Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
File:                     FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json)
Hash identifier:          q88dV9ZQJzW+BoLStMsw+9aBy6N5LUtij9IYgiAossg=
Subject key identifier:   2F:81:C0:7D:40:AB:CA:53:EA:E3:DA:A4:A9:91:90:30:60:77:D3:54
Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0
Certificate issuer:       /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
Certificate serial:       01938C9D9C1C56F9F27CAF009BD2AEC1A338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
Manifest number:          032B
Signing time:             Tue 03 Dec 2024 13:02:39 +0000
Manifest this update:     Tue 03 Dec 2024 13:02:39 +0000
Manifest next update:     Wed 04 Dec 2024 13:02:39 +0000
Files and hashes:         1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: GwTQed2ZReiyS4R44HB/8fw/TQ08N2PGgZRe0zWp1Tw=)
                          2: UvUgYTWDFGHSILhLnDleF6nCpwc.roa (hash: tO7zdjUxIW8wkz3mlxGsBayZMuTcSLS7NFD7RR4IDf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9d:9c:1c:56:f9:f2:7c:af:00:9b:d2:ae:c1:a3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
        Validity
            Not Before: Dec  3 13:02:39 2024 GMT
            Not After : Dec  4 13:02:39 2024 GMT
        Subject: CN=2f81c07d40abca53eae3daa4a99190306077d354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7d:58:82:a9:59:91:43:95:50:b6:c5:59:be:
                    1b:51:c5:df:51:2a:61:f5:63:fe:e0:3b:0c:8f:69:
                    28:67:c9:90:18:04:52:2b:e6:d1:a8:8f:f1:8e:0f:
                    ce:de:ec:97:72:3b:2f:0e:dc:c9:5c:d0:31:85:71:
                    36:ee:8d:a9:98:1a:fb:9b:37:9c:7e:46:a9:a0:a3:
                    b4:46:1d:15:b2:a3:a3:8b:c9:6b:6a:4a:b9:e3:3b:
                    9e:cf:5a:27:77:5e:2a:ed:45:ca:95:02:a1:33:4e:
                    90:4a:f2:60:4d:bd:93:64:b6:e9:ce:46:6e:ed:98:
                    e6:4b:1b:a8:dd:2a:0a:e5:9e:25:68:c3:11:84:d0:
                    33:32:86:b1:22:c5:80:d5:52:28:0d:c3:1b:0f:5f:
                    4c:63:52:af:9b:8b:57:78:31:9f:ea:34:11:48:55:
                    b1:83:fd:d7:e3:36:27:9e:07:71:4b:7a:8f:3b:97:
                    11:ba:ee:1f:8b:8a:19:a2:e7:54:a0:fd:a2:f3:93:
                    d2:55:9a:c0:91:64:cc:b0:36:e0:62:05:a3:03:b7:
                    55:c7:92:0b:3c:47:4a:af:a3:1e:6c:17:e7:93:cf:
                    f5:33:47:81:1b:d5:ec:1f:f0:92:42:ca:e2:e2:7a:
                    54:57:ea:ee:5f:d7:bf:04:c8:f4:ff:60:eb:76:a3:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:C0:7D:40:AB:CA:53:EA:E3:DA:A4:A9:91:90:30:60:77:D3:54
            X509v3 Authority Key Identifier:
                keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:d4:27:60:d1:a6:c5:cd:27:be:0d:79:41:9f:59:3f:12:
         c2:e8:35:eb:8e:a2:0d:d7:2c:d1:00:67:32:0d:ef:ed:f0:4d:
         6e:f6:86:d7:1a:d3:dc:2f:7a:7f:a2:43:fe:a6:d8:88:66:e9:
         73:c7:77:f2:93:a1:98:6b:e0:62:b1:11:f6:ed:76:e0:f6:b3:
         09:82:53:d7:2d:27:4f:f8:40:d3:aa:52:aa:e0:93:2e:6b:3d:
         be:02:32:53:29:aa:c6:e3:24:ce:a1:f5:6f:ce:3b:f1:98:52:
         55:b2:c8:c4:55:18:43:f8:b9:dc:86:a2:5a:04:be:b2:81:ec:
         68:db:7b:4a:47:ef:95:24:b6:f5:a4:2c:b3:d9:d9:25:7d:10:
         53:cd:fa:af:8f:de:03:d9:4f:65:f4:b2:9b:d9:ef:9b:fe:98:
         5d:c5:bb:40:f1:e3:e4:06:b6:b5:80:2b:2e:52:cd:a4:8e:ab:
         f0:e2:7b:50:c5:74:d6:b8:9d:11:9b:1f:b3:d3:d4:c1:b6:5c:
         83:86:05:bd:e3:35:55:18:0d:30:40:0d:36:3b:c1:65:9a:ab:
         6a:61:f0:81:10:ce:f9:cc:d2:c9:7c:e9:2d:9a:72:d9:be:3e:
         71:79:e3:1a:dc:b9:f3:db:c7:e5:9f:47:db:4b:9f:0a:9c:16:
         0a:f7:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:36:03 2024 by rpki-client on console-ams.rpki-client.org