Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
File:                     F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft (raw, json)
Hash identifier:          GqXS2/NdojHs9eoCnbZ3W4DBTrdsVgDUaJKYiQEs6uQ=
Subject key identifier:   A3:14:56:76:08:7A:B9:BF:32:78:D8:69:ED:CC:BE:C9:E4:AA:3A:0F
Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
Certificate issuer:       /CN=17ec31441691b859b347fd17217a5e5d1b0be303
Certificate serial:       018F885B56F2D21CA58FC35488514B9C8DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
Manifest number:          02A5
Signing time:             Fri 17 May 2024 21:00:38 +0000
Manifest this update:     Fri 17 May 2024 21:00:38 +0000
Manifest next update:     Sat 18 May 2024 21:00:38 +0000
Files and hashes:         1: F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl (hash: pL2y2QzCKuycfeb3Ao1eFa8FCsJLR1JAVxqAGlo7+YM=)
                          2: H30RtxoYIxRSD4CT-gh4vDGQnrI.roa (hash: yws1XoHDaQAy5/JyX9Vo8fzCxAktjNe8wGLgK4Xafog=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:56:f2:d2:1c:a5:8f:c3:54:88:51:4b:9c:8d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303
        Validity
            Not Before: May 17 21:00:38 2024 GMT
            Not After : May 18 21:00:38 2024 GMT
        Subject: CN=a3145676087ab9bf3278d869edccbec9e4aa3a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:88:82:db:d1:d5:85:81:42:b3:2c:3a:a8:
                    f2:86:9e:0f:c5:c9:8b:55:14:08:21:de:af:04:67:
                    1f:a4:fc:85:e8:ef:2b:93:67:ad:5f:f0:3f:91:cc:
                    4b:8c:ab:16:3b:24:ea:70:0b:d6:cd:66:68:ea:a8:
                    58:76:2f:8f:62:b8:08:88:da:2e:ed:cc:6f:3a:e6:
                    3f:04:84:b5:05:b3:a7:f0:e3:82:78:c7:13:05:6b:
                    b6:f0:f7:9f:a8:09:1e:ea:e0:38:4b:7c:5c:93:7b:
                    7e:56:01:a5:24:65:67:c1:f8:e4:1a:5e:55:07:d5:
                    e1:d5:2b:77:c5:bd:d8:de:b5:97:9b:7a:cb:0c:da:
                    42:48:a8:84:c3:ae:fe:1d:ee:bf:96:ed:94:33:8d:
                    ef:d8:2c:f0:4a:28:bf:1c:24:22:c0:fa:45:ce:26:
                    f6:13:37:50:c7:cf:fe:18:cb:54:b9:63:32:ef:98:
                    11:89:3e:f4:f1:4c:bc:f6:87:3d:43:14:3e:08:b1:
                    50:58:29:b2:db:99:3c:9b:06:7b:8f:0c:ce:fe:de:
                    c5:3f:12:2f:03:3a:f7:86:23:c5:c6:cb:e0:40:8a:
                    81:c9:17:5b:e6:f6:44:3f:c8:93:dd:e1:0a:60:8b:
                    af:ac:b6:88:55:8c:e7:73:96:a3:8d:a9:ec:eb:0a:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:14:56:76:08:7A:B9:BF:32:78:D8:69:ED:CC:BE:C9:E4:AA:3A:0F
            X509v3 Authority Key Identifier:
                keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:25:79:31:31:99:5b:af:eb:6e:3e:10:1f:e4:c1:25:40:a0:
         66:75:87:6f:ce:61:b8:35:0a:63:52:95:af:dd:83:96:6f:13:
         1b:db:f0:e3:ef:06:e3:27:6c:30:1e:de:ef:86:1f:a1:0c:12:
         fc:3c:46:55:43:07:df:2b:a3:9b:8c:af:a9:c8:7c:cb:58:57:
         e3:0b:bd:f3:29:ad:b8:2c:d8:80:9b:7a:bc:93:85:8e:46:1c:
         4f:cb:c7:ae:f7:15:a1:59:1f:80:46:c9:f7:b7:d7:3f:63:85:
         50:c3:e5:91:66:c4:b9:2d:d0:64:34:d9:36:80:30:b7:36:6c:
         c4:aa:32:9b:6a:30:51:a2:ed:6b:12:77:43:17:fc:19:0a:12:
         49:03:b7:45:05:60:5e:10:89:35:64:b0:9d:52:2c:64:00:6f:
         ba:a3:99:2f:d7:42:b7:9a:8c:b3:a1:61:c6:07:dd:b3:21:6d:
         34:9e:62:40:4e:55:43:bf:94:19:29:94:58:49:e0:c8:ec:16:
         fb:e6:64:65:f6:f4:6f:16:18:eb:1b:01:1f:13:36:f2:42:7d:
         96:2e:3b:30:ca:ff:d4:a0:4a:ae:02:a2:d1:a6:94:d1:cf:76:
         ea:04:e9:ac:3e:66:ab:be:0c:c6:e2:4e:32:a5:7f:58:8b:2e:
         f6:af:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:05:42 2024 by rpki-client on console-ams.rpki-client.org