Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File:                     FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier:          yBzPucIw4WQg0He0gEnkftYuQQDWEG3WbK9w2NMTeaw=
Subject key identifier:   FE:95:35:E0:F6:3C:60:C4:8A:A8:E9:43:CA:6E:B1:7E:5F:FE:55:3C
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer:       /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial:       018F5392D4E0D44D61E1148AF5FD2D9D8C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number:          115C
Signing time:             Tue 07 May 2024 15:01:22 +0000
Manifest this update:     Tue 07 May 2024 15:01:22 +0000
Manifest next update:     Wed 08 May 2024 15:01:22 +0000
Files and hashes:         1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: fUXKNnPp1pQyOrlPI79IdvkeAE+TsJK3not/wbJRK0I=)
                          2: pacwnEUiXxxMgx61K-EdNhkxbh8.roa (hash: L70ktTTgR54aqppBgG694bsX1DCl4NJk2GKoRQMaqQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:92:d4:e0:d4:4d:61:e1:14:8a:f5:fd:2d:9d:8c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
        Validity
            Not Before: May  7 15:01:22 2024 GMT
            Not After : May  8 15:01:22 2024 GMT
        Subject: CN=fe9535e0f63c60c48aa8e943ca6eb17e5ffe553c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:e2:0f:64:36:e8:aa:72:97:f5:fd:3f:16:
                    ba:06:53:a4:f1:41:4c:af:d2:da:26:f4:33:4c:12:
                    bb:d6:0d:c0:69:3d:a8:c3:e4:51:76:24:2f:04:d7:
                    1f:40:ee:a3:e3:c6:a8:dd:1f:5c:c1:c5:0f:6e:97:
                    5c:e2:ed:b9:6c:15:56:69:f2:e1:b6:06:a7:00:99:
                    74:77:07:e8:83:84:3d:06:4c:e5:ca:b1:75:18:14:
                    b4:8e:3e:fb:d9:76:f8:fe:e9:1e:63:9f:13:1c:a1:
                    20:85:83:08:de:dc:ad:7a:c3:9d:63:e1:83:79:67:
                    54:12:19:05:2b:8c:24:5f:1e:f5:9e:19:c4:62:69:
                    35:20:fa:ee:de:2c:ff:35:e9:f2:3c:19:2a:08:ee:
                    99:e5:be:38:55:3f:21:b9:f6:0e:62:1e:c3:82:ee:
                    1b:10:80:ab:3f:6a:c5:a7:f2:ea:af:f3:4f:07:aa:
                    b2:65:3d:fb:a9:81:c9:f8:be:a0:75:ce:54:7c:79:
                    dc:ce:4f:e7:7c:22:24:cc:81:0b:6d:83:6c:c6:18:
                    75:bb:ee:d4:90:60:73:19:77:5e:88:61:82:2e:95:
                    c6:11:9f:6d:c7:95:84:3d:54:f3:60:65:5b:e1:4e:
                    99:93:2d:eb:0b:6d:16:87:88:d0:30:8b:2e:46:be:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:95:35:E0:F6:3C:60:C4:8A:A8:E9:43:CA:6E:B1:7E:5F:FE:55:3C
            X509v3 Authority Key Identifier:
                keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:5e:36:ad:91:39:5e:b4:44:c3:74:54:08:76:3c:8b:19:
         f3:f0:46:11:a7:52:7f:ec:c7:10:b9:fa:58:24:af:50:f6:00:
         d8:75:08:46:dc:cc:ad:9f:8b:1e:9b:d2:45:e5:ed:a5:94:12:
         40:77:3b:0b:74:43:7a:e6:b4:fe:72:47:16:07:2f:78:6c:7d:
         f5:92:eb:97:8a:21:dc:1b:86:0f:08:48:72:05:35:f6:79:65:
         48:ce:cb:cd:08:70:ab:87:34:07:d3:80:97:f5:bd:4d:c4:ae:
         9e:b9:5c:bf:26:49:3f:64:37:71:d3:73:22:94:bb:7f:d9:c1:
         7b:31:76:64:5a:51:cc:e8:43:9b:fb:70:1c:09:73:14:f0:79:
         8c:f4:ed:ea:4b:66:04:6a:eb:08:3c:fe:af:09:86:8b:a7:76:
         54:83:64:48:54:2a:9c:71:b3:25:55:94:25:a1:e7:44:3f:7f:
         65:82:2a:a9:16:15:8b:f2:3c:20:95:db:d2:ef:2d:99:5d:e8:
         d0:65:71:f8:b2:b9:c1:62:8d:b5:fa:a7:95:2f:5f:89:82:6e:
         83:5b:2d:4a:4a:8e:67:06:aa:86:20:62:5d:bb:0c:50:97:4f:
         04:ae:47:aa:ba:e3:cc:31:03:04:dc:a0:ca:dc:31:3b:cf:ad:
         3c:38:24:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TktTg1E1h4RSK9f0tnYxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NDM1YzdmZGM0ODI4OWVjNTU5ZjAxZWE1MWRhYzE3MjNm
MDkxZWQwHhcNMjQwNTA3MTUwMTIyWhcNMjQwNTA4MTUwMTIyWjAzMTEwLwYDVQQD
EyhmZTk1MzVlMGY2M2M2MGM0OGFhOGU5NDNjYTZlYjE3ZTVmZmU1NTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgLiD2Q26Kpyl/X9Pxa6BlOk8UFM
r9LaJvQzTBK71g3AaT2ow+RRdiQvBNcfQO6j48ao3R9cwcUPbpdc4u25bBVWafLh
tganAJl0dwfog4Q9BkzlyrF1GBS0jj772Xb4/ukeY58THKEghYMI3tytesOdY+GD
eWdUEhkFK4wkXx71nhnEYmk1IPru3iz/NenyPBkqCO6Z5b44VT8hufYOYh7Dgu4b
EICrP2rFp/Lqr/NPB6qyZT37qYHJ+L6gdc5UfHnczk/nfCIkzIELbYNsxhh1u+7U
kGBzGXdeiGGCLpXGEZ9tx5WEPVTzYGVb4U6Zky3rC20Wh4jQMIsuRr4fKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6VNeD2PGDEiqjpQ8pusX5f/lU8MB8GA1UdIwQY
MBaAFBRDXH/cSCiexVnwHqUdrBcj8JHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAt
NzNjMjc0MGVhOGJmLzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAtNzNjMjc0MGVhOGJm
LzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9NeNq2R
OV60RMN0VAh2PIsZ8/BGEadSf+zHELn6WCSvUPYA2HUIRtzMrZ+LHpvSReXtpZQS
QHc7C3RDeua0/nJHFgcveGx99ZLrl4oh3BuGDwhIcgU19nllSM7LzQhwq4c0B9OA
l/W9TcSunrlcvyZJP2Q3cdNzIpS7f9nBezF2ZFpRzOhDm/twHAlzFPB5jPTt6ktm
BGrrCDz+rwmGi6d2VINkSFQqnHGzJVWUJaHnRD9/ZYIqqRYVi/I8IJXb0u8tmV3o
0GVx+LK5wWKNtfqnlS9fiYJug1stSkqOZwaqhiBiXbsMUJdPBK5HqrrjzDEDBNyg
ytwxO8+tPDgkvA==
-----END CERTIFICATE-----
Generated at Tue May 7 19:33:15 2024 by rpki-client on console-fra.rpki-client.org