Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File:                     Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier:          6P7sbYKnoQH/SljTy3ZS3COnwMVPBf0l4uYdnGuKmHc=
Subject key identifier:   0E:88:68:CA:E4:BE:7E:4D:72:BB:CD:63:EA:15:D4:AB:DA:FE:EF:AB
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer:       /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial:       018F34ACC0686D2994273B88673BB62D55B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number:          0E60
Signing time:             Wed 01 May 2024 15:01:27 +0000
Manifest this update:     Wed 01 May 2024 15:01:27 +0000
Manifest next update:     Thu 02 May 2024 15:01:27 +0000
Files and hashes:         1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: eIK2reo+TRFv9FrtVq5cyJY+y9cDwuVcIyyMDhi3HVI=)
                          2: qCtYdkPr-91zN7xQdAM1DbVObKE.roa (hash: ANUMGWKADuGJKq2ZyUI1TEvO++fg4YAAOU1qthjNvpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:ac:c0:68:6d:29:94:27:3b:88:67:3b:b6:2d:55:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
        Validity
            Not Before: May  1 15:01:27 2024 GMT
            Not After : May  2 15:01:27 2024 GMT
        Subject: CN=0e8868cae4be7e4d72bbcd63ea15d4abdafeefab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:92:2a:62:92:8f:01:15:84:63:a6:c3:1f:
                    63:1e:f1:13:fa:e1:da:93:a5:6e:30:2f:b0:e5:36:
                    0b:92:7e:7c:3e:d9:ba:4a:83:2d:13:8f:44:a6:4b:
                    f5:75:81:5f:d0:a6:f0:18:3d:72:f8:b1:ae:ea:82:
                    20:86:fe:05:55:5e:c8:ad:8b:d3:57:bd:a3:df:a0:
                    e2:43:41:14:fb:4c:2a:13:28:7a:65:48:be:09:08:
                    7e:bb:9d:1f:38:18:f8:d7:3c:2e:d6:8c:b5:ed:2c:
                    ac:2e:c7:5d:01:f3:9b:a6:c3:90:3d:00:ee:b7:b4:
                    c6:bb:65:b4:f4:34:a7:da:9a:97:5d:b1:67:04:0d:
                    ab:e8:cb:b2:64:bb:f2:46:6a:f5:c6:32:7c:3a:47:
                    74:85:01:76:c8:71:ab:21:fb:d5:1f:91:83:ec:f5:
                    17:0a:3e:5a:86:18:c7:7f:42:12:d1:56:c4:e1:18:
                    29:a9:e1:af:2d:78:c1:91:18:bd:a3:14:79:74:73:
                    a9:ca:97:02:52:4e:46:6f:d7:e7:92:cf:51:7f:a8:
                    94:2d:fb:0a:03:10:11:1b:9c:b2:a9:89:60:ef:17:
                    2e:e9:3b:8b:5d:e6:b3:05:7b:43:57:ef:92:7f:64:
                    2d:48:e4:ca:bc:5c:80:e3:c2:d9:88:bf:78:ff:1a:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:88:68:CA:E4:BE:7E:4D:72:BB:CD:63:EA:15:D4:AB:DA:FE:EF:AB
            X509v3 Authority Key Identifier:
                keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:1d:f6:99:9c:20:0a:9e:72:d5:b4:72:c2:10:59:83:db:
         75:29:07:ff:b2:31:5b:3b:b1:12:e2:40:21:ac:98:a5:1a:98:
         34:20:39:f4:b4:87:c7:fa:67:25:79:34:65:d7:e3:3a:44:54:
         83:46:3d:38:76:59:84:eb:40:1d:82:03:c1:7f:85:60:e3:ef:
         eb:4d:db:e9:9f:a8:21:88:e5:3c:14:7b:cc:8a:26:25:76:84:
         ce:79:1b:fa:c8:69:60:a5:41:4d:a3:89:a0:a4:fa:3f:a2:27:
         89:30:b6:a1:cd:9c:a4:93:4c:2a:2b:90:21:74:4c:20:d9:72:
         82:f9:a7:ae:f3:79:2a:45:3c:3d:0e:f2:b4:2a:78:63:ca:c9:
         22:ee:01:81:48:a9:f8:68:88:9b:fe:0a:86:a4:85:a1:a2:6f:
         9d:25:33:26:bb:72:8e:6e:3f:fb:60:ad:bb:77:d6:a0:2b:37:
         be:48:59:8e:d3:ec:e9:62:90:ad:39:ed:7c:69:4b:8d:c7:67:
         d6:1c:17:7d:75:b6:6e:7a:4e:bb:4a:25:fc:17:df:33:11:62:
         17:83:94:a3:67:30:41:75:2c:fc:57:a9:ed:10:42:96:f2:41:
         92:9e:08:d8:a4:30:6c:4f:1b:b3:09:8e:08:e1:bd:4d:1f:73:
         30:08:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:44:27 2024 by rpki-client on console-fra.rpki-client.org