Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File:                     Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier:          IcTIEZ4W7fpvcSOopiBvoACFBDPxfN2SFdwNTXgB+Os=
Subject key identifier:   0E:44:68:02:80:71:8F:FC:6D:7E:B3:AA:F1:64:EF:DC:8C:0F:79:D4
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer:       /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial:       018F3588614810412389BF8193C200CBFEBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number:          114E
Signing time:             Wed 01 May 2024 19:01:21 +0000
Manifest this update:     Wed 01 May 2024 19:01:21 +0000
Manifest next update:     Thu 02 May 2024 19:01:21 +0000
Files and hashes:         1: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: sFAFf7fYVEVPTUbl7Hxlabm/H044oxDTDHDQGPGKVLA=)
                          2: n9kxSBUuOt42G9LzGlnJ-H6MPOg.roa (hash: IyOWyd6ps+b5PdcyPxuyJXIkzhiYo9EeOA6Zk6X8pNA=)
                          3: w7rZhpzoBeAYBryG5G8Tptk5Wko.roa (hash: bsnmIZHrhVHNHQB+hcYwARfloBor+6c4ELrKsaC1TZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:88:61:48:10:41:23:89:bf:81:93:c2:00:cb:fe:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
        Validity
            Not Before: May  1 19:01:21 2024 GMT
            Not After : May  2 19:01:21 2024 GMT
        Subject: CN=0e44680280718ffc6d7eb3aaf164efdc8c0f79d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:e6:47:b3:e0:91:64:d7:d6:01:5f:08:88:
                    25:13:1e:ca:c6:3d:72:f7:f0:7c:99:f0:9e:d8:ad:
                    40:dd:46:9e:5b:2c:a6:d3:a3:b6:2c:8f:dd:1a:f5:
                    3b:e1:f7:9a:7c:12:18:9b:69:8e:d5:a2:97:c7:e1:
                    58:4f:a9:64:c4:2b:b6:8c:ef:3e:b4:3e:f8:09:66:
                    9f:c5:49:9a:9e:e6:cd:17:3f:18:d1:bd:7e:56:e7:
                    66:73:1a:33:8c:a9:01:4a:a1:f6:84:11:f1:5a:9d:
                    f2:fc:37:49:b2:19:e9:24:de:83:aa:19:4f:54:3b:
                    d8:12:6e:d9:45:d4:4c:0f:12:73:a1:41:1a:1f:5b:
                    08:ed:c6:dc:38:eb:a7:26:08:81:92:4d:dc:c3:66:
                    9e:ad:01:48:79:eb:f1:ff:7b:05:77:e6:97:43:c5:
                    7c:7d:df:eb:42:d9:07:cf:cd:ed:4a:42:ee:dc:e7:
                    5a:e8:e2:f1:69:0f:d1:bc:d2:0d:29:55:f0:f2:0e:
                    d5:ed:cd:89:4b:59:11:1a:68:df:27:21:ca:11:00:
                    8d:c0:e9:bd:ce:e2:52:fb:3d:ac:e6:b5:4e:12:82:
                    c2:92:6a:6e:74:fd:e4:d0:c0:43:8e:f1:de:ac:a5:
                    b1:7b:d4:e9:ba:4e:2c:24:5f:5a:50:2f:eb:29:64:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:44:68:02:80:71:8F:FC:6D:7E:B3:AA:F1:64:EF:DC:8C:0F:79:D4
            X509v3 Authority Key Identifier:
                keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fd:35:41:0f:46:7f:30:6a:02:44:2d:52:2e:8f:35:ef:09:
         47:52:88:06:e2:85:36:27:3e:98:31:86:1e:52:e5:77:66:46:
         a2:13:2d:37:3a:48:05:2c:53:e1:ad:35:01:e0:ef:cc:cc:48:
         51:80:38:e2:44:c6:05:69:d1:1c:b4:8e:96:7c:d0:6f:d6:99:
         2c:7d:3e:f9:37:73:32:68:2a:86:f1:30:d8:fb:83:3d:91:a1:
         12:f7:7a:ca:0c:e9:a8:e6:1f:e0:e3:6a:fd:6b:11:15:3e:65:
         f1:e6:07:d0:5a:71:7b:3d:7c:67:8d:54:13:6d:39:9f:fa:e4:
         bf:b4:9e:dd:58:31:61:64:88:42:f3:87:c0:e9:d4:74:94:e8:
         88:bc:49:3a:3d:d0:44:1d:fd:db:ea:0d:0f:4d:ef:96:c3:9a:
         56:7e:65:d1:36:d5:8e:d2:fb:5e:2f:12:ff:e9:c9:56:b0:6c:
         a5:5c:fb:40:a6:ef:7a:55:e5:46:75:27:d8:8d:74:f2:84:35:
         6d:71:49:d3:53:c7:bd:cb:d4:ee:a5:37:2f:ca:46:b5:85:58:
         a4:da:51:36:d8:1e:5c:0f:77:98:2d:d6:9a:44:27:80:c6:fc:
         85:3e:ab:de:de:39:ea:2a:7a:b1:f3:1c:2a:64:1d:37:a9:0f:
         b2:df:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:42:20 2024 by rpki-client on console-fra.rpki-client.org