Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.mft
File:                     FNAcrh3f1NQ357f-6l6kbjBAUJA.mft (raw, json)
Hash identifier:          +OgMvbi0cstggjghzneT3o5IOGn1CMl3BfktH0N5r1c=
Subject key identifier:   C1:2B:01:7E:5F:94:C1:FE:A4:D3:B5:6C:31:29:BF:2B:D3:D4:57:A0
Authority key identifier: 14:D0:1C:AE:1D:DF:D4:D4:37:E7:B7:FE:EA:5E:A4:6E:30:40:50:90
Certificate issuer:       /CN=14d01cae1ddfd4d437e7b7feea5ea46e30405090
Certificate serial:       018F4D5BEF39F09583B2FE283475E212FEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNAcrh3f1NQ357f-6l6kbjBAUJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.mft
Manifest number:          03B0
Signing time:             Mon 06 May 2024 10:03:41 +0000
Manifest this update:     Mon 06 May 2024 10:03:41 +0000
Manifest next update:     Tue 07 May 2024 10:03:41 +0000
Files and hashes:         1: 8_4ohfHRhTwytokN0xhWdexs43o.roa (hash: 1PDBmnpXm1joKxmp5d4BV+hXWDcBKMBdbJc190MMojc=)
                          2: FNAcrh3f1NQ357f-6l6kbjBAUJA.crl (hash: ZpJTR5w0vHTzOHaaxRpxwqVzdDlMZTjwPMaZp+DQCSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNAcrh3f1NQ357f-6l6kbjBAUJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5b:ef:39:f0:95:83:b2:fe:28:34:75:e2:12:fe:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d01cae1ddfd4d437e7b7feea5ea46e30405090
        Validity
            Not Before: May  6 10:03:41 2024 GMT
            Not After : May  7 10:03:41 2024 GMT
        Subject: CN=c12b017e5f94c1fea4d3b56c3129bf2bd3d457a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:5a:98:fb:e2:70:6f:80:62:7f:44:38:26:
                    05:6a:a8:fd:9a:12:f7:26:5c:c2:a1:83:3e:c1:6d:
                    4c:99:18:52:41:29:f7:5b:23:49:33:3f:ff:54:11:
                    71:e4:28:be:20:25:73:af:48:45:d2:d2:ff:e7:5c:
                    5a:4e:17:04:a1:45:80:a0:84:a7:51:4a:37:98:3e:
                    b5:1c:29:fb:b9:9e:31:b7:cb:38:09:32:06:4f:b3:
                    1a:a9:a2:c6:7b:13:01:22:4a:b3:7b:ef:7a:4f:cd:
                    d7:e8:a5:ee:79:8a:b9:79:20:cb:89:ec:75:06:34:
                    e9:aa:e9:a0:79:8b:ce:b0:a0:54:13:97:16:28:85:
                    73:36:ca:93:40:60:36:5e:8b:8e:44:ee:7b:e3:80:
                    62:1c:ef:9c:e9:4b:b8:00:be:d5:43:48:e1:cf:9f:
                    08:94:dc:9e:6a:aa:8b:cd:95:d9:48:6b:f8:50:d0:
                    d4:67:79:58:a0:39:24:99:fe:bd:35:4a:1b:af:7d:
                    af:7d:ff:22:37:c4:21:5f:d3:f3:a6:01:43:f5:05:
                    53:18:b7:bf:55:e9:d7:f7:92:d2:f0:5e:35:eb:70:
                    00:94:9f:df:bf:26:27:0d:69:34:0b:1c:4e:f1:6a:
                    aa:80:c9:33:39:ed:cd:a1:65:57:8f:70:52:7f:0f:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2B:01:7E:5F:94:C1:FE:A4:D3:B5:6C:31:29:BF:2B:D3:D4:57:A0
            X509v3 Authority Key Identifier:
                keyid:14:D0:1C:AE:1D:DF:D4:D4:37:E7:B7:FE:EA:5E:A4:6E:30:40:50:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNAcrh3f1NQ357f-6l6kbjBAUJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:1a:dd:1c:a7:b0:2a:59:e9:ca:b8:ba:f6:ec:9e:19:53:
         fc:d9:9a:e5:6d:fe:f4:f4:7c:e2:94:75:2d:ca:07:07:5e:2a:
         d6:f2:54:fe:6a:6a:7e:6d:a5:62:48:7f:e2:e9:2f:52:ae:9d:
         88:a8:7e:7d:57:66:af:e8:55:ee:92:1b:2a:b5:e7:25:79:07:
         1b:6a:59:83:69:9b:9a:63:b2:3f:37:fa:7d:b4:16:08:14:90:
         dd:ca:48:62:60:c4:c3:aa:67:39:67:f8:39:ef:84:69:fa:2a:
         b6:02:9a:8a:e8:a9:5d:7d:4b:a0:d5:26:93:2d:9f:8c:8a:e3:
         9a:48:e3:bd:1d:a4:ee:66:58:55:f1:1a:b9:a7:d2:a8:20:dc:
         39:f9:2e:dd:d5:22:64:e6:88:44:15:cd:77:82:5d:47:e3:85:
         da:75:0f:50:3b:10:6a:41:80:a1:39:6e:ab:d2:b8:99:b3:7e:
         32:2f:4c:b7:a0:f2:b5:d4:0d:e4:66:89:5c:67:d2:02:a9:75:
         3c:35:e0:c0:70:8a:28:89:17:5a:e0:21:2f:90:5e:86:ac:81:
         a1:24:9d:de:cb:ce:4b:20:17:4f:58:64:e1:19:4d:ea:4a:42:
         1b:f6:c0:3d:ce:5d:9f:7f:64:0d:25:c8:75:32:24:2e:2b:dc:
         3e:bf:da:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9NW+858JWDsv4oNHXiEv6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDAxY2FlMWRkZmQ0ZDQzN2U3YjdmZWVhNWVhNDZlMzA0
MDUwOTAwHhcNMjQwNTA2MTAwMzQxWhcNMjQwNTA3MTAwMzQxWjAzMTEwLwYDVQQD
EyhjMTJiMDE3ZTVmOTRjMWZlYTRkM2I1NmMzMTI5YmYyYmQzZDQ1N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiBamPvicG+AYn9EOCYFaqj9mhL3
JlzCoYM+wW1MmRhSQSn3WyNJMz//VBFx5Ci+ICVzr0hF0tL/51xaThcEoUWAoISn
UUo3mD61HCn7uZ4xt8s4CTIGT7MaqaLGexMBIkqze+96T83X6KXueYq5eSDLiex1
BjTpqumgeYvOsKBUE5cWKIVzNsqTQGA2XouORO5744BiHO+c6Uu4AL7VQ0jhz58I
lNyeaqqLzZXZSGv4UNDUZ3lYoDkkmf69NUobr32vff8iN8QhX9PzpgFD9QVTGLe/
VenX95LS8F4163AAlJ/fvyYnDWk0CxxO8WqqgMkzOe3NoWVXj3BSfw9QhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMErAX5flMH+pNO1bDEpvyvT1FegMB8GA1UdIwQY
MBaAFBTQHK4d39TUN+e3/upepG4wQFCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5BY3JoM2YxTlEzNTdmLTZsNmtiakJBVUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ZjY5ZGEtNGYyNi00N2RmLWE5YTkt
NmJlZTk3ZmZkOTY4LzEvRk5BY3JoM2YxTlEzNTdmLTZsNmtiakJBVUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81ZjY5ZGEtNGYyNi00N2RmLWE5YTktNmJlZTk3ZmZkOTY4
LzEvRk5BY3JoM2YxTlEzNTdmLTZsNmtiakJBVUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9Qa3Ryn
sCpZ6cq4uvbsnhlT/Nma5W3+9PR84pR1LcoHB14q1vJU/mpqfm2lYkh/4ukvUq6d
iKh+fVdmr+hV7pIbKrXnJXkHG2pZg2mbmmOyPzf6fbQWCBSQ3cpIYmDEw6pnOWf4
Oe+EafoqtgKaiuipXX1LoNUmky2fjIrjmkjjvR2k7mZYVfEauafSqCDcOfku3dUi
ZOaIRBXNd4JdR+OF2nUPUDsQakGAoTluq9K4mbN+Mi9Mt6DytdQN5GaJXGfSAql1
PDXgwHCKKIkXWuAhL5BehqyBoSSd3svOSyAXT1hk4RlN6kpCG/bAPc5dn39kDSXI
dTIkLivcPr/a+g==
-----END CERTIFICATE-----
Generated at Mon May 6 18:51:49 2024 by rpki-client on console-fra.rpki-client.org