Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File:                     FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier:          3p8/mz04O2mWmBzTXEPEGFFoVnus2uT5RkTT05tUZQA=
Subject key identifier:   17:CC:7C:64:4E:9D:B4:BF:3E:97:87:3B:E6:8D:F1:17:95:D4:3B:28
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer:       /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial:       018F3A0A3627D301BDCE1DFF9E94FCAAE349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number:          041E
Signing time:             Thu 02 May 2024 16:01:38 +0000
Manifest this update:     Thu 02 May 2024 16:01:38 +0000
Manifest next update:     Fri 03 May 2024 16:01:38 +0000
Files and hashes:         1: 1FIbqtO3aW8novEaXJvYQVwGyWc.roa (hash: S/3SvlSXk5DuXS8X/TIAJioTM549z8K8Q6eZKQBRacc=)
                          2: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: 2dxxJ2nb7WS72w6W5D1q3B2Jcw0iJqyMHU3Fr8MxQdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:36:27:d3:01:bd:ce:1d:ff:9e:94:fc:aa:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
        Validity
            Not Before: May  2 16:01:38 2024 GMT
            Not After : May  3 16:01:38 2024 GMT
        Subject: CN=17cc7c644e9db4bf3e97873be68df11795d43b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:8a:42:bf:fd:67:5b:a1:12:91:ee:db:29:
                    6b:12:20:07:a7:d7:e7:7d:a2:87:e9:7c:76:77:7b:
                    dc:ff:01:14:55:4f:24:d1:f5:3d:d6:3a:0e:6f:3d:
                    91:80:07:c2:e5:21:c9:ef:eb:a2:5b:de:a3:e2:13:
                    da:92:62:76:df:2a:a9:50:7b:c0:9f:d2:bd:e3:5a:
                    ba:e7:f3:81:1d:9e:90:d9:a7:f6:7d:6b:a1:fb:95:
                    65:cf:3a:fc:2b:64:83:5c:13:04:b2:ad:68:a9:dd:
                    f7:84:21:ad:b7:0b:33:f5:90:7b:b4:32:80:c2:bd:
                    bc:16:4e:04:4a:56:61:01:74:fd:b4:60:73:95:01:
                    70:f2:16:bf:f1:cb:42:41:db:de:8f:cb:dc:5b:f1:
                    46:46:21:14:e7:b0:f5:8e:83:d6:23:5c:ca:99:b1:
                    bf:84:48:7f:75:ac:33:7e:22:e9:46:62:c6:04:27:
                    e3:f0:e1:45:c9:2e:3f:15:a4:50:27:a4:45:90:53:
                    5c:2d:34:b7:f0:b9:e8:b3:0b:60:9c:7b:62:dd:a6:
                    5c:2e:e8:d5:ff:b7:5d:3d:48:b6:40:fd:46:4d:19:
                    9a:82:f3:4e:51:5c:26:a0:fe:9c:ef:27:56:92:b4:
                    f2:68:de:d2:a4:71:93:b5:61:af:5a:36:f1:b8:17:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CC:7C:64:4E:9D:B4:BF:3E:97:87:3B:E6:8D:F1:17:95:D4:3B:28
            X509v3 Authority Key Identifier:
                keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:98:c4:9f:a4:95:99:78:76:40:27:5b:4e:29:df:fe:be:31:
         1d:49:62:07:6d:3d:1f:f4:65:8f:a8:7a:17:77:ff:c6:a8:60:
         32:b1:c6:be:a0:30:a2:d0:b9:62:b1:24:3e:d8:1a:a1:c3:3e:
         88:23:7a:40:21:f7:16:ff:01:50:4c:72:21:d3:5e:42:1c:a7:
         ef:98:cd:21:96:c9:75:fa:ac:91:d1:2e:5d:da:1d:16:e5:9c:
         2d:09:20:1f:a9:5a:ce:71:2b:26:f8:3a:2a:87:0e:06:c3:24:
         42:3f:2c:1f:1c:95:01:a4:36:65:e5:e1:8c:a6:41:a1:e9:69:
         9d:0c:38:2b:67:d8:fd:e6:3d:1e:b8:09:f3:57:98:00:3b:ac:
         6e:67:54:69:75:76:6d:92:80:48:7c:c7:2b:b7:61:34:f5:a0:
         fd:b7:bc:6c:5e:e7:b9:e5:2d:d0:20:8d:92:36:08:6c:67:db:
         52:04:72:39:d3:0c:c8:7a:6c:f6:a9:de:ee:17:eb:2d:af:04:
         1e:f5:0a:1f:f4:40:91:e3:6c:fb:9f:7e:ee:b3:f4:40:e6:5d:
         5f:57:e9:da:4f:2d:e0:78:4a:a6:14:d8:46:68:a9:27:15:ef:
         a3:97:56:cd:55:64:94:bd:12:65:cc:d7:5c:ed:ae:f6:ce:92:
         e7:04:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:44:52 2024 by rpki-client on console-ams.rpki-client.org