Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File:                     FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier:          0HLHspYJZk+k3nzFtMUwcnIVij7FxZrYr8YbDtNOBJw=
Subject key identifier:   2A:DB:35:A7:35:3B:7F:E2:5F:A3:A3:62:8C:56:0A:AB:58:22:C9:1B
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer:       /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial:       018F3C9D57270F05D6676A3C2F7A184A142B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number:          10E1
Signing time:             Fri 03 May 2024 04:01:35 +0000
Manifest this update:     Fri 03 May 2024 04:01:35 +0000
Manifest next update:     Sat 04 May 2024 04:01:35 +0000
Files and hashes:         1: 4HFTtP0e7E8r28tOGbp6vkNsnm4.roa (hash: 1jYRuu3ag2qh5tF4jIXjq574fA6AuM78+YA0A6uTX9I=)
                          2: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: JVkiPthjUyaOW05CDmGi1agS9akOMzMYV0bu9XiZ6tQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:57:27:0f:05:d6:67:6a:3c:2f:7a:18:4a:14:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
        Validity
            Not Before: May  3 04:01:35 2024 GMT
            Not After : May  4 04:01:35 2024 GMT
        Subject: CN=2adb35a7353b7fe25fa3a3628c560aab5822c91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:d1:cd:d6:72:e6:e3:8d:32:f4:66:53:71:
                    5f:73:b7:a3:51:a9:69:f7:5b:02:64:aa:7b:d6:61:
                    01:ae:ee:5d:2c:67:31:5f:4a:44:62:31:dd:85:5b:
                    86:99:01:f6:85:be:db:f3:71:52:84:96:c4:6c:da:
                    87:32:06:8e:35:7b:d1:72:83:83:45:1c:01:1d:6b:
                    0e:fa:af:d4:48:31:98:ca:e1:4f:6a:34:0d:b1:48:
                    b0:1c:9c:b8:93:d8:8f:ff:27:75:08:b4:03:7c:7d:
                    f5:59:09:35:0b:df:aa:d9:89:47:45:23:89:fd:cd:
                    bb:4f:49:6d:ae:55:99:63:c8:a5:5d:56:2d:95:8a:
                    29:6c:3e:6b:59:1c:43:9e:00:88:e1:ff:34:4c:78:
                    5f:58:3d:25:7b:28:01:7e:68:8a:e8:8f:77:18:a1:
                    93:7f:3f:36:01:21:ba:12:03:43:a7:b4:8a:ef:df:
                    a9:dd:a2:a2:a3:55:38:89:a6:f2:0d:45:f3:2a:aa:
                    25:df:c2:ee:6c:30:f4:9d:54:43:0b:83:b1:ed:3a:
                    d5:d1:de:5c:76:61:58:9d:db:33:65:1c:0f:70:b1:
                    04:3b:8c:eb:b9:05:3a:63:b1:80:35:0e:93:e1:ac:
                    df:f7:e4:41:5a:41:c2:ca:11:72:ba:3a:63:f9:21:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DB:35:A7:35:3B:7F:E2:5F:A3:A3:62:8C:56:0A:AB:58:22:C9:1B
            X509v3 Authority Key Identifier:
                keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:00:32:96:4a:7a:1f:79:b9:93:43:78:c3:22:88:0b:6b:6a:
         15:09:75:81:91:ce:e6:c0:39:77:8c:30:7d:b5:5f:12:b3:82:
         b4:53:ad:79:15:cd:44:f2:8e:f3:76:17:4a:dd:3e:7f:a9:00:
         02:33:50:f3:39:aa:20:85:17:41:44:a2:71:9e:62:43:28:3e:
         4b:d9:e4:6c:b8:86:67:f5:8f:a1:07:61:11:c0:33:84:bf:7c:
         40:2c:f7:6e:3b:7e:d3:01:c5:1d:e3:49:59:4f:ea:b2:e8:2a:
         77:63:ec:24:20:84:2c:b3:36:4e:9b:e1:bb:20:b5:bd:7f:a5:
         83:06:fb:c0:a1:d5:44:9c:1a:58:d0:f6:87:cb:f9:ed:ec:76:
         51:b2:34:8a:0c:53:3d:03:53:4c:6f:9e:b6:46:e6:d0:9a:6a:
         89:62:f0:1a:a8:6c:41:68:2b:4f:5c:eb:10:8a:5d:ce:58:d2:
         7e:4c:96:1b:9e:b0:85:a0:19:d4:fc:46:fc:89:bc:fa:9c:d5:
         e9:f5:83:20:32:10:2a:ac:3c:33:12:1a:03:10:78:b9:8c:87:
         46:95:f8:8e:bd:bb:36:e6:03:90:63:3c:37:53:89:64:58:58:
         f2:a9:11:4b:81:65:36:ce:19:dd:bc:57:81:2a:fe:e4:5d:f7:
         19:df:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:39:17 2024 by rpki-client on console-ams.rpki-client.org