Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
File:                     FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft (raw, json)
Hash identifier:          RH97adbr97rhTdUtd2naK3uTL96kzNNbtmQMWCmz7e8=
Subject key identifier:   AB:98:E8:99:AA:9F:5E:33:D2:20:27:D3:97:AE:3F:21:CF:ED:50:9C
Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
Certificate issuer:       /CN=14a9d3c7406e276005488871d5218c05a07166d1
Certificate serial:       018F4B6C06FBEEB9FBD4EE8E8AC4B9B25CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
Manifest number:          070A
Signing time:             Mon 06 May 2024 01:02:01 +0000
Manifest this update:     Mon 06 May 2024 01:02:01 +0000
Manifest next update:     Tue 07 May 2024 01:02:01 +0000
Files and hashes:         1: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl (hash: ws/Hmt/lJqNK1ACbGEEB1/BuXX0iT7BVYc49V8OCHYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:06:fb:ee:b9:fb:d4:ee:8e:8a:c4:b9:b2:5c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1
        Validity
            Not Before: May  6 01:02:01 2024 GMT
            Not After : May  7 01:02:01 2024 GMT
        Subject: CN=ab98e899aa9f5e33d22027d397ae3f21cfed509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:ed:a2:bf:d7:18:53:0a:f9:fd:0f:72:9b:
                    3f:a7:df:2c:0a:09:d6:bf:9b:9a:96:ba:fb:30:c2:
                    47:35:5f:43:3e:f1:f9:a8:49:93:8c:a3:ce:66:40:
                    29:a9:12:03:d8:4b:37:ab:f4:20:e9:21:0e:4d:9e:
                    8e:d0:5b:75:a3:2f:6a:ce:c6:40:86:ce:29:3a:72:
                    54:97:7f:89:d7:d3:44:78:ac:34:a5:a5:3f:55:68:
                    9a:48:9f:57:a2:b2:cd:83:6b:fb:67:32:3d:5a:74:
                    98:9c:cf:0d:15:cf:e1:49:22:b5:79:6b:42:c1:3e:
                    ab:4a:28:13:3f:54:28:50:ad:5f:08:bf:8a:62:73:
                    c9:4f:12:ad:db:23:c0:a3:30:da:3f:bf:52:9f:89:
                    79:3f:38:f1:a3:63:b6:35:47:ea:ec:12:d4:a7:f2:
                    f8:b9:6d:55:4f:4f:1b:21:e1:a7:44:88:f4:fd:a4:
                    cd:7a:6d:2c:8d:07:9e:f6:4c:98:27:12:01:40:a1:
                    a5:27:cd:66:05:6e:f8:66:45:d3:2e:73:01:eb:bb:
                    87:63:2e:e9:9d:49:45:5b:82:2a:dc:46:33:9b:09:
                    c4:1d:16:5d:e9:e8:cf:93:1b:bf:90:1b:09:33:44:
                    9c:ee:a7:56:4e:9c:bc:90:23:e3:21:2a:82:47:d8:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:98:E8:99:AA:9F:5E:33:D2:20:27:D3:97:AE:3F:21:CF:ED:50:9C
            X509v3 Authority Key Identifier:
                keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:ff:e5:95:78:27:b2:d8:9f:05:a6:3a:de:c0:6d:bc:1e:
         30:81:00:aa:58:1b:6e:d5:88:51:12:c0:c6:01:9d:95:34:8c:
         2f:f7:4b:03:b6:ba:f8:ab:b0:64:54:17:54:00:fe:36:eb:ef:
         d4:49:f4:e4:5f:de:9d:15:0a:26:d6:77:31:81:59:8a:5c:d9:
         0e:a8:2a:37:0d:0c:eb:03:1a:af:f1:f0:d8:e9:74:dd:4d:ad:
         c0:46:52:e8:05:a2:e2:c6:a1:f1:ff:ab:89:f9:ce:29:f0:60:
         f7:0b:08:5e:54:a5:9f:22:f6:a1:43:eb:a8:c1:b2:bd:a9:3c:
         08:6e:53:02:4e:5e:2d:44:3d:c5:9e:3e:67:4a:c7:cb:e0:bf:
         9f:81:4a:c1:45:04:00:01:6c:e5:45:d6:cd:b6:54:26:3b:c4:
         c7:63:a6:d6:f5:f6:ab:0a:8b:f4:58:34:74:05:52:e9:3d:8c:
         5b:32:94:8c:91:dc:be:94:22:51:0e:06:76:05:f9:5d:a4:cf:
         60:d6:ae:3b:18:dd:10:57:0d:fb:08:ba:15:bb:cd:4f:15:71:
         dd:85:48:e4:c8:fc:68:35:60:96:a5:27:bc:df:d9:f7:17:eb:
         a5:b0:9b:1c:e7:8f:24:03:62:5b:d1:8c:04:57:32:2f:95:51:
         30:bd:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:11:28 2024 by rpki-client on console-fra.rpki-client.org