Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File:                     Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier:          BrUpMY1fFL+YgzsyelfBtfVxSvmWUgE+93X9tByb/Hg=
Subject key identifier:   56:17:19:70:32:D5:92:A3:2A:36:3A:03:08:C9:4A:1D:B1:B9:C3:B4
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer:       /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial:       018F32F4A4AB912F976307F67D7C0144A8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number:          0F92
Signing time:             Wed 01 May 2024 07:00:44 +0000
Manifest this update:     Wed 01 May 2024 07:00:44 +0000
Manifest next update:     Thu 02 May 2024 07:00:44 +0000
Files and hashes:         1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: QHTYG6dgeMGKwtlYDqnnUUpNrUz0H9MyJHVqgQ2MWCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:f4:a4:ab:91:2f:97:63:07:f6:7d:7c:01:44:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
        Validity
            Not Before: May  1 07:00:44 2024 GMT
            Not After : May  2 07:00:44 2024 GMT
        Subject: CN=5617197032d592a32a363a0308c94a1db1b9c3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:75:df:f2:0f:fb:1b:d2:b6:10:4b:72:76:
                    f0:75:66:3e:53:1e:fa:a6:10:bc:5b:2b:e7:ac:21:
                    1e:62:fc:2a:4d:17:60:95:d4:ba:fb:73:ae:80:f0:
                    3c:d2:73:de:49:a9:24:92:ab:c6:53:da:f4:39:72:
                    e1:51:c2:96:ae:f6:39:58:9e:95:05:50:12:ad:a9:
                    1a:bc:f9:30:9a:e1:fd:80:8c:28:a9:f7:34:91:0a:
                    71:ca:9a:10:2b:64:52:83:41:1a:88:8e:d2:d7:10:
                    b9:92:a2:b6:17:07:37:07:ed:bb:16:8c:36:53:cc:
                    5d:53:2a:e6:24:b5:be:a9:d9:8d:8e:c2:68:e4:a5:
                    32:18:94:e9:c5:8c:b5:9d:8e:ae:2c:68:4c:79:63:
                    c1:bb:f9:18:1b:0d:f8:36:db:a6:50:a3:3a:94:42:
                    f3:3f:b7:95:93:90:75:79:04:d5:4c:33:20:6e:5f:
                    ba:fd:8e:13:5f:66:cd:9e:60:e7:f7:5c:dc:b1:8f:
                    0c:b2:e3:85:b4:40:2b:2c:59:3c:81:18:7b:ac:84:
                    e9:91:ad:4a:3c:12:47:56:ca:fd:3f:b0:65:d2:5e:
                    56:af:12:69:6e:5f:15:5e:d6:b1:65:ad:8c:e7:7e:
                    d6:81:b4:75:16:44:f7:0e:d3:41:57:c3:ad:5e:0b:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:17:19:70:32:D5:92:A3:2A:36:3A:03:08:C9:4A:1D:B1:B9:C3:B4
            X509v3 Authority Key Identifier:
                keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:4d:ff:d5:14:cf:24:58:1d:97:e5:13:83:dc:75:94:5b:
         69:c6:da:7a:b7:7b:1a:5b:ad:57:4c:d8:65:b5:03:ec:b9:ae:
         9e:6c:a4:72:81:45:05:f7:1c:a1:bc:81:13:e2:a4:3a:2f:bd:
         95:6d:53:45:dd:47:0a:10:2a:74:b2:1f:bf:2e:7e:c0:4d:67:
         a9:2f:00:c0:fc:01:82:ca:44:75:dc:b5:c1:6c:aa:c2:d4:e7:
         d9:96:49:47:f7:e0:fe:6f:99:1b:6f:0d:8e:de:69:77:c8:0c:
         48:85:e5:11:5f:0d:8c:73:59:67:8c:a7:96:34:73:f8:d1:65:
         20:c0:7b:da:70:2b:09:65:1e:92:4b:fb:b6:e4:2d:98:20:94:
         f0:b0:71:11:13:7a:51:00:4b:fc:ac:9e:59:53:95:5a:f1:b7:
         ec:3a:df:f6:2a:f6:59:5f:4c:f7:7d:eb:f6:0c:f5:05:d5:c8:
         2f:af:f8:57:e8:fb:95:f0:91:9d:df:aa:70:da:63:82:5d:fe:
         06:54:92:1b:04:98:6d:06:8d:87:de:a8:5d:e8:56:b4:3f:f8:
         1c:21:c3:44:01:72:77:dc:5b:b6:28:11:ee:c9:79:84:14:31:
         f4:e8:e8:26:0c:f6:83:35:40:2e:ea:1f:8a:2d:39:74:fa:2d:
         29:b0:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 08:19:43 2024 by rpki-client on console-ams.rpki-client.org