Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/FiPC830kNJSFNZT9KXxlj3aSy70.mft
File:                     FiPC830kNJSFNZT9KXxlj3aSy70.mft (raw, json)
Hash identifier:          0Kb1HdC1D4Z/FieHb4QutbANveIk6SPm0pDOVJRMlmg=
Subject key identifier:   CD:75:D8:3D:95:09:5C:18:B7:67:B6:87:54:74:9F:DC:2D:1B:40:C5
Authority key identifier: 16:23:C2:F3:7D:24:34:94:85:35:94:FD:29:7C:65:8F:76:92:CB:BD
Certificate issuer:       /CN=1623c2f37d243494853594fd297c658f7692cbbd
Certificate serial:       018F45A13FED80044DF3AA8D3F50F80FB272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiPC830kNJSFNZT9KXxlj3aSy70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/FiPC830kNJSFNZT9KXxlj3aSy70.mft
Manifest number:          0636
Signing time:             Sat 04 May 2024 22:02:26 +0000
Manifest this update:     Sat 04 May 2024 22:02:26 +0000
Manifest next update:     Sun 05 May 2024 22:02:26 +0000
Files and hashes:         1: FiPC830kNJSFNZT9KXxlj3aSy70.crl (hash: YioTsKwVJHmmhDVpfKS4NYSjvvph55/IV2ark4hDYrA=)
                          2: lHMftDdPtm-3MTu6jLA-8XHsbhg.roa (hash: 2UdTafRAKw5bRQTinN0kFRIlxr9mpJeiWAlPUUeVIDo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/FiPC830kNJSFNZT9KXxlj3aSy70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/FiPC830kNJSFNZT9KXxlj3aSy70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FiPC830kNJSFNZT9KXxlj3aSy70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:3f:ed:80:04:4d:f3:aa:8d:3f:50:f8:0f:b2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1623c2f37d243494853594fd297c658f7692cbbd
        Validity
            Not Before: May  4 22:02:26 2024 GMT
            Not After : May  5 22:02:26 2024 GMT
        Subject: CN=cd75d83d95095c18b767b68754749fdc2d1b40c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4a:45:f0:9f:c3:f8:13:f8:02:68:4b:88:65:
                    82:3a:00:7d:3d:5a:81:4e:6d:4c:2d:d4:40:22:35:
                    39:12:97:38:2a:ac:26:28:4d:7c:45:17:e3:9f:ea:
                    bb:ab:e0:79:4a:ca:46:55:b9:d6:f5:7b:c9:e6:8d:
                    60:75:fe:89:c5:07:34:e1:08:bd:52:1f:2d:4d:14:
                    20:92:0f:6b:f9:4e:0d:ca:6d:a3:00:49:50:b0:40:
                    ef:7c:03:09:87:3d:a1:d2:6d:56:63:a7:83:58:86:
                    fd:c4:65:bf:2a:72:f9:e9:06:22:8b:ae:98:47:0f:
                    5d:e5:44:14:e2:fc:6f:3f:67:84:b8:d0:7c:61:8a:
                    43:ce:04:ed:c3:20:14:85:55:a2:b0:13:6f:f2:02:
                    7d:7a:ab:89:ff:7b:b8:34:5d:df:6c:46:b0:8b:9f:
                    41:7f:28:df:86:f7:2b:96:81:5d:93:8d:4f:e4:c9:
                    35:eb:13:32:d9:a9:3e:47:34:b4:38:e5:ea:aa:78:
                    cf:32:46:29:48:de:50:3c:0e:0d:6a:7f:4d:8c:12:
                    92:59:94:59:11:bd:dd:3f:85:11:71:e6:84:58:b6:
                    29:7a:e2:d8:60:1e:52:e9:c1:f3:32:33:08:45:23:
                    ad:f0:be:c8:ba:98:fb:9e:5a:b3:d5:27:6e:d2:88:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:D8:3D:95:09:5C:18:B7:67:B6:87:54:74:9F:DC:2D:1B:40:C5
            X509v3 Authority Key Identifier:
                keyid:16:23:C2:F3:7D:24:34:94:85:35:94:FD:29:7C:65:8F:76:92:CB:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiPC830kNJSFNZT9KXxlj3aSy70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/FiPC830kNJSFNZT9KXxlj3aSy70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/FiPC830kNJSFNZT9KXxlj3aSy70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:25:17:8c:08:b9:af:20:91:b9:48:e7:f1:9c:7a:b6:05:39:
         57:66:69:af:bc:d7:ab:b1:d5:d9:46:3c:f1:a0:52:d1:90:03:
         fb:f8:12:ca:4a:ce:c6:1d:c8:22:a5:e0:1a:88:1b:9a:26:d3:
         07:9e:cb:5c:cf:9f:a1:32:53:82:d6:e3:89:5f:f2:f3:b1:da:
         91:a8:d1:2f:d8:ee:3a:cd:b6:1a:11:fd:98:7f:ac:ba:64:b2:
         1e:19:5c:8f:26:04:01:93:d2:69:72:2c:1a:fb:44:ca:81:33:
         c5:53:7c:f4:ec:18:bf:ff:51:70:a0:c3:3a:2e:78:24:1b:78:
         4b:9c:1e:d6:9e:36:bf:05:8c:41:00:78:27:0f:8e:23:b7:57:
         f6:20:bf:53:c5:98:64:e7:c3:d6:f7:6e:56:e2:36:5c:89:25:
         38:d2:e5:1f:3f:18:63:e4:fe:76:38:31:17:46:5f:16:d9:67:
         bf:c8:a0:a9:2f:2a:82:87:84:c7:46:a6:61:b8:26:28:0a:3c:
         5b:d9:d1:b3:72:ad:d5:2c:61:1f:7f:12:8b:40:ad:36:83:af:
         20:1f:30:29:75:64:e0:7b:44:69:0d:bc:58:ea:94:1d:b6:21:
         04:2d:3b:60:76:a2:67:3c:4e:ff:cb:ba:41:e5:0f:d9:08:4d:
         eb:01:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:23:01 2024 by rpki-client on console-ams.rpki-client.org