Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File:                     FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier:          x9duq7xXteKxqrsKxm00Oo7poc9+WgNl77bUDj9k+JQ=
Subject key identifier:   D9:89:8D:D9:EF:B5:0E:13:DE:30:27:C5:70:BF:0D:7B:2C:CC:62:1E
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer:       /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial:       0194056AB1CA551DE7EB5CBECBD6B144075D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 00:01:05 +0000
Manifest this update:     Fri 27 Dec 2024 00:01:05 +0000
Manifest next update:     Sat 28 Dec 2024 00:01:05 +0000
Files and hashes:         1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: VATwd/eXcmt/qLUGi5TnpSmHkwegGiwHjXXBmKU6Nxs=)
                          2: xR4r7eP0Ni2pPCYQ5-GGqz2mLEU.roa (hash: XVII2DJxI0BU5mZ46SRlyiYc3mWdLPDhOZJV1UEbKPM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:6a:b1:ca:55:1d:e7:eb:5c:be:cb:d6:b1:44:07:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
        Validity
            Not Before: Dec 27 00:01:05 2024 GMT
            Not After : Dec 28 00:01:05 2024 GMT
        Subject: CN=d9898dd9efb50e13de3027c570bf0d7b2ccc621e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:6d:2f:70:3d:f5:e0:33:01:0a:4f:64:90:
                    a5:1c:27:20:3d:c6:75:9f:6a:cc:89:44:ea:3a:9f:
                    a9:54:d2:12:9f:c8:af:f1:67:7a:1b:58:e2:a7:61:
                    1b:10:83:d4:dc:2a:88:85:b6:eb:d5:bd:35:51:48:
                    24:a3:9c:0e:15:63:74:de:d8:9d:fb:8e:cc:c3:8d:
                    aa:16:84:71:f0:43:f9:32:ee:1a:29:fc:aa:8e:dc:
                    fe:02:e2:a6:42:c9:d3:73:67:1d:81:0a:42:70:ff:
                    f4:05:58:98:38:87:ac:b2:46:85:1a:78:24:dd:4e:
                    24:11:ec:9f:9b:19:64:d8:6e:b9:ba:86:46:9b:7c:
                    26:42:01:8c:97:0e:9f:24:c3:f5:0b:1a:97:8c:ff:
                    23:61:e2:04:33:99:7b:04:01:60:d9:79:17:27:3e:
                    da:4a:43:15:29:07:07:ac:bb:1b:7a:6d:8b:b4:5d:
                    ba:27:07:d0:f5:18:51:fe:a1:a1:7b:7d:6f:95:0f:
                    ce:9a:2a:45:7d:5c:0d:96:08:ce:2e:59:0a:3c:82:
                    18:86:1a:ab:bb:47:e4:98:06:6d:c3:17:e4:d9:6d:
                    f8:08:88:21:5e:7b:fd:a7:22:66:ad:61:8f:d2:05:
                    2c:e5:ca:19:5d:b6:c1:4c:54:81:6a:36:11:e2:00:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:89:8D:D9:EF:B5:0E:13:DE:30:27:C5:70:BF:0D:7B:2C:CC:62:1E
            X509v3 Authority Key Identifier:
                keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cf:18:79:16:d6:b9:58:9d:b0:97:10:f4:e0:21:b9:ca:83:
         1c:21:72:03:5b:9e:ba:a9:99:b5:61:cc:cc:c2:ed:dd:f0:59:
         2a:a7:3f:ef:96:4e:17:5b:fd:22:77:9b:13:2c:47:93:a4:a5:
         36:fd:94:6c:dc:8d:3f:0c:81:91:04:e9:4b:62:1d:ea:5e:72:
         0b:75:1c:32:3c:4d:34:1a:d1:e6:da:ae:82:1a:e5:a8:93:3f:
         94:c4:45:f7:ec:47:6d:2e:4b:15:e9:cc:6c:b0:56:15:20:8e:
         31:15:ca:39:ca:bd:c0:c6:8d:50:a0:1c:b6:57:20:bb:b0:fb:
         0a:02:ee:24:a1:9c:c5:89:83:ad:e1:47:68:7a:04:3a:e4:d5:
         1c:85:d9:c5:87:99:7c:d0:5c:7c:80:13:d0:a2:d3:9d:2c:37:
         fc:65:3b:7c:76:0f:00:48:b9:cb:03:93:bb:5c:21:96:78:dd:
         3f:2a:41:cf:71:7c:96:0a:ea:89:de:d1:e1:df:24:ac:86:34:
         d3:a9:b0:ce:f1:ea:e8:d4:40:93:de:bd:62:e8:a4:71:65:4a:
         e9:5b:a5:0b:d9:d9:15:ad:32:71:0b:da:13:6e:65:8e:49:92:
         e0:ef:47:7d:a0:bf:16:b6:78:10:22:1b:12:0c:dc:99:c2:a9:
         9f:0d:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:43:13 2024 by rpki-client on console-ams.rpki-client.org