Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          RgyOCr8IBIYRdW46vcSGnFsTnbBwdPlAc8zNU3v4Bko=
Subject key identifier:   B4:81:D5:79:39:2D:1B:43:EC:8A:8F:45:75:58:AD:F4:65:CD:AA:A9
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       018FDC4214F42A040E8DEB8B1DBA625ACD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          0AB8
Signing time:             Mon 03 Jun 2024 04:01:09 +0000
Manifest this update:     Mon 03 Jun 2024 04:01:09 +0000
Manifest next update:     Tue 04 Jun 2024 04:01:09 +0000
Files and hashes:         1: BnovjkpsJ0JwWL8X-SaPkcf0oMQ.roa (hash: VEe/ggwJzjxHWDgYqdUOLGmAdut0mKWdd6CmTh4LLXE=)
                          2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: x4FI8SocOYVaRKlo2x/YZ2edA81r9z48H8JMS+vc0hY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:dc:42:14:f4:2a:04:0e:8d:eb:8b:1d:ba:62:5a:cd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: Jun  3 04:01:09 2024 GMT
            Not After : Jun  4 04:01:09 2024 GMT
        Subject: CN=b481d579392d1b43ec8a8f457558adf465cdaaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:d5:38:4e:17:c5:f8:20:c1:20:f5:83:04:
                    b6:43:cb:cd:f8:94:e5:bf:91:a9:7c:39:0a:bb:54:
                    5a:f5:99:68:13:3e:bd:8f:90:1a:df:68:17:81:73:
                    2b:4f:b1:26:c0:18:02:68:96:43:32:b3:c5:cc:e2:
                    57:7b:fa:4e:a6:70:dc:52:56:d2:ba:95:12:51:81:
                    89:60:7e:55:47:81:dc:05:a1:f2:4b:ef:ec:e0:e2:
                    a1:ac:50:c6:d1:1c:79:11:10:cf:f3:0e:20:93:30:
                    f7:56:7f:8c:4b:99:2b:a9:fa:c8:22:7e:92:34:ef:
                    b8:7f:b0:17:bd:99:f1:e4:9d:34:da:5d:94:b5:4a:
                    20:a5:8b:03:85:32:f2:3f:c3:f0:3c:ec:2c:05:ec:
                    5b:75:cc:d5:49:1e:d6:8d:a8:df:f7:87:ab:a4:c8:
                    51:07:58:e1:e4:0d:5e:8c:14:6d:1e:2c:a4:1a:d9:
                    cd:2d:a8:5b:9f:08:ca:8a:62:9c:c0:38:e4:61:00:
                    79:bc:5a:0e:79:ec:6f:4a:54:df:4c:32:22:4a:c3:
                    bd:13:95:55:de:6f:33:0a:dc:69:9a:b4:f5:fa:83:
                    db:2d:8a:9a:37:05:b4:05:e0:1a:40:56:31:ff:07:
                    d0:af:16:a2:96:47:b8:b8:de:bd:76:4f:6e:79:b3:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:81:D5:79:39:2D:1B:43:EC:8A:8F:45:75:58:AD:F4:65:CD:AA:A9
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:f3:e4:1f:93:51:e7:73:74:eb:f5:b4:08:fa:11:a0:b9:
         b4:ef:08:15:f3:8b:15:d4:a4:62:bc:40:e7:be:cf:47:f3:fe:
         06:77:ca:f8:49:4a:b9:72:51:62:eb:ef:72:97:b3:fe:ad:ac:
         94:b9:6b:c5:dd:7d:03:30:7c:db:02:10:74:e5:c4:c2:c2:41:
         71:c6:12:7c:86:54:8f:ac:4d:a4:d3:57:ee:b6:e4:d7:7a:a4:
         7d:5b:06:8f:c1:d2:0e:3f:f3:36:b8:ee:81:18:9b:c2:15:96:
         2f:99:06:35:c9:8c:79:25:3b:1c:ae:46:a6:cd:d3:74:95:39:
         b4:f0:42:e6:f0:28:74:16:1a:6a:32:99:1b:af:a6:5a:7f:3e:
         48:47:d4:dd:07:13:72:40:fe:78:64:78:28:60:df:29:ec:93:
         25:9b:65:55:02:d7:6c:98:b6:87:8e:23:03:1b:95:d1:18:22:
         1a:2a:14:6e:30:aa:b8:d6:11:24:a1:7f:03:02:b4:6f:0d:6d:
         f9:72:99:35:15:d5:18:11:bd:63:dd:b9:b8:42:a1:8b:cd:95:
         f4:ed:57:33:77:58:ec:5a:6e:e4:29:9b:d6:83:e8:39:f7:f8:
         b8:98:8e:5e:1a:0d:63:d5:de:af:50:bc:dc:92:9d:e9:22:68:
         7b:d2:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:36:17 2024 by rpki-client on console-fra.rpki-client.org