Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File:                     _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier:          XQi8FERN0dyMqLZC/2wwUtVT3Wd/UOENvchuAg2p8Jk=
Subject key identifier:   FC:C1:96:A4:72:59:6C:1D:D2:8E:54:B4:55:C8:87:4A:B2:CD:96:25
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer:       /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial:       018F885AF4DC559F4CB4E6291C69CB4F6ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number:          0B32
Signing time:             Fri 17 May 2024 21:00:13 +0000
Manifest this update:     Fri 17 May 2024 21:00:13 +0000
Manifest next update:     Sat 18 May 2024 21:00:13 +0000
Files and hashes:         1: QXLmXdZeGQmGPOU8TMviUj71jB0.roa (hash: j78HDh8S09BtqEzO3KazOeibIuLnv65mqehuj4BWC9M=)
                          2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: XTMlgGX/3r7MPPUGdxY0ROA2IgFdysF9Wz/c5Ikljdg=)
                          3: sV2hubeATJEjxo_DGRlJdCeacvQ.roa (hash: InjYJNKnUMDnFLgzDGFfOOclgOX7yz7nNF2QElCO2DI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f4:dc:55:9f:4c:b4:e6:29:1c:69:cb:4f:6e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
        Validity
            Not Before: May 17 21:00:13 2024 GMT
            Not After : May 18 21:00:13 2024 GMT
        Subject: CN=fcc196a472596c1dd28e54b455c8874ab2cd9625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:be:2b:b3:5b:ba:70:30:d3:98:e7:8f:6e:
                    63:c7:b2:44:41:32:4c:2b:e1:bc:b3:51:6e:ae:48:
                    93:59:4c:12:e4:d3:67:75:a5:fc:8d:31:70:b6:51:
                    8c:0b:1b:bc:85:16:01:e9:5d:9b:bc:93:fb:d3:0e:
                    b0:27:74:73:6e:7b:7e:4c:b6:f9:a0:ee:65:32:a8:
                    01:ed:05:93:e7:9e:f0:5d:da:8d:e5:a3:37:57:89:
                    18:6b:ee:ee:90:39:1e:b5:e0:6d:bf:9b:3e:a5:4c:
                    3a:3d:ef:db:87:af:1f:93:1e:90:4a:4e:17:d1:ae:
                    48:c8:7c:76:31:30:0e:f0:65:11:d3:55:14:e1:0b:
                    fd:32:72:d7:3f:34:00:30:66:d4:88:15:27:97:61:
                    13:b4:49:9c:d7:bd:02:f7:fc:93:bd:07:71:99:bf:
                    8e:6c:d8:ec:20:6a:86:0b:58:00:91:60:a1:3f:e5:
                    d9:50:b0:3f:4c:17:6d:55:b2:99:2a:0a:f7:b4:92:
                    9c:9e:31:aa:89:12:6f:f7:d9:c3:da:e7:28:62:1e:
                    31:12:f2:7b:cf:0d:25:8f:97:d9:67:86:3c:aa:a6:
                    8b:55:ca:41:8b:dc:d6:2a:9e:13:1e:1c:64:ab:3a:
                    2b:8b:06:23:a9:62:92:7a:03:17:61:93:56:e6:f7:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C1:96:A4:72:59:6C:1D:D2:8E:54:B4:55:C8:87:4A:B2:CD:96:25
            X509v3 Authority Key Identifier:
                keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ed:a1:1b:8b:91:d5:da:da:cd:94:d8:6f:dd:a3:cb:1d:11:
         c8:d1:47:c2:0f:b4:80:dd:30:c1:4a:bb:2e:67:ca:ab:84:65:
         92:67:00:83:f7:f6:cd:88:9b:1f:46:4d:38:03:73:d2:11:25:
         3b:38:50:ad:cd:2c:ba:f8:e3:bc:b2:a6:45:78:78:ef:d2:cc:
         fb:f4:7c:b9:c2:4c:0a:86:c4:0a:1a:04:d8:f6:37:24:cb:99:
         cf:be:93:fd:fb:ad:ae:67:2e:bc:6b:2f:bd:95:88:7b:0f:6c:
         df:fd:ab:68:e4:eb:39:6b:fd:15:03:71:40:af:03:ce:aa:ec:
         42:58:3c:81:75:4f:9a:39:9d:a5:76:c0:1c:68:e4:cd:41:51:
         82:5c:e6:c0:ce:f0:e2:e1:99:a9:9c:d4:6a:89:83:e8:25:9d:
         2a:de:cf:f0:1f:94:7a:49:e2:ca:7a:74:a5:30:d4:04:27:51:
         01:dc:50:d1:51:78:83:ef:19:84:24:6d:d3:94:0f:0a:ca:9d:
         cc:5b:44:ad:4e:80:7d:3e:a9:da:bd:24:24:76:0f:c3:d6:ef:
         71:59:a1:4b:a9:9d:4f:6b:10:00:30:a9:a3:46:fe:73:4a:47:
         17:7a:f7:71:89:d6:34:d0:af:41:95:e4:0b:47:d1:f7:6c:d1:
         d9:bd:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:38 2024 by rpki-client on console-fra.rpki-client.org