Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          Pzu4F0RVRIM/dl+GNZnVqNo0pPTZOriQyjf0L2elbys=
Subject key identifier:   70:95:B1:07:88:B2:AE:08:ED:A6:D7:45:79:FB:5B:84:EF:3C:35:28
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       0193516239C83C54D263101530D0CF3F59B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          12CE
Signing time:             Fri 22 Nov 2024 01:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:11 +0000
Files and hashes:         1: 1-a9HCgtC8rwnGSQdSDzzUJ1SExk.roa (hash: VwHUlV0ZYJEWGnTj+5+h7kuAZnCdbJ8z9ls/DVYFoQ0=)
                          2: C_qSVLAdYkaTr9kXGmX-fAlxK_4.roa (hash: eIzYKGauYmrEQqxga1KehT2oRyMa6u7QXzxA8qufbhY=)
                          3: FF0BAb52t_eershlbZUR4juZHx0.roa (hash: QnoU5q6rWXbwsWIlRq+eKrrg8wZKEVngym0JAYxUVno=)
                          4: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: raCX28K8EHUIrOBKHQv5qBUjN9UownuwxG73oiNAouQ=)
                          5: N_dQkqVxBbicfLoPi5SqpyikUNU.roa (hash: XrW4KjhQW6JQfh4KdCkckoCjWvO0MhK2gV4J60DIw5s=)
                          6: OarbDUDhKItL63OO4A2RMjB4ius.roa (hash: lI+xRv2gMphdwp/HOh7yCYGTes1IjaaTU+L6uZAbmdE=)
                          7: stvqQUDIWwy8gwn-VASnX8Au3ys.roa (hash: iuFvtKc+dZVr7UwZE4PS+Cn3ywUFoD20mo3ZtrjoK+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:39:c8:3c:54:d2:63:10:15:30:d0:cf:3f:59:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Nov 22 01:00:11 2024 GMT
            Not After : Nov 23 01:00:11 2024 GMT
        Subject: CN=7095b10788b2ae08eda6d74579fb5b84ef3c3528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:4f:4b:33:3b:a3:bb:61:55:b7:d5:fe:ea:
                    0a:58:ab:89:18:d1:74:2d:22:89:60:da:64:8a:29:
                    2d:b3:57:90:dd:e0:8d:fc:1b:54:62:09:36:41:66:
                    48:12:97:42:45:18:a3:06:05:81:8c:d0:3b:ce:66:
                    a8:60:27:98:50:27:28:35:25:dc:00:6f:9b:09:dc:
                    da:86:27:b7:b2:c9:30:6c:43:ee:43:f5:7d:4f:f7:
                    23:7e:69:0d:0d:da:0e:1e:f3:db:34:63:77:50:3a:
                    d2:7b:1f:39:f3:22:3e:b8:4b:c7:cb:f3:e4:93:f7:
                    0a:79:63:db:01:3f:07:be:23:e4:78:e9:b5:93:5a:
                    d5:f8:e0:97:af:72:4c:2b:d3:25:7d:aa:26:ed:24:
                    8e:fd:a5:0c:e7:cc:f4:c0:88:19:dd:d2:93:d1:b4:
                    fc:89:2d:99:28:43:2c:b2:e0:ae:f0:40:8f:f6:82:
                    5e:4e:5c:b2:82:c9:8c:45:02:75:2e:de:6e:da:a7:
                    b9:f4:ff:49:09:c8:df:01:0d:b5:57:eb:59:6c:5b:
                    d5:f8:86:29:fa:e7:60:81:e8:80:54:c6:4e:c3:ca:
                    3e:6d:53:99:f6:f4:9a:bd:c3:ce:80:a6:ef:7a:52:
                    eb:fc:37:ea:97:12:ce:ec:dc:ba:f0:28:bf:aa:2a:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:95:B1:07:88:B2:AE:08:ED:A6:D7:45:79:FB:5B:84:EF:3C:35:28
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:04:7e:68:d2:f0:48:61:98:78:91:35:99:f4:b4:7b:4d:93:
         eb:08:e0:a6:6b:08:f8:d1:69:e8:95:83:40:95:c1:18:4f:8a:
         cb:f6:f5:e5:03:d1:0e:1f:5b:21:b9:e1:4b:24:f8:86:ec:c7:
         bb:8f:14:21:11:b7:e1:be:da:82:a7:25:5e:24:ca:28:73:b7:
         fc:c8:b8:81:ef:12:81:c5:f2:1f:68:18:99:d4:fa:51:1b:a9:
         96:2d:27:3c:11:55:17:19:38:8d:f1:31:50:81:90:2b:70:8e:
         4e:92:bc:cc:e2:0a:0d:e6:8b:c3:8d:9a:d3:6f:51:47:91:88:
         21:66:a0:f9:90:0d:0a:e3:02:78:be:6d:60:5e:59:e2:18:0f:
         3b:37:aa:04:e3:70:92:79:54:26:b9:cc:bd:d0:fc:89:e2:ea:
         44:4a:a3:f0:07:c4:89:60:99:fe:ec:07:be:53:d1:3c:9a:51:
         fc:21:c9:20:03:6c:1d:a5:3c:a7:e0:3d:27:7d:ec:2a:0b:18:
         93:43:16:8d:a1:b2:cd:b1:d8:5d:12:12:5d:7f:f1:9e:78:2f:
         28:dc:a7:4f:ac:ec:83:14:6c:f9:3d:78:fa:72:36:42:df:77:
         ec:0f:3a:fd:e0:c0:75:f5:03:7f:9d:84:f8:c4:98:fd:22:7f:
         94:56:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:21 2024 by rpki-client on console-fra.rpki-client.org