Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File:                     FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier:          dLi1L9BDKyyz9C9K7B6SBLkhKcFT+C6MWceGjHImjCQ=
Subject key identifier:   E0:4F:4C:00:B7:93:88:E0:3E:72:07:EA:D3:95:27:1D:22:AE:8A:18
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer:       /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial:       018F4B6D42BCCCE252BD532A706B9C39C9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number:          0997
Signing time:             Mon 06 May 2024 01:03:22 +0000
Manifest this update:     Mon 06 May 2024 01:03:22 +0000
Manifest next update:     Tue 07 May 2024 01:03:22 +0000
Files and hashes:         1: 1lu4bP9YOkN3DpY4QkLRLRJAiMI.roa (hash: JMp07ngx3BrU1+qsZxthogAOPOV/RA81YA00DF+9Pg8=)
                          2: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: igfQv77eSoksuRtBTam3Z6BQCVHL2T38MPOrDj+0Tic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:42:bc:cc:e2:52:bd:53:2a:70:6b:9c:39:c9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
        Validity
            Not Before: May  6 01:03:22 2024 GMT
            Not After : May  7 01:03:22 2024 GMT
        Subject: CN=e04f4c00b79388e03e7207ead395271d22ae8a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:4d:f0:1e:e1:be:6b:f5:ae:55:93:38:72:
                    d8:98:62:63:d2:33:2b:d4:50:66:09:23:78:7f:07:
                    e6:33:1e:70:2a:00:7b:a1:fc:1a:0e:84:92:0a:3d:
                    fc:d3:2d:eb:9b:30:e1:8a:75:55:ac:81:94:a6:d6:
                    5c:e0:7c:43:0d:80:3a:9c:3e:8b:c9:73:1a:c4:9e:
                    1a:85:d0:71:f3:36:6c:46:ab:37:09:8e:b7:4c:05:
                    fa:7a:60:86:8d:19:c4:3b:31:06:05:70:b7:32:e1:
                    16:29:85:99:9f:9b:35:fc:5d:bd:83:49:9c:ae:b7:
                    f3:29:92:08:3e:1f:72:0b:ca:d3:fc:46:83:61:2a:
                    ee:46:16:ee:6b:1e:77:88:f2:0f:2a:1d:d6:31:34:
                    ec:cb:17:b2:ad:35:86:ed:21:8a:ae:b0:90:e9:b2:
                    13:bf:f2:82:83:15:aa:c9:bd:c1:a2:3a:8d:30:37:
                    c8:db:77:5b:1c:3e:c0:dc:2e:81:1f:a4:cd:04:e0:
                    71:77:4b:f2:34:17:ff:98:b9:00:84:47:4c:a7:f6:
                    c5:f7:77:b9:38:af:00:b7:83:c5:2f:f4:4d:cd:a0:
                    94:a5:f8:48:74:09:63:24:32:1d:f8:d0:1d:88:75:
                    ce:e7:4c:b6:53:55:43:60:ca:c0:30:4d:3d:15:4d:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4F:4C:00:B7:93:88:E0:3E:72:07:EA:D3:95:27:1D:22:AE:8A:18
            X509v3 Authority Key Identifier:
                keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:82:81:df:51:7b:57:fb:14:22:1b:1e:32:b0:4f:f8:69:
         7f:99:4f:1f:c6:ee:7b:ab:bd:a3:31:43:96:df:36:8b:67:ac:
         61:54:59:5b:73:bf:92:55:e7:1a:1b:e4:da:83:2a:4b:0e:db:
         d9:55:9a:e7:7f:27:da:3d:6e:12:e2:ee:d8:c8:7f:16:5c:ed:
         19:f3:cb:ac:7f:a8:f3:63:19:51:52:5f:b6:be:33:10:20:5c:
         56:03:e9:54:8b:8e:52:22:b6:f0:3f:e1:02:eb:a2:0e:fe:d7:
         47:58:1f:b4:18:26:6b:dc:60:f7:f1:15:4e:06:14:f3:e1:47:
         64:da:5d:17:58:d1:d2:a6:d0:bb:2d:cf:88:c4:7d:a7:c8:12:
         a3:fe:37:24:a7:34:ee:4f:7c:17:12:e2:3e:35:01:3f:cb:dd:
         d3:28:40:62:3e:46:c6:61:ae:61:f1:77:6d:68:9f:cb:23:62:
         88:6b:3d:9c:47:e2:bd:01:fd:0c:dc:64:39:5c:b8:10:13:fc:
         08:b2:30:58:c1:e4:c3:ae:9b:2f:a0:b5:4e:70:f4:4f:2b:7f:
         01:58:88:95:33:05:69:56:12:02:cb:96:4a:28:f1:dd:a7:7f:
         52:be:69:5a:af:6e:c3:8d:9f:25:6a:b9:6e:72:48:af:80:5b:
         14:9f:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:09:50 2024 by rpki-client on console-ams.rpki-client.org