Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File:                     FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier:          LaSRMSZtAG8+xE6y4T5JPuTfvzkzuL8R/x7MuY3cxvI=
Subject key identifier:   50:6E:A4:B8:F0:37:45:75:96:DE:C1:66:86:7E:82:8A:96:C2:59:CA
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer:       /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial:       01935162558B199782A83E4D238F151ECB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 01:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:19 +0000
Files and hashes:         1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: MKIfAQWS2J0H8rVlMLPJDfai8YFFWEi7SPxMjcJW870=)
                          2: UgPTvrIPmPb6GdeEYBVSbUk8Yoc.roa (hash: WjuIzaRakIN9EUDSoR0Pf+MXRGAb+2MgdGnIiFajZMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:55:8b:19:97:82:a8:3e:4d:23:8f:15:1e:cb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
        Validity
            Not Before: Nov 22 01:00:19 2024 GMT
            Not After : Nov 23 01:00:19 2024 GMT
        Subject: CN=506ea4b8f037457596dec166867e828a96c259ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:f6:b6:48:c2:a6:9c:5f:9b:f2:c5:33:d7:
                    4d:6b:a2:ac:88:7d:ae:81:5f:34:85:06:56:96:8c:
                    02:b3:1e:51:fd:14:c3:10:3c:55:23:41:1b:e1:3f:
                    99:51:01:b5:79:c6:19:44:ec:38:63:f2:d2:13:8e:
                    12:92:ab:c9:4e:53:17:a6:68:ba:2c:45:d6:e8:ab:
                    3a:97:ba:7e:8e:36:ae:bd:84:6f:5a:cd:05:4b:ec:
                    c9:7c:b7:97:48:31:77:aa:9f:c6:89:c8:31:9e:68:
                    b7:22:3a:20:4c:af:64:20:1f:2a:29:73:56:39:39:
                    b5:37:6e:6e:92:24:cd:6e:da:02:7b:1e:6c:21:9a:
                    9f:e8:d0:3c:a9:1f:41:79:1f:b3:8d:ba:ab:e0:eb:
                    ba:3d:37:63:a3:13:9a:91:ff:b4:68:75:1d:e8:8e:
                    43:6b:f3:d0:35:e2:87:48:1e:1e:3c:71:02:da:1d:
                    e1:45:88:cb:27:fc:3a:a4:08:4d:63:c3:8f:81:c1:
                    3b:cb:73:8f:a5:03:50:02:39:01:9e:ba:53:18:70:
                    b8:1b:01:6f:68:51:ea:e0:49:db:28:b1:a5:dd:ba:
                    f1:a9:f7:2d:38:60:35:5a:2a:c5:bb:c1:f4:6a:a0:
                    8f:c0:2a:55:7a:73:65:85:eb:ef:4e:59:a3:b6:be:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6E:A4:B8:F0:37:45:75:96:DE:C1:66:86:7E:82:8A:96:C2:59:CA
            X509v3 Authority Key Identifier:
                keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:1b:0d:2b:49:d6:8a:15:f5:68:c3:d2:2b:1c:72:2d:73:
         9f:58:20:70:25:9b:c6:2f:69:28:b0:86:b1:40:b1:65:73:d8:
         20:a5:e1:60:8f:c1:10:44:3c:ad:e0:4a:5d:ea:6a:4a:23:be:
         0a:9f:1f:d4:51:33:d7:75:1d:eb:aa:5e:48:5a:48:c6:3f:4a:
         fe:a8:ee:a9:60:fd:2c:75:ea:dc:23:fc:87:2b:22:0a:12:91:
         03:49:24:45:06:4b:86:8a:79:46:f1:3c:da:17:a7:ce:89:c1:
         49:9d:a6:f9:5c:fe:9f:18:b9:d1:76:d0:a3:cb:f9:b8:7b:89:
         e7:f3:be:36:3a:5d:af:89:21:12:d3:3a:23:b6:43:3a:3a:64:
         b2:78:94:f3:59:ea:db:5d:f0:c8:d8:9c:fd:12:2c:f6:d3:7f:
         9c:49:38:98:a8:6d:2c:e0:92:4c:69:6b:b1:1e:1c:64:8f:f9:
         54:ec:26:fe:0d:d2:23:07:14:8d:fb:26:e9:6e:fc:d8:c2:3a:
         30:1f:ad:a3:0d:b6:4e:24:e4:cf:79:20:a3:2b:45:0b:cb:b3:
         0c:a2:b9:87:21:03:64:96:25:aa:65:da:90:2a:9c:ee:9e:ab:
         d8:75:b6:21:1b:51:4d:d8:d7:1a:1b:81:88:09:79:ec:06:64:
         da:73:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:25 2024 by rpki-client on console-ams.rpki-client.org