Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File:                     FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier:          CngjHAVJXbBei92IZznfRGLYCufFy5Q6+8Gi2lnsJO4=
Subject key identifier:   41:A3:F2:EE:6A:20:79:3D:4D:B6:1F:5F:09:83:86:E0:29:DD:83:FA
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer:       /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial:       018F362D9D0D4B690EEFEFB8BA3490CF3F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number:          0604
Signing time:             Wed 01 May 2024 22:01:50 +0000
Manifest this update:     Wed 01 May 2024 22:01:50 +0000
Manifest next update:     Thu 02 May 2024 22:01:50 +0000
Files and hashes:         1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: 06UrJujOcUo4cjVvO89fu8u9VEeQG27G6TTjjtv9+uI=)
                          2: jxZ94GmkD7el5YHnW31gY0A-pIw.roa (hash: qB7+f/c/c60CXX5QVaRicVqEF8PkUxeHGeifTEn1nBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:9d:0d:4b:69:0e:ef:ef:b8:ba:34:90:cf:3f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
        Validity
            Not Before: May  1 22:01:50 2024 GMT
            Not After : May  2 22:01:50 2024 GMT
        Subject: CN=41a3f2ee6a20793d4db61f5f098386e029dd83fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:bf:53:1a:df:de:db:73:1c:f2:ba:98:87:
                    a6:0e:db:0f:94:3d:8c:df:2f:f3:e3:70:70:a2:8d:
                    dc:da:7b:79:8e:8d:74:6a:86:ce:5c:2b:bc:3b:da:
                    c8:e4:93:55:d3:6b:6c:08:a3:64:f9:95:d8:21:e2:
                    4d:c2:9b:b0:ce:5a:bd:fb:fb:8e:7d:77:34:2a:e4:
                    8e:50:c3:0a:b6:a7:04:4d:1a:50:55:49:00:34:9f:
                    2c:7b:6f:37:f6:46:76:12:ec:0f:7a:e1:9a:bb:94:
                    0b:77:5e:eb:2e:98:33:37:8e:6a:47:24:39:b2:1e:
                    8e:76:4c:de:18:5e:b1:fb:16:ff:2c:a8:23:3a:bf:
                    f1:4b:d4:44:d9:82:1e:a4:f9:2f:ed:0f:01:b9:91:
                    d1:1d:ab:a3:e0:c4:6b:90:f4:94:7f:7c:a9:22:68:
                    55:9a:ca:b3:b8:de:1b:ca:be:2b:71:dd:89:11:5f:
                    e8:55:73:a2:1b:dd:be:17:16:6e:11:30:5c:c3:0c:
                    d7:58:d2:3c:9b:4b:ab:41:ff:47:a8:cb:5b:2a:77:
                    23:a9:d7:ed:86:f9:77:90:61:76:68:68:6a:02:82:
                    76:63:42:03:80:fd:90:85:0c:41:ed:a1:cb:a1:34:
                    9c:09:7a:a2:66:a8:3d:20:78:dc:98:6e:73:4d:36:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:F2:EE:6A:20:79:3D:4D:B6:1F:5F:09:83:86:E0:29:DD:83:FA
            X509v3 Authority Key Identifier:
                keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b9:29:e9:bd:dd:60:23:9b:58:23:da:8b:bc:58:bb:7d:6d:
         3c:dd:53:1e:4d:3e:a7:ff:9b:50:35:22:21:df:e9:e0:af:28:
         de:0b:f9:8b:eb:90:63:fb:74:af:8c:72:8b:22:19:26:0c:ec:
         e0:79:b6:51:31:2a:3d:27:07:df:6d:79:58:23:0b:72:e8:ad:
         07:bf:8a:ac:af:44:ee:39:84:82:c0:c8:19:d7:e1:cc:b5:89:
         4f:51:04:0d:4f:b0:ee:e5:8a:77:4a:b7:0e:45:7f:5d:3f:9e:
         78:91:d7:6f:4d:14:b3:70:32:58:50:3c:f7:02:40:a7:d6:a0:
         65:4c:ed:fd:e6:18:3c:88:a2:52:81:8c:cf:65:26:c7:1c:f5:
         b0:48:8e:6c:ac:d0:60:dc:7f:ba:0f:90:f9:d2:ac:ce:31:a6:
         26:ab:6e:1e:1d:37:ee:ba:a4:7a:54:c4:c5:77:f6:c3:8b:67:
         38:eb:5f:06:32:43:19:25:41:8b:a8:ea:e4:21:71:0b:b5:81:
         c8:c1:f7:e8:39:5b:fb:e5:da:2a:bf:26:90:a6:85:c1:75:a5:
         31:35:43:5c:7b:eb:5c:4c:d4:88:f4:68:40:1c:d8:95:3e:55:
         6f:25:7a:f1:64:4b:4c:11:72:b1:1b:0f:fa:1e:b6:ac:42:fc:
         da:2b:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:57:41 2024 by rpki-client on console-ams.rpki-client.org