Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier:          PXuttApMdAkzVaXZHkBEMX263GeOVUkFVr1VCQOvlWQ=
Subject key identifier:   44:D1:02:CB:F4:FC:8D:00:CC:BF:40:0A:6A:53:53:DF:C3:3D:90:5B
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer:       /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial:       018F3BF958CFC2E475386A7D11A6322340F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number:          09C4
Signing time:             Fri 03 May 2024 01:02:27 +0000
Manifest this update:     Fri 03 May 2024 01:02:27 +0000
Manifest next update:     Sat 04 May 2024 01:02:27 +0000
Files and hashes:         1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: 7MTp5LEY57gUlhSv2C/6V6E39uTOEKGW/8ddZAyV430=)
                          2: n0APRDvviU0xEyJLkjFToZ2jTGI.roa (hash: tj/C+HsnLk9qfOjapsBbduRdb+BWoLGgFOg1EtMRk+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:58:cf:c2:e4:75:38:6a:7d:11:a6:32:23:40:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Validity
            Not Before: May  3 01:02:27 2024 GMT
            Not After : May  4 01:02:27 2024 GMT
        Subject: CN=44d102cbf4fc8d00ccbf400a6a5353dfc33d905b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cb:a2:cd:da:aa:7a:c8:0d:a6:87:63:26:c0:
                    bf:51:c5:64:37:35:24:aa:2b:b4:59:2b:cf:ac:f6:
                    85:08:65:44:48:24:22:49:c1:4f:c6:2a:19:64:80:
                    1b:8b:f8:76:4b:76:6d:53:44:b9:d2:87:0e:21:71:
                    44:9a:99:36:05:5d:04:d8:43:08:60:14:dc:7c:e6:
                    02:58:66:e9:19:bd:e2:76:f1:c0:e0:d4:03:e4:b4:
                    5c:97:97:2e:2a:b1:c7:e4:e5:84:63:2e:0a:64:77:
                    bf:88:a5:70:c7:1b:b8:08:fb:66:9e:74:c2:37:70:
                    c6:08:0c:c2:38:87:80:25:05:13:31:b7:04:85:f9:
                    63:de:7f:16:3f:ac:71:71:54:55:ad:82:d1:67:15:
                    7e:2f:29:38:26:25:22:7d:91:36:41:29:41:e1:ef:
                    9a:88:6d:c7:83:4d:44:a4:99:a0:18:77:09:1a:d0:
                    eb:f4:c5:be:17:2c:25:b9:97:47:fa:53:98:79:da:
                    a4:71:04:f9:45:fb:e2:03:b8:fb:69:0e:21:80:27:
                    20:ca:c3:b9:19:83:1a:01:56:42:e0:5f:aa:ad:9d:
                    f3:97:0e:ad:cb:da:89:9c:09:c2:f6:f0:a8:17:4b:
                    a0:2b:3e:7b:3b:58:2f:e0:3d:82:12:e5:26:7e:54:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D1:02:CB:F4:FC:8D:00:CC:BF:40:0A:6A:53:53:DF:C3:3D:90:5B
            X509v3 Authority Key Identifier:
                keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b0:12:1a:94:d3:fc:02:0b:9a:60:b5:e3:3f:71:26:b4:cb:
         fc:db:2f:69:ec:3a:c6:26:32:89:ac:84:e4:86:73:e7:5f:95:
         0e:2e:c0:bb:0b:83:59:d4:96:8f:be:92:28:10:5e:01:04:fe:
         3e:25:d7:b9:d8:94:09:35:b4:bf:86:49:ef:f2:bd:7c:81:09:
         71:ac:f9:e3:2a:1d:03:28:4e:fe:44:e5:81:5b:9f:62:49:29:
         9e:be:f0:ae:bb:bc:8a:f3:fc:25:8e:8f:fa:da:62:2e:20:37:
         e9:b8:bf:8a:cc:8d:b5:6d:19:9c:b9:c1:4d:f2:a7:e0:7a:cd:
         d5:35:32:08:29:42:43:9c:e5:e9:6d:7f:7c:9f:70:62:a0:c8:
         83:4d:72:5e:54:61:2d:86:68:5e:db:81:7d:1d:39:ef:6a:86:
         79:77:bd:8a:bf:dc:9b:3e:92:c9:ae:72:34:8c:d7:1c:50:6a:
         96:4f:a4:bb:fb:03:a3:36:5a:83:11:87:c6:84:33:2a:21:78:
         2f:cd:57:45:7d:7e:55:90:27:b0:8b:a2:6a:aa:70:db:36:03:
         47:a7:65:fb:80:1a:f3:19:28:a9:de:a2:88:40:f5:23:cd:7c:
         05:25:f0:5c:ee:c3:16:99:5e:7a:0f:44:71:fc:72:0f:d3:4e:
         58:e3:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:55:46 2024 by rpki-client on console-fra.rpki-client.org