Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File:                     FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier:          RNnlt/VgkuVBswVCMneLeEjW/MoBnLZwYs5HlbTZETw=
Subject key identifier:   F6:DA:23:CA:86:4E:11:16:A1:3A:8F:CC:3D:21:63:86:1A:1B:82:2E
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer:       /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial:       018F4D228B777981F8751A94F9B8A04E6E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number:          1030
Signing time:             Mon 06 May 2024 09:01:00 +0000
Manifest this update:     Mon 06 May 2024 09:01:00 +0000
Manifest next update:     Tue 07 May 2024 09:01:00 +0000
Files and hashes:         1: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: tWU/Yd66dMuN/bATZ0jKS+wFyI+fRPn6J2jCQnMB66U=)
                          2: HSWPN05QNNi-VvIaYjrqtKG-Q-I.roa (hash: 62rGHyvbX6AaXGqwvGxMUO4L5nagqwkac3glfq/ecck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:22:8b:77:79:81:f8:75:1a:94:f9:b8:a0:4e:6e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
        Validity
            Not Before: May  6 09:01:00 2024 GMT
            Not After : May  7 09:01:00 2024 GMT
        Subject: CN=f6da23ca864e1116a13a8fcc3d2163861a1b822e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:9d:87:4c:82:15:ab:91:3d:07:0b:01:37:
                    04:01:0e:ae:64:d6:cb:7a:f0:d2:b4:6b:61:44:02:
                    f5:a3:ff:bd:30:d2:72:a2:57:c7:30:d0:fc:2a:80:
                    bc:50:e2:5f:74:4b:88:a5:86:5e:d7:65:70:2a:8f:
                    16:93:99:22:a8:42:f0:1a:1e:f1:b3:f0:99:49:55:
                    95:05:99:51:4d:69:16:28:ef:af:85:77:d9:d1:10:
                    f4:a6:df:7e:bc:43:3e:1b:27:f3:c1:1c:7b:19:41:
                    7d:04:0e:65:6a:60:87:58:6f:75:2a:36:54:cc:ad:
                    ad:02:91:58:bf:f0:b8:3f:2b:35:2a:d1:c0:17:1a:
                    df:44:24:cf:b0:d1:e9:bf:3c:ac:65:f8:ac:11:59:
                    fc:b2:29:5f:f3:89:fe:7b:9a:f9:3c:a8:ef:15:95:
                    f3:3a:b2:f8:01:85:8b:58:90:10:e7:cf:40:f1:f1:
                    d4:cc:7e:39:75:85:d1:6d:43:87:87:78:d0:8f:58:
                    31:91:40:da:27:87:2c:9f:9b:d8:08:ee:58:7b:25:
                    b5:4c:77:d6:e1:7a:fc:45:eb:6b:41:38:b6:56:4f:
                    e8:2f:81:6e:82:ad:07:3c:14:41:66:41:82:ef:c4:
                    f6:d1:a7:89:12:45:bc:67:64:61:58:de:67:bc:15:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DA:23:CA:86:4E:11:16:A1:3A:8F:CC:3D:21:63:86:1A:1B:82:2E
            X509v3 Authority Key Identifier:
                keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:37:5a:4e:ac:76:d3:a2:2d:81:39:3c:87:f7:c5:8d:cf:ec:
         79:8b:41:bf:98:6b:0c:15:66:71:6b:04:bb:68:cf:c4:5a:42:
         a0:68:a5:84:a4:20:b6:2b:a2:5f:4d:ef:48:f2:84:f8:68:62:
         a6:63:51:7d:b5:28:1d:24:d3:27:62:2a:23:2c:51:e1:40:7d:
         6d:b5:42:40:a7:ad:b1:fe:cf:9d:6a:86:49:83:b3:5e:d4:4a:
         14:cf:6e:85:2c:9f:ea:67:21:51:9a:65:b8:07:b7:9b:35:42:
         ae:09:45:27:e9:c3:39:c0:ce:e5:56:35:0a:27:37:54:66:25:
         41:44:b2:fc:7e:16:d1:a2:36:af:59:d4:16:cd:51:51:ff:a8:
         1f:5b:51:20:fe:07:ce:42:0e:83:e5:39:15:e3:f1:07:68:6a:
         7d:1b:90:12:45:08:ab:87:76:f9:99:19:a8:b7:31:6b:b9:2f:
         a2:3f:c0:f8:04:de:8a:e0:1d:3c:00:c9:e0:92:4b:7f:6e:90:
         e0:9d:68:ef:ce:5b:4a:12:7f:af:9d:00:ab:09:55:81:cd:0f:
         6a:55:d2:91:15:dd:21:3c:f0:e9:39:37:a9:3d:24:54:de:39:
         5d:33:61:66:bf:3c:dd:96:28:42:02:45:9d:ae:e1:9f:40:94:
         b3:39:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:53:35 2024 by rpki-client on console-fra.rpki-client.org