Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File:                     FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier:          zraQB8CWiTFnmHQ1iOsjPsSqnx5J6fNQ+vGNuQnkevY=
Subject key identifier:   3B:16:9B:36:C4:04:7B:A7:04:F7:74:9B:53:89:60:3A:BB:09:75:7C
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer:       /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial:       01935688C1780364B577CCF5CE83AB1D47C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:23 +0000
Files and hashes:         1: 9g3BYjennP5wMxo6EQx2Nsju0Hs.roa (hash: +sUHfeWLv40+hk/T4pUzwyPhi3e2H4qJD+lT3TyCDRU=)
                          2: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: B9nOoz+EMUh4xlGCKrOJsOK9GGaTV3gV4HN9oTWdz6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c1:78:03:64:b5:77:cc:f5:ce:83:ab:1d:47:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
        Validity
            Not Before: Nov 23 01:00:23 2024 GMT
            Not After : Nov 24 01:00:23 2024 GMT
        Subject: CN=3b169b36c4047ba704f7749b5389603abb09757c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:79:f8:78:12:b2:eb:e6:ac:12:93:aa:f1:
                    5a:a1:f2:53:89:1d:3a:57:0e:b5:0b:87:99:79:82:
                    6a:d6:41:4d:28:7d:d0:74:45:79:9d:09:d9:cb:5b:
                    0f:6d:dc:52:8f:67:c1:ed:4c:e6:3d:40:a2:9a:77:
                    f1:4b:a7:6c:e4:83:a4:8c:02:b3:78:f3:7c:9e:9d:
                    8b:e0:a1:54:c5:af:b9:1e:53:53:5c:f8:53:8a:10:
                    28:4f:80:57:72:c0:41:62:2d:78:31:67:6a:ff:8f:
                    30:c4:69:36:7c:54:ee:91:61:2b:6d:d8:c6:9c:d3:
                    2d:56:ed:13:40:f3:ee:c9:e2:7c:ed:d9:d1:40:e9:
                    1c:91:27:ae:6a:31:32:ef:51:6e:9b:8b:03:b4:42:
                    20:72:a7:c7:17:ee:b5:93:78:42:b3:44:5e:08:19:
                    db:26:2a:e4:0e:5c:3d:94:cb:03:f9:05:71:27:77:
                    9a:c6:6a:8c:6d:86:ae:0e:cf:72:80:03:70:67:29:
                    5e:38:ae:83:b9:53:5a:25:7b:37:68:25:33:83:88:
                    50:69:80:3f:b2:65:72:b7:26:76:33:5e:78:2e:f3:
                    0a:9d:f3:88:1d:30:eb:3d:73:a4:f9:f5:88:8e:d9:
                    a8:62:a2:3b:07:81:54:7d:f8:cd:a0:06:64:a3:17:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:16:9B:36:C4:04:7B:A7:04:F7:74:9B:53:89:60:3A:BB:09:75:7C
            X509v3 Authority Key Identifier:
                keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a5:bf:1c:18:96:81:c6:e1:fe:b1:0c:02:c4:04:1f:bf:d2:
         09:93:d4:05:48:05:56:02:e1:36:52:b2:5b:34:0a:3e:72:65:
         37:10:1b:6d:95:85:27:74:7b:ef:be:64:fa:26:0f:31:5c:b0:
         cb:51:fe:63:6c:a9:b7:8c:06:01:d4:c4:89:1a:82:0d:09:97:
         43:5b:3f:66:fd:85:2b:79:c7:e9:48:31:56:da:9c:01:ab:b7:
         ae:e4:e1:be:bb:bc:16:ca:3f:1d:43:a6:47:5f:ad:89:ba:b7:
         54:22:fb:c4:a3:43:b7:a7:bf:3a:75:b7:4b:aa:77:d5:b0:a8:
         65:b0:79:2d:37:13:32:10:d2:32:51:b9:3c:37:0d:05:f4:36:
         57:4d:ee:c7:f1:31:2a:f0:ec:22:7d:30:7e:87:0b:38:bb:5e:
         26:42:f0:ce:14:fc:ff:24:be:1a:6a:3d:4f:89:3b:d6:d3:d3:
         b7:af:5a:0d:fa:99:c0:72:e1:2a:44:5a:29:45:bb:5f:7b:7a:
         c2:b1:df:c5:4a:64:f9:60:9e:68:73:9e:1d:f8:25:de:42:97:
         b3:3c:76:b8:45:86:7f:62:f6:2f:b7:46:b6:d6:c5:dd:c1:2a:
         17:4d:a7:f0:8d:eb:42:07:16:b6:c5:7a:b4:c6:07:3d:3e:13:
         4e:07:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:58 2024 by rpki-client on console-ams.rpki-client.org