Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File:                     FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier:          DTDDiZqdSgz2sokuMvSU7GFJX2E1WSsNCtJYkwvdl78=
Subject key identifier:   18:95:41:93:3D:34:E2:B0:35:BC:F2:FF:37:CB:3E:85:30:87:22:FC
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer:       /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial:       018F3B1C6E8A81B0A81147CB38F2A10AE7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number:          0979
Signing time:             Thu 02 May 2024 21:01:10 +0000
Manifest this update:     Thu 02 May 2024 21:01:10 +0000
Manifest next update:     Fri 03 May 2024 21:01:10 +0000
Files and hashes:         1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: yw6NKVdS5Q0YgkgjXFSSKDZ7xcPA2WoUB3Z9vfZZ00M=)
                          2: XnUSjsrAlz9-ISjqx-aHoFsvx88.roa (hash: LduoJ+acjaWJu+P1bPaWL+6AAnJqqhMz1eLXfvTdfvg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:1c:6e:8a:81:b0:a8:11:47:cb:38:f2:a1:0a:e7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
        Validity
            Not Before: May  2 21:01:10 2024 GMT
            Not After : May  3 21:01:10 2024 GMT
        Subject: CN=189541933d34e2b035bcf2ff37cb3e85308722fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:10:da:8f:6b:94:01:cf:32:ee:70:4b:0c:
                    07:70:94:66:fd:1d:74:c5:84:c3:8f:9b:40:cb:bf:
                    c7:f2:81:20:34:72:b4:e3:21:cb:dc:2f:9f:e0:8f:
                    10:30:44:ab:ea:71:b6:77:d4:e9:28:9a:c4:39:57:
                    37:e1:5f:12:99:96:b6:0d:b9:fa:a5:06:e3:af:af:
                    d7:20:60:88:15:a5:a1:07:ff:15:89:83:79:46:91:
                    98:e0:93:52:39:48:37:08:6b:95:a9:f7:ae:15:6b:
                    1d:a0:0e:f9:0d:b9:2a:d6:f7:85:2f:8e:c3:77:aa:
                    52:ea:78:96:e7:c0:7d:d8:8c:d5:ad:95:d2:b5:d6:
                    04:9a:c8:5e:f7:b1:ab:b2:2e:6b:e6:ba:3b:51:0b:
                    7f:41:5c:12:b8:71:5f:04:56:eb:6e:bf:39:7d:4f:
                    f3:f6:b0:b0:bd:15:10:b3:60:c7:cd:70:94:ed:f2:
                    99:21:16:0e:55:1d:c1:4c:30:b1:5d:9f:da:1d:74:
                    75:13:2e:0b:d6:c1:a2:18:c5:88:9c:ba:23:67:ed:
                    8b:19:38:86:a4:31:92:38:93:c4:62:d3:07:f7:ad:
                    1d:d0:10:3e:ea:ba:0b:5f:25:14:59:93:9c:ac:e8:
                    db:cf:38:32:7f:61:95:df:11:61:c6:b2:17:a6:94:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:41:93:3D:34:E2:B0:35:BC:F2:FF:37:CB:3E:85:30:87:22:FC
            X509v3 Authority Key Identifier:
                keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:72:0f:36:c6:2e:4b:e6:a6:98:80:70:f8:3f:1a:7c:e6:14:
         09:ac:23:51:91:df:8f:05:0b:24:84:cb:79:cf:89:12:ba:d0:
         97:77:a7:bd:b2:82:fb:8c:90:08:59:e5:c4:a7:82:18:3d:b6:
         de:40:1e:42:5d:f0:71:7b:9b:7a:fd:b9:ae:5a:6a:9e:dc:62:
         f8:3c:e9:a6:6d:3b:bf:df:dd:7f:39:2d:62:b2:ba:7a:a2:8e:
         1f:19:36:db:f7:3f:be:f1:6f:93:5b:ae:e1:25:b1:bb:f7:24:
         d0:7e:69:2c:96:fa:bc:03:70:ff:cd:ed:a5:ca:7c:7c:d4:f0:
         bc:ce:20:5a:a7:0c:7c:31:72:c3:80:e2:81:0c:51:e7:f9:03:
         f1:e0:e8:0e:4a:8f:46:2c:6e:d1:9a:b7:83:d4:82:d8:fc:a1:
         a1:ba:6d:cd:a3:bd:97:04:04:1a:68:4a:5c:fb:98:a0:11:64:
         3f:6b:71:47:c0:42:25:6e:d2:3f:45:d6:05:1d:e3:4c:3a:f7:
         f6:7f:bc:5c:26:7e:19:a6:d9:95:b9:d6:9f:f3:d7:de:88:38:
         50:59:c5:1c:08:fb:9d:c8:47:17:52:b6:cb:dc:7d:a6:ec:de:
         b5:81:f7:c3:33:a6:86:63:da:06:05:99:20:fa:ef:39:2c:f0:
         5c:dc:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:40:07 2024 by rpki-client on console-ams.rpki-client.org