Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
File:                     FUNQKjLkt-H_DwIulTDcayMmnYo.mft (raw, json)
Hash identifier:          S/I7mrkpUc79lpEbo8JVZXgaFtO45BgNSGUuDYGjT7I=
Subject key identifier:   E2:33:9C:B0:1D:AE:F0:54:4F:6B:B7:B2:9A:01:46:74:4E:26:CC:9D
Authority key identifier: 15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
Certificate issuer:       /CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Certificate serial:       0193553F24FC7083F2332FA44E8F67317296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
Manifest number:          04CD
Signing time:             Fri 22 Nov 2024 19:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:21 +0000
Files and hashes:         1: FUNQKjLkt-H_DwIulTDcayMmnYo.crl (hash: IWkLh2ql0p6IYFOqwsvoVb6vWE1cX62f4APChx7Vwxo=)
                          2: Lm_xyQpjxnU1AAuIAkxwO7TvSSs.roa (hash: dystoJE3L7Xl3mlRQXECxmE5v3siulzLrHJU3lEWO0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:24:fc:70:83:f2:33:2f:a4:4e:8f:67:31:72:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
        Validity
            Not Before: Nov 22 19:00:21 2024 GMT
            Not After : Nov 23 19:00:21 2024 GMT
        Subject: CN=e2339cb01daef0544f6bb7b29a0146744e26cc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:c2:2b:4f:c6:8a:f8:f5:6e:b7:16:22:2a:
                    b9:31:72:5c:8b:2a:c4:04:63:8c:63:a1:e4:21:5d:
                    d5:a1:f9:52:ee:5b:68:71:45:21:15:ff:51:de:98:
                    92:72:e0:d6:97:4d:82:a6:83:5f:a1:eb:1a:f1:60:
                    37:a5:38:c0:44:ee:7a:1b:e7:a7:92:7f:90:5c:2d:
                    bd:9d:cc:c8:ed:93:0d:85:0a:16:a4:9d:84:20:5f:
                    b0:ea:86:56:a1:eb:17:6a:df:6c:7c:c1:b6:a2:33:
                    d9:a0:f4:3d:21:17:47:83:d6:06:56:f1:ee:7e:37:
                    4e:0d:04:a3:33:1f:33:01:ca:e8:40:07:0b:e3:f8:
                    b1:10:7a:f4:b0:c6:af:ad:8c:b6:7c:89:bb:5d:7a:
                    b2:46:da:d1:fe:53:5d:76:64:22:ba:9e:b3:54:45:
                    eb:50:8f:4d:b1:d0:d5:ab:43:eb:fc:8e:ba:27:d9:
                    09:2b:14:3c:22:05:5b:04:35:bc:6c:26:b2:b9:a6:
                    ae:f0:5a:e6:31:c5:58:51:98:c1:df:d7:1c:ec:d0:
                    52:87:a1:81:67:a0:3e:0a:2e:0c:19:3b:40:22:38:
                    f9:dd:21:d5:3b:5b:12:e9:19:90:30:0a:08:db:e6:
                    95:c3:d3:0b:98:c8:98:6a:a6:7d:34:e4:f2:09:95:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:33:9C:B0:1D:AE:F0:54:4F:6B:B7:B2:9A:01:46:74:4E:26:CC:9D
            X509v3 Authority Key Identifier:
                keyid:15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:62:8a:d1:34:c8:46:a3:2d:74:3d:11:28:d3:99:e1:0a:07:
         8c:79:85:04:65:42:23:c0:c6:90:8f:d8:f8:69:1c:06:d1:4a:
         82:89:49:05:5a:a9:a5:3f:db:78:a2:e5:00:44:85:fa:d4:81:
         f3:c7:bd:f3:f3:8b:11:cc:2b:bf:60:dc:a0:8e:98:d1:65:29:
         6d:ed:6a:4e:d9:88:08:c8:f8:26:4d:bb:a6:dc:da:3e:d0:10:
         c1:a4:93:b1:d1:61:0b:8f:fa:d3:f8:72:70:25:24:84:bf:c7:
         de:85:0e:a8:9c:6a:55:9d:e6:e7:9d:b4:37:8e:00:fb:8a:70:
         3c:4a:19:2f:39:be:3b:14:d2:e3:c6:8c:6a:fb:09:69:c8:b5:
         63:6f:c2:ee:8e:3b:b4:3a:97:10:b1:ec:50:bf:01:ef:5e:18:
         a8:e5:f6:87:cd:b2:54:d2:f5:a6:29:02:b0:68:db:8b:c2:e6:
         7a:4d:90:9b:05:ca:68:96:4b:a7:6e:71:04:eb:e4:75:79:2f:
         eb:f7:47:13:9f:43:8b:a2:5c:3b:58:39:54:2c:10:32:08:85:
         79:cf:8e:75:af:e6:30:47:2d:19:a9:12:68:dd:b3:d7:4a:02:
         32:0d:51:17:25:21:58:86:69:36:8d:d8:2f:1b:5b:73:02:ed:
         ce:76:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:40 2024 by rpki-client on console-fra.rpki-client.org