Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File:                     FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier:          +8hfAuhtpRe58/5G15N7LA+yAO/CCW04xyUPK52QFYU=
Subject key identifier:   35:E2:2E:C2:6F:06:91:5A:6F:AA:98:C1:ED:E6:E3:75:0A:6D:82:5E
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer:       /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial:       018F4C7E03747F2A1B2BA1D5A86FE54FDF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number:          03FD
Signing time:             Mon 06 May 2024 06:01:17 +0000
Manifest this update:     Mon 06 May 2024 06:01:17 +0000
Manifest next update:     Tue 07 May 2024 06:01:17 +0000
Files and hashes:         1: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: VF9StD0uxNfd8Sm2zWKB1jCOYTu0iXRjuRnE59MiyME=)
                          2: fb9aF9mQtCBvKwFIJnRauWvLbLg.roa (hash: olZhEutK00SUBDopHKVZBCPyfYh3dJf5re+puavBrvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7e:03:74:7f:2a:1b:2b:a1:d5:a8:6f:e5:4f:df:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
        Validity
            Not Before: May  6 06:01:17 2024 GMT
            Not After : May  7 06:01:17 2024 GMT
        Subject: CN=35e22ec26f06915a6faa98c1ede6e3750a6d825e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:ac:d6:76:14:d9:00:6a:fc:b3:c4:87:60:
                    bd:6d:36:8c:a9:e1:67:a1:fd:0a:f5:7a:ae:a4:65:
                    57:8b:40:8d:79:ca:7f:40:40:8b:3e:37:31:e4:6b:
                    e2:f2:7f:e2:5b:1e:bc:b6:4e:67:be:c8:cd:47:1b:
                    d0:52:b9:5b:d0:08:c8:5b:54:2f:97:9f:45:ca:bc:
                    62:31:65:35:6c:26:4c:f2:96:e4:1e:e0:60:a0:ea:
                    96:5f:80:70:c0:57:78:23:8e:1b:cc:39:d7:69:73:
                    56:40:1a:6b:a8:47:78:6d:84:7d:af:2f:ba:5c:70:
                    1d:35:df:c4:5d:a8:35:07:e3:ae:48:35:44:8a:a1:
                    2b:ee:85:35:d4:dc:68:46:b4:44:ed:1e:5c:a9:43:
                    59:f2:56:b3:c5:bb:6e:f1:03:b9:52:f2:3f:8d:11:
                    24:51:60:fc:67:95:10:dd:f4:6f:d6:c4:f4:94:8e:
                    bb:5d:ad:ac:a2:a8:cf:43:d3:88:0f:90:98:db:24:
                    c6:50:66:c2:55:a3:e3:ef:ec:be:98:94:6c:be:4d:
                    6c:0e:b3:55:e7:34:04:97:1e:d5:4c:1e:ce:3c:c0:
                    04:ef:1d:54:4d:7d:29:90:d0:00:f7:2f:03:b8:b0:
                    52:d1:1e:3e:39:79:82:3a:fd:7d:52:da:17:ce:f7:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E2:2E:C2:6F:06:91:5A:6F:AA:98:C1:ED:E6:E3:75:0A:6D:82:5E
            X509v3 Authority Key Identifier:
                keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:09:f7:c2:24:43:98:ca:c6:f6:6c:07:6f:a5:c8:e4:a1:
         2c:2e:5e:6a:e1:74:8e:1a:80:4b:e0:16:d2:c2:11:db:ab:87:
         94:35:47:9d:cc:4d:86:00:7f:07:d4:bf:1e:d6:4d:74:dd:0b:
         b9:1f:c8:a6:db:ad:27:57:c3:5e:67:de:2e:11:54:d1:7c:44:
         b4:8e:9a:df:74:13:9a:bb:c0:e7:bb:ef:66:ce:61:d4:48:ad:
         3d:e6:b2:0a:d9:8d:de:52:34:56:4d:93:13:18:43:49:59:b6:
         1d:e5:b6:2b:84:3e:87:98:95:5e:c1:7c:28:f9:53:83:d5:c8:
         20:0d:6c:f3:00:79:6c:3e:8a:6b:e3:c3:e6:54:95:64:1c:05:
         48:47:4f:ff:5a:f5:5c:14:15:6d:0b:9a:8c:62:2f:2f:41:23:
         09:e1:fa:9f:ce:e3:c7:26:f3:0c:0c:37:e2:fa:2c:83:d1:e4:
         6a:78:d1:37:d9:72:e1:15:8b:cd:01:9e:ae:54:dc:82:e7:2b:
         2c:d0:15:45:03:15:06:0b:17:79:f9:20:7e:e8:c5:27:cf:19:
         85:9e:7c:37:fc:58:78:83:32:08:c3:91:1d:81:bb:13:53:57:
         ad:e0:63:15:d7:69:f5:e7:1d:50:dd:35:c4:f7:ed:a5:d1:f2:
         6c:4d:19:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MfgN0fyobK6HVqG/lT9+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz
YzQyZDYwHhcNMjQwNTA2MDYwMTE3WhcNMjQwNTA3MDYwMTE3WjAzMTEwLwYDVQQD
EygzNWUyMmVjMjZmMDY5MTVhNmZhYTk4YzFlZGU2ZTM3NTBhNmQ4MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMas1nYU2QBq/LPEh2C9bTaMqeFn
of0K9XqupGVXi0CNecp/QECLPjcx5Gvi8n/iWx68tk5nvsjNRxvQUrlb0AjIW1Qv
l59FyrxiMWU1bCZM8pbkHuBgoOqWX4BwwFd4I44bzDnXaXNWQBprqEd4bYR9ry+6
XHAdNd/EXag1B+OuSDVEiqEr7oU11NxoRrRE7R5cqUNZ8lazxbtu8QO5UvI/jREk
UWD8Z5UQ3fRv1sT0lI67Xa2soqjPQ9OID5CY2yTGUGbCVaPj7+y+mJRsvk1sDrNV
5zQElx7VTB7OPMAE7x1UTX0pkNAA9y8DuLBS0R4+OXmCOv19UtoXzvdO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXiLsJvBpFab6qYwe3m43UKbYJeMB8GA1UdIwQY
MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt
NzlhODI5MWIxNTdmLzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm
LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp8J98Ik
Q5jKxvZsB2+lyOShLC5eauF0jhqAS+AW0sIR26uHlDVHncxNhgB/B9S/HtZNdN0L
uR/IptutJ1fDXmfeLhFU0XxEtI6a33QTmrvA57vvZs5h1EitPeayCtmN3lI0Vk2T
ExhDSVm2HeW2K4Q+h5iVXsF8KPlTg9XIIA1s8wB5bD6Ka+PD5lSVZBwFSEdP/1r1
XBQVbQuajGIvL0EjCeH6n87jxybzDAw34vosg9HkanjRN9ly4RWLzQGerlTcgucr
LNAVRQMVBgsXefkgfujFJ88ZhZ58N/xYeIMyCMORHYG7E1NXreBjFddp9ecdUN01
xPftpdHybE0ZEw==
-----END CERTIFICATE-----
Generated at Mon May 6 09:41:01 2024 by rpki-client on console-fra.rpki-client.org