0jbYYv+capL+bwPPMgJ73Nq9DzYiaLQBWzrm8nihGRH+rje
8WyworDbPjVJUQ==
-----END CERTIFICATE-----
Generated at Mon May 6 17:56:13 2024 by rpki-client on console-ams.rpki-client.org