Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File:                     FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier:          rmKKmjnZ0+ZTVhRRyaoZFssPFTYU/IPRwaEKHVl2Gls=
Subject key identifier:   53:35:38:95:26:9B:77:61:50:F6:8C:54:E9:2A:B2:8C:47:93:1D:27
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer:       /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial:       018F3A0BE491CFBF3D1FAA186832D9C7EC43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 16:03:28 +0000
Manifest this update:     Thu 02 May 2024 16:03:28 +0000
Manifest next update:     Fri 03 May 2024 16:03:28 +0000
Files and hashes:         1: 84H5G0xqA4nXqK4R_lquOLmqwM8.roa (hash: Cd35MO9Kcp+NxZviFBQM4inb8qnlBmznDPvn6kqxnGA=)
                          2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: u4S/MQv+K0YZxu2JLv/ZchjfW5iMFpGCMu0wY+7T6IU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:e4:91:cf:bf:3d:1f:aa:18:68:32:d9:c7:ec:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
        Validity
            Not Before: May  2 16:03:28 2024 GMT
            Not After : May  3 16:03:28 2024 GMT
        Subject: CN=53353895269b776150f68c54e92ab28c47931d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:ea:c7:d2:56:64:3d:7f:bd:f2:06:44:da:
                    d8:d7:ff:17:2a:4e:99:45:10:4f:37:f1:9e:23:22:
                    17:69:eb:c2:f7:80:b7:42:9a:c5:20:15:65:f0:d7:
                    56:89:39:7b:36:0a:1f:fb:7c:51:dc:c0:f8:a2:af:
                    ed:75:fb:37:50:99:f0:01:9e:64:12:a5:44:9f:94:
                    b8:7c:1f:ec:39:25:e0:f2:60:05:72:c8:ef:20:85:
                    cb:6e:0e:7c:b8:9f:1b:3e:c7:9c:d7:fe:1f:af:3c:
                    06:a0:1b:9c:1f:d3:a9:52:85:4c:65:13:b3:a8:0c:
                    63:da:15:d0:72:16:93:5a:51:60:f9:4e:70:da:cd:
                    fc:49:36:83:fe:be:db:d1:33:3a:55:1e:b3:dc:fd:
                    90:d0:45:4b:85:f9:34:d2:96:ff:29:26:1b:af:df:
                    52:e7:5e:8f:af:7c:92:d3:60:70:5a:f2:da:d4:c6:
                    6c:38:11:52:d2:da:be:51:30:45:29:86:fd:99:48:
                    df:2b:e5:75:18:9c:bf:60:c4:73:1c:1a:4e:6f:3b:
                    18:c7:67:8c:cd:15:75:0b:bd:fa:79:d9:1e:10:78:
                    06:a1:8b:5c:7b:42:f2:00:de:1b:45:cf:30:fd:6a:
                    44:87:83:d0:b4:99:a6:90:1c:3b:6d:03:47:8c:3f:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:35:38:95:26:9B:77:61:50:F6:8C:54:E9:2A:B2:8C:47:93:1D:27
            X509v3 Authority Key Identifier:
                keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:72:a4:fe:17:c6:8b:04:6c:f5:85:d8:bb:06:be:3b:e8:
         de:a7:ae:fa:cb:ab:53:4a:76:35:2c:85:49:fe:7b:e0:25:8a:
         60:d3:bf:bc:8a:23:cf:0f:d4:05:9e:99:3f:b2:4f:09:fb:e3:
         5c:b6:be:d4:8b:bf:02:af:e4:49:f1:95:60:95:63:1a:ba:2e:
         76:ae:78:77:a5:57:59:0b:79:3a:a3:3c:98:2c:28:a6:05:3a:
         35:55:2f:2d:94:fb:d7:d6:3b:69:a5:78:14:30:d9:62:77:0f:
         f0:03:56:6d:2c:98:0c:31:19:26:15:d2:cd:ed:25:d2:cb:e3:
         b5:2a:89:80:57:33:3d:36:51:3c:cb:db:88:e2:a8:ab:32:15:
         94:40:d5:30:10:f3:3c:39:7e:7f:f7:da:b1:63:77:0e:0b:16:
         e6:22:21:5c:4a:f9:6f:f7:1d:3c:8b:72:2f:02:e1:93:d6:b9:
         95:76:e6:7e:15:14:84:5f:32:ed:60:dc:74:9e:4d:07:14:2d:
         a4:29:30:a5:09:25:60:7f:b1:38:8c:9e:d3:43:25:e8:6a:51:
         c3:1f:ea:60:d2:33:47:f9:83:2d:1c:16:3e:67:bc:d1:04:57:
         ce:f0:43:00:ee:de:19:b3:d9:a7:be:2e:5f:34:65:35:06:0e:
         a0:4c:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:23:56 2024 by rpki-client on console-fra.rpki-client.org