Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
File:                     FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft (raw, json)
Hash identifier:          j1Z8EXDWnZ0h89IqFwSPm5JnTQaZyELWnLBlKG1mglo=
Subject key identifier:   45:0E:73:A8:24:26:5F:B8:20:C3:C0:E0:79:13:91:5F:58:A0:58:F2
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Certificate issuer:       /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial:       018F35511DA4A6A1D2E41AAC957AF4B8AFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 18:00:59 +0000
Manifest this update:     Wed 01 May 2024 18:00:59 +0000
Manifest next update:     Thu 02 May 2024 18:00:59 +0000
Files and hashes:         1: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl (hash: Noe0+C+9KgEcCk9GYxOcNnsWUyxRdHwBFJud/p9jASw=)
                          2: kmZEuaMu8qSRPRVNeaqE9h0Ygb8.roa (hash: RC9nXpAESkiOpUAaFvO40Ngjc7dEYqbnWsuvTu9RjKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:51:1d:a4:a6:a1:d2:e4:1a:ac:95:7a:f4:b8:af:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
        Validity
            Not Before: May  1 18:00:59 2024 GMT
            Not After : May  2 18:00:59 2024 GMT
        Subject: CN=450e73a824265fb820c3c0e07913915f58a058f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:60:4d:d3:bd:97:f9:d7:e6:f6:82:dc:70:
                    fd:03:b0:04:79:bd:ad:49:01:5e:09:33:f5:c7:c0:
                    ab:d1:62:7d:ae:fb:ac:5f:59:c1:ef:52:f2:d5:bf:
                    2b:88:62:98:5b:cf:d1:ac:34:c0:3b:49:a3:cf:26:
                    ea:3c:60:a1:88:ff:4e:25:8a:f5:35:01:55:50:eb:
                    7d:23:a3:b3:4a:06:c4:45:2d:d9:b9:28:38:41:53:
                    54:db:6f:85:0a:2e:1b:3b:36:e6:ab:a1:5c:60:8d:
                    e7:14:4b:e6:0f:72:85:9b:5b:81:95:cb:c4:a1:32:
                    d7:03:88:75:7e:e9:4f:25:0c:31:d1:56:51:8b:ba:
                    19:54:e2:b9:c4:af:49:0f:f6:c4:a9:6f:be:dc:3e:
                    71:b1:52:3d:56:b6:8c:72:ab:b9:bb:1a:f2:de:59:
                    94:c8:b8:fe:e0:db:5d:44:d1:a5:16:cb:1a:2b:63:
                    e9:88:e9:f6:21:d2:74:af:51:b5:b6:2c:de:18:09:
                    ab:a7:b7:a5:96:b8:2b:ba:46:61:f0:94:dc:46:da:
                    b3:bf:50:92:45:80:d0:c1:4c:08:a8:42:43:8d:01:
                    ac:75:ee:77:a3:51:41:74:75:f1:3d:f2:03:bc:13:
                    8c:28:2d:35:4f:38:a1:cf:f3:f8:a1:d2:7b:7a:e0:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0E:73:A8:24:26:5F:B8:20:C3:C0:E0:79:13:91:5F:58:A0:58:F2
            X509v3 Authority Key Identifier:
                keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:f6:fe:c2:94:f9:17:18:5c:d2:9d:e3:20:ea:03:a0:7c:
         b9:e1:29:ae:13:8c:60:10:2d:7d:6a:06:d5:8b:0e:3b:ad:a1:
         5d:1e:79:7c:9c:ea:84:0c:74:7e:ac:90:31:2f:d7:ff:e8:5c:
         2a:ff:6b:26:02:80:e6:49:62:29:e0:ae:c8:8f:68:4a:14:14:
         62:ff:32:ca:82:76:ca:3b:76:b1:25:2d:11:8c:30:ec:08:be:
         aa:32:6a:75:a1:da:76:9d:76:0c:48:e9:79:44:01:a7:dc:b2:
         c5:01:12:e8:19:49:55:f0:27:31:14:29:ec:7a:c0:5f:4d:04:
         03:2a:7e:14:58:77:9e:15:d4:3e:d6:6a:89:8c:51:e6:61:ed:
         0c:ca:6f:15:be:00:e9:35:ce:b7:32:a5:86:1e:40:e6:a0:22:
         58:19:f0:20:de:ad:5e:f9:e8:8e:7d:a4:e0:4e:88:33:15:83:
         1c:36:35:bb:77:d8:31:d3:b3:8b:ae:fc:8c:c6:f1:01:44:c9:
         e4:01:ec:39:39:18:d9:2b:52:d4:13:bd:eb:5c:af:fb:fe:12:
         ba:de:31:07:28:a2:60:2b:f9:0a:18:8d:6b:9f:e2:63:30:01:
         0f:ae:7c:c0:60:83:ca:0f:d6:e5:46:89:c1:e6:fd:1a:8a:b4:
         df:b4:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:39:10 2024 by rpki-client on console-ams.rpki-client.org