Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File:                     FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier:          7YO1QKkeA7EbRh6JMeXu1bo3nXiv5UQtUqehuTcKZiY=
Subject key identifier:   05:BA:E8:08:CE:14:84:C1:4B:7D:78:2C:7A:DE:27:CB:6D:C0:B4:26
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer:       /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial:       018F325137E7333123B0B9C1CC2A38226E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 04:02:14 +0000
Manifest this update:     Wed 01 May 2024 04:02:14 +0000
Manifest next update:     Thu 02 May 2024 04:02:14 +0000
Files and hashes:         1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: HBwKuB3G0NT7iJu1HR0EShnR1pyIA01KG1C6hGMs56E=)
                          2: Z521YFhT6sNOu_GAtLJWdge8hNg.roa (hash: 762VN6guJ1PKQgwMWIdJhKZGQxdNoHlXeN5G76/0NP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 04:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:51:37:e7:33:31:23:b0:b9:c1:cc:2a:38:22:6e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
        Validity
            Not Before: May  1 04:02:14 2024 GMT
            Not After : May  2 04:02:14 2024 GMT
        Subject: CN=05bae808ce1484c14b7d782c7ade27cb6dc0b426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:17:a4:8c:92:13:95:5c:3b:52:ad:4c:36:
                    51:9e:e4:14:ef:ab:93:c5:ba:9b:99:34:69:71:a0:
                    1f:ed:40:70:b3:f5:5d:f8:f1:ea:ab:46:7a:25:a2:
                    42:e0:d5:ac:10:bb:18:94:4b:80:c5:6a:e5:db:c1:
                    94:75:f4:8a:22:68:9a:96:31:61:30:22:45:b0:dd:
                    5e:76:95:5e:b5:d5:6c:c2:0c:a6:22:5b:3b:61:86:
                    90:ef:77:31:b9:ce:06:1b:46:d6:08:75:a9:11:16:
                    b1:01:33:7d:b5:1c:fd:77:6c:7d:6f:24:f3:6f:65:
                    ee:32:4d:b4:fd:95:30:09:6c:79:44:1e:ef:76:43:
                    46:70:e4:4f:11:4c:86:1f:28:a1:d9:7d:01:f9:36:
                    4b:c2:ac:45:fd:1d:5a:91:ba:5f:35:80:99:d6:b6:
                    14:ae:d6:6d:ff:d6:d4:9b:12:58:8d:41:8c:3f:ee:
                    15:17:37:6d:60:90:c6:9b:ec:f5:b8:3a:ba:d0:3d:
                    1b:dc:f6:65:2f:8b:e6:01:e6:cf:b3:46:5f:89:7a:
                    32:5c:24:e2:fc:09:a0:87:c9:9d:17:ba:5a:ae:3a:
                    83:92:57:03:b6:77:41:d7:48:08:12:de:c8:dc:96:
                    80:45:25:98:ce:71:c7:63:5b:67:fa:f5:dc:01:97:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BA:E8:08:CE:14:84:C1:4B:7D:78:2C:7A:DE:27:CB:6D:C0:B4:26
            X509v3 Authority Key Identifier:
                keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1c:8a:97:a5:a4:6d:9e:53:fa:8c:67:79:f2:84:47:56:e4:
         1d:47:b1:e8:76:ab:75:4c:af:23:66:09:f4:c4:3d:50:33:eb:
         02:8a:d0:70:53:b9:b2:60:8e:b5:a4:9d:5e:38:06:1e:6d:ea:
         95:1b:2d:a9:d7:af:0a:5a:9d:1b:a8:1e:3f:86:2a:b0:e8:88:
         8a:73:dc:ed:6f:db:13:50:65:a6:c9:1f:a2:46:d4:eb:47:2b:
         2a:ef:73:74:d6:d7:6f:be:6a:02:50:44:31:67:dc:3e:7c:96:
         a0:d9:10:d1:c4:4f:5d:58:36:23:c4:ab:d0:cc:4b:f5:4d:12:
         4e:ea:d6:c0:44:bf:17:2b:5c:e0:fa:27:fb:e3:82:ba:d6:8e:
         c7:0f:01:44:7d:12:e6:3f:f7:41:2c:a7:e3:5a:92:ef:22:b5:
         98:93:f4:f6:29:da:00:f7:85:61:20:b1:ea:6e:c2:9c:8b:6d:
         44:57:61:07:6b:94:54:60:c9:b5:dd:33:b1:6f:0e:ed:a4:b8:
         2f:6b:33:81:cf:a4:e6:ec:9b:87:f1:75:fc:46:ba:46:2f:bc:
         56:5d:ec:53:9a:43:50:fb:55:b1:4d:fd:56:96:48:56:11:9f:
         a7:c8:c5:94:5b:c6:7c:b7:a5:10:a6:48:86:43:ce:c3:88:0e:
         b6:6f:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:46:12 2024 by rpki-client on console-fra.rpki-client.org