Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File:                     FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier:          WLIlMkndH6VFfvObTD5prtp30AvkE4Qy+fi9fTImGWY=
Subject key identifier:   3C:DF:11:64:E1:ED:DA:26:62:9F:2F:4D:91:B3:89:A3:86:A1:58:C0
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer:       /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial:       018F34E36DBE4FF0429AEE684C3D60F85490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 16:01:11 +0000
Manifest this update:     Wed 01 May 2024 16:01:11 +0000
Manifest next update:     Thu 02 May 2024 16:01:11 +0000
Files and hashes:         1: Ea_-Y5W16baGl2d5sd8XUjXM0k4.roa (hash: 5T8FUrI34HUnf8r/vrkw8Xpw6U/hBSuIaP5dOoGNLcE=)
                          2: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: grVIO5iDUjWzjU8j+SFhsRJfZBqZ7ueCC9K7Fd3dhA4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:e3:6d:be:4f:f0:42:9a:ee:68:4c:3d:60:f8:54:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
        Validity
            Not Before: May  1 16:01:11 2024 GMT
            Not After : May  2 16:01:11 2024 GMT
        Subject: CN=3cdf1164e1edda26629f2f4d91b389a386a158c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:b0:d8:86:cf:a4:37:fa:a4:ce:7f:d6:99:
                    1c:98:8a:56:5b:c0:50:4f:5c:cd:f4:35:73:77:0e:
                    41:5a:fd:d6:af:b3:1f:6a:4e:75:e1:00:bf:78:a6:
                    3b:f4:38:c9:f5:70:02:d0:44:ae:79:85:f4:f9:8a:
                    ec:64:1e:4f:c3:ef:3f:eb:1f:d2:f3:17:ba:9c:c8:
                    72:93:24:ab:d1:e9:55:9d:16:fd:a6:00:48:94:2a:
                    e3:35:fd:9c:b6:04:a2:c6:d1:60:83:1a:cc:74:3c:
                    90:66:54:00:6f:f0:04:62:1e:da:11:ff:21:c7:f0:
                    9d:04:17:97:ca:bf:c4:96:1c:a9:bf:86:b6:b2:df:
                    a5:1c:41:e5:9d:2b:21:b3:f9:d7:ef:a6:2c:67:cb:
                    90:dd:6d:20:8d:32:2e:e8:0f:a8:70:b4:a6:85:2b:
                    cd:be:51:70:b7:ba:d6:51:27:c1:c2:3c:2b:f2:da:
                    f1:e6:e7:5e:4a:90:77:12:a8:ab:61:ab:ca:34:0c:
                    a0:b8:55:8a:66:4b:5a:3d:d4:e6:b1:3b:6a:48:69:
                    59:8e:c4:68:51:36:f5:f4:bc:16:82:83:3e:9b:9a:
                    9a:a5:69:92:17:99:c6:b7:86:06:e2:e0:98:c8:61:
                    e7:0b:9a:46:74:2a:45:6f:9a:74:15:fc:6a:8a:44:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DF:11:64:E1:ED:DA:26:62:9F:2F:4D:91:B3:89:A3:86:A1:58:C0
            X509v3 Authority Key Identifier:
                keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:04:74:92:70:92:0b:6d:c2:04:98:2d:d5:11:fc:fc:73:93:
         d7:4d:69:42:52:22:68:ba:2e:e7:25:16:e6:01:34:07:06:50:
         95:b7:08:80:f5:d5:25:70:a2:62:77:99:aa:77:a3:20:21:4c:
         bb:18:1f:fa:32:e0:9b:db:60:1c:1e:79:1a:ab:c3:31:f3:5d:
         c1:32:a7:79:92:16:ff:b0:47:eb:28:82:7c:83:d9:8c:ef:df:
         9e:ae:7d:b2:de:e1:bf:2d:82:a2:ac:cf:59:3d:3f:03:7e:2f:
         d4:c1:fb:69:2a:01:3a:69:27:a9:68:65:7f:c9:06:34:fa:50:
         1c:21:9b:ab:8d:c3:7e:06:27:8f:d0:9c:4b:5c:98:2c:16:76:
         d3:ad:a9:c5:39:66:02:08:55:ac:98:1b:c8:45:8b:00:41:32:
         9a:98:88:1c:83:21:28:b1:14:5a:ec:5f:57:eb:ff:44:b6:c5:
         45:d1:de:00:97:51:51:60:1f:24:1e:0b:e6:08:2c:82:01:d3:
         9d:5e:c0:d5:6b:57:58:27:8b:78:0f:31:63:eb:f5:15:a1:01:
         7d:ea:45:7d:92:b5:1b:af:d9:1e:0d:07:50:ce:63:cd:d7:6b:
         3b:cb:1f:44:3b:8e:be:20:53:d9:7f:46:e8:92:d9:a2:c4:2c:
         dc:4e:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:51:03 2024 by rpki-client on console-fra.rpki-client.org