Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File:                     FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier:          vanlyC7vIqbuZsdq9ZCNZyz+r9YnmQYSYoPU3aMaXlw=
Subject key identifier:   BA:37:32:0F:E3:BF:CE:A3:A3:2D:6A:59:64:2E:B8:6F:C5:89:75:1D
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer:       /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial:       018F362F55E48C67024F2D83E963FAB35D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number:          0D2A
Signing time:             Wed 01 May 2024 22:03:42 +0000
Manifest this update:     Wed 01 May 2024 22:03:42 +0000
Manifest next update:     Thu 02 May 2024 22:03:42 +0000
Files and hashes:         1: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: ZnW/F+Ljto+f1I74reGYujd78+dhK9x9Z3lVbBWFOvk=)
                          2: cZOHtkVhBVNCNcOZW0gn2PcacPE.roa (hash: aYzyffGxSO7xzoq21OHenDEUmWhAVw1CKaAj84parkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:55:e4:8c:67:02:4f:2d:83:e9:63:fa:b3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
        Validity
            Not Before: May  1 22:03:42 2024 GMT
            Not After : May  2 22:03:42 2024 GMT
        Subject: CN=ba37320fe3bfcea3a32d6a59642eb86fc589751d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:86:02:16:32:50:8e:bf:10:fc:f3:8a:21:
                    8b:50:96:60:2b:96:5c:ec:2e:6c:a8:1c:3d:ef:99:
                    9f:4c:4c:ed:1e:70:0d:90:90:85:e1:d7:c7:7a:3b:
                    86:0e:31:e3:e4:0b:b9:0e:ef:55:0e:a6:23:4f:86:
                    6c:07:b3:1a:35:52:2c:e8:ce:73:39:9e:82:48:33:
                    53:9c:36:ee:85:cb:5d:2c:0c:eb:59:b3:a4:12:4b:
                    4b:3b:2d:40:be:2d:6d:b3:83:db:be:ff:c4:58:7f:
                    0d:db:52:79:a8:50:1a:a7:c3:a4:13:a4:e1:3f:a9:
                    8f:e6:e1:42:6d:5f:c1:14:a7:c9:62:ef:e9:e8:a5:
                    ad:ef:47:5d:08:0b:f6:3d:cb:fa:66:ae:6e:d0:57:
                    1f:d4:82:08:e3:d5:aa:31:4e:7f:e4:63:92:eb:e0:
                    df:9f:74:61:d6:1c:98:c0:8e:70:a6:dd:ec:55:7f:
                    41:06:fc:6d:b3:66:cd:d6:4c:12:20:2a:60:ed:91:
                    4d:e2:e1:a3:02:f7:3f:81:e4:af:36:37:16:e2:08:
                    bf:0d:ae:f7:9a:2a:b8:ae:08:e4:77:1a:2c:fe:81:
                    3c:31:9a:64:6f:41:b7:ef:6b:85:a6:18:9f:15:b0:
                    61:2a:94:ba:fb:bc:7f:31:19:5e:05:5e:be:d3:66:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:37:32:0F:E3:BF:CE:A3:A3:2D:6A:59:64:2E:B8:6F:C5:89:75:1D
            X509v3 Authority Key Identifier:
                keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fa:cd:15:13:dd:47:04:a5:80:ef:f3:a8:9d:bd:00:43:18:
         1f:21:8b:ef:68:7e:ba:16:12:92:98:ee:e8:92:cb:65:c6:6d:
         95:7e:ba:20:f0:15:ca:e0:aa:52:37:b1:2f:1e:59:40:6b:11:
         0c:5a:1b:af:60:13:cc:6a:54:4e:2b:75:0b:55:61:75:37:03:
         06:9d:cd:01:5e:3d:ea:ed:00:29:8e:e8:2b:60:56:63:3e:04:
         89:26:8a:e4:06:4e:9f:fa:cc:c4:60:4b:3a:48:2f:94:ca:ba:
         ef:6d:8b:93:d0:23:83:34:6b:1c:6f:e5:92:5b:ca:6f:a6:80:
         91:61:0d:2a:a9:ea:30:a9:29:c6:46:6d:5e:21:fc:9a:ab:25:
         a6:7a:cb:6b:ef:2b:17:06:54:98:fb:ae:d6:42:48:e7:75:ac:
         e8:1d:7c:c3:c9:6d:bd:ef:7f:1c:e5:0b:c9:f5:b4:e9:8e:11:
         83:f2:e4:c1:d5:21:52:36:aa:2f:4f:d0:2b:f0:e4:3f:df:7a:
         96:ee:a1:4a:5d:7d:55:48:1a:ed:aa:8d:4f:d9:69:f6:87:20:
         ca:52:02:61:04:e1:34:e9:0b:d5:c7:52:2d:58:5c:cd:b0:d3:
         30:d7:bb:bc:17:e1:95:e5:e1:0f:d8:25:4d:cb:a5:04:ae:99:
         fe:50:dc:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY82L1XkjGcCTy2D6WP6s10AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzVkMjRlMTczNjdlNDA1Yjc4MGY3MTEwNDllNWY3OGQx
MDFmMTYwHhcNMjQwNTAxMjIwMzQyWhcNMjQwNTAyMjIwMzQyWjAzMTEwLwYDVQQD
EyhiYTM3MzIwZmUzYmZjZWEzYTMyZDZhNTk2NDJlYjg2ZmM1ODk3NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/GGAhYyUI6/EPzziiGLUJZgK5Zc
7C5sqBw975mfTEztHnANkJCF4dfHejuGDjHj5Au5Du9VDqYjT4ZsB7MaNVIs6M5z
OZ6CSDNTnDbuhctdLAzrWbOkEktLOy1Avi1ts4Pbvv/EWH8N21J5qFAap8OkE6Th
P6mP5uFCbV/BFKfJYu/p6KWt70ddCAv2Pcv6Zq5u0Fcf1III49WqMU5/5GOS6+Df
n3Rh1hyYwI5wpt3sVX9BBvxts2bN1kwSICpg7ZFN4uGjAvc/geSvNjcW4gi/Da73
miq4rgjkdxos/oE8MZpkb0G372uFphifFbBhKpS6+7x/MRleBV6+02ZTeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo3Mg/jv86joy1qWWQuuG/FiXUdMB8GA1UdIwQY
MBaAFBU10k4XNn5AW3gPcRBJ5feNEB8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTkt
NDJhN2FmODgyZTA5LzEvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTktNDJhN2FmODgyZTA5
LzEvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvrNFRPd
RwSlgO/zqJ29AEMYHyGL72h+uhYSkpju6JLLZcZtlX66IPAVyuCqUjexLx5ZQGsR
DFobr2ATzGpUTit1C1VhdTcDBp3NAV496u0AKY7oK2BWYz4EiSaK5AZOn/rMxGBL
OkgvlMq6722Lk9AjgzRrHG/lklvKb6aAkWENKqnqMKkpxkZtXiH8mqslpnrLa+8r
FwZUmPuu1kJI53Ws6B18w8ltve9/HOULyfW06Y4Rg/LkwdUhUjaqL0/QK/DkP996
lu6hSl19VUga7aqNT9lp9ocgylICYQThNOkL1cdSLVhczbDTMNe7vBfhleXhD9gl
TculBK6Z/lDcbQ==
-----END CERTIFICATE-----
Generated at Thu May 2 01:41:00 2024 by rpki-client on console-fra.rpki-client.org