Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
File:                     FTD76iUBSVl304gVrTwnCCbwY6A.mft (raw, json)
Hash identifier:          4Dga0CKJJSeNregdF5+7AF+dGHY4zAByLfttF5B8W/4=
Subject key identifier:   64:3A:04:07:AB:C8:06:29:72:39:4B:18:01:31:6B:5A:97:1B:CC:99
Authority key identifier: 15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
Certificate issuer:       /CN=1530fbea2501495977d38815ad3c270826f063a0
Certificate serial:       018F2012B9C431AD84003B427BDBC5C048CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
Manifest number:          1142
Signing time:             Sat 27 Apr 2024 15:00:49 +0000
Manifest this update:     Sat 27 Apr 2024 15:00:49 +0000
Manifest next update:     Sun 28 Apr 2024 15:00:49 +0000
Files and hashes:         1: FTD76iUBSVl304gVrTwnCCbwY6A.crl (hash: nsiAB/zCTh0OktIS9R/jBIv37saL9dOUyOCVTY0/vHM=)
                          2: LLtzq4Kl8IjeImB6lumfuNP43dU.roa (hash: m/lOe4OPzZqQj8m0aDLsSooyH5ea2bDkC6kLnC46Z88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:12:b9:c4:31:ad:84:00:3b:42:7b:db:c5:c0:48:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530fbea2501495977d38815ad3c270826f063a0
        Validity
            Not Before: Apr 27 15:00:49 2024 GMT
            Not After : Apr 28 15:00:49 2024 GMT
        Subject: CN=643a0407abc8062972394b1801316b5a971bcc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:ea:b8:70:0e:52:cc:23:ac:3e:38:d5:58:
                    b8:9c:49:c8:9a:1d:f9:9e:42:13:a1:fa:52:82:9e:
                    1a:aa:61:8c:4d:77:b8:dc:b8:37:88:f5:69:73:b3:
                    3f:70:13:7d:68:64:c3:0f:6d:48:e6:07:de:7b:58:
                    75:b7:40:27:2c:0a:76:98:d6:ef:ac:92:ca:b3:06:
                    76:bc:50:c9:4f:86:26:ec:98:92:fb:db:56:fe:a6:
                    02:1f:fb:df:c0:cb:63:b0:7b:bf:ba:c4:2b:74:d7:
                    5c:99:c9:0b:38:d9:0a:30:25:69:ed:94:c4:95:2a:
                    8c:0c:e6:27:76:74:88:23:6b:28:f3:4d:ef:23:a3:
                    35:ce:8a:91:c0:c4:6f:1f:8d:78:dd:4c:a0:83:1f:
                    c2:0c:f7:67:a0:a8:cc:16:e1:21:a2:9e:b0:0a:0d:
                    66:ce:13:38:fb:cd:d7:ed:c8:57:f3:4d:cb:2c:ae:
                    7c:19:5c:35:bf:a1:d1:46:5a:69:56:44:84:fa:5f:
                    d2:4a:f1:fd:42:82:09:7d:3b:56:7e:b8:e8:af:44:
                    ba:bc:af:66:ed:09:71:f2:b4:21:ea:ea:22:d4:a7:
                    e0:f7:dc:db:c3:4d:82:1f:12:00:80:a5:a1:2e:d9:
                    58:4a:2d:33:e1:79:91:73:55:3a:21:11:9c:44:23:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3A:04:07:AB:C8:06:29:72:39:4B:18:01:31:6B:5A:97:1B:CC:99
            X509v3 Authority Key Identifier:
                keyid:15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:58:37:39:cd:9f:c2:c6:e3:79:02:5d:eb:dc:30:39:16:
         01:48:94:17:cc:fd:2e:9e:79:67:de:72:62:ab:7c:39:fb:6b:
         ac:fc:bb:80:6a:67:ac:aa:96:df:72:23:20:bc:af:44:63:53:
         14:24:52:7b:de:88:26:f8:77:ff:1e:84:b4:99:23:fe:7e:bd:
         1f:14:f6:b1:68:b1:eb:04:90:df:47:61:72:cd:96:24:db:7d:
         7a:8a:46:fc:0b:5f:ca:44:41:d3:06:c4:a8:2a:d8:46:ce:1c:
         e5:d5:97:3e:ec:ce:c0:47:24:c8:21:89:58:32:76:7c:0a:93:
         11:86:a8:2c:fc:6a:6a:46:4d:86:25:65:70:bb:c3:a7:c3:08:
         35:d0:8e:5d:b4:10:dc:93:4c:37:89:66:b8:10:36:58:d5:c8:
         30:20:29:be:72:19:c8:e0:08:f7:a3:c9:dd:ba:2e:fe:00:c0:
         38:f2:ea:77:09:a5:b4:64:b4:71:0d:f1:fa:15:ab:62:6b:9c:
         22:67:8c:dd:f8:e1:b6:23:2b:9c:25:7d:21:ca:15:a9:bb:26:
         f1:54:c0:bb:db:55:11:a2:83:05:be:56:b4:f5:13:c5:03:cb:
         ef:98:39:02:57:9c:00:c2:7c:47:30:6b:e0:a9:e1:3b:48:f1:
         e7:60:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:19:21 2024 by rpki-client on console-ams.rpki-client.org