Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File:                     FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier:          HqdT7sPqo+JqhonRxhuj/VQj3lWT0reJTAvbSONSeqc=
Subject key identifier:   FA:1A:C4:77:AA:25:83:50:DF:89:CE:A0:18:E8:33:79:14:A8:35:BB
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer:       /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial:       018F87B67D95C968EEC0851509A3A431C94B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number:          02FB
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: 6AdHtgojt3Gr3ZnNqGEOdpPvj3qb5ItVVYMhtDSOxPk=)
                          2: uCEzdENk6D5HI0Zv8ulR7xwTkn4.roa (hash: YJep8gfXcQaA2+ED3de1qhiSC4O8pzogz9/BdmR05+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7d:95:c9:68:ee:c0:85:15:09:a3:a4:31:c9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=fa1ac477aa258350df89cea018e8337914a835bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:af:cf:b4:92:b5:f2:88:ac:0b:56:11:6e:
                    15:3d:1e:b5:6e:6e:a1:ba:41:04:db:5f:3d:05:99:
                    65:17:84:5a:a6:2c:f0:5c:11:66:9a:9e:3a:46:ea:
                    9a:28:6a:d6:8f:c5:0b:8e:5a:cf:ea:e4:3f:71:49:
                    3b:25:14:b5:05:87:9b:8c:88:28:d9:50:5a:b4:ae:
                    74:a5:1a:42:dc:a8:78:13:0c:f0:96:2b:5d:ed:f7:
                    af:98:2f:54:37:63:ff:6d:bb:2a:8b:4e:9d:0c:2f:
                    b5:72:75:f9:d5:8e:dc:80:2d:2f:7a:60:db:2d:dc:
                    ff:76:d6:30:02:66:b4:7b:e9:8f:c4:1b:b6:21:bd:
                    50:57:d0:81:eb:cf:ec:0b:a2:23:3d:02:d2:2b:ba:
                    bc:06:0e:cf:e7:33:56:a1:dd:ff:84:cf:04:ba:2a:
                    45:1c:6f:82:af:60:4e:9e:40:70:cc:cd:4a:38:a6:
                    e9:11:1c:3c:b0:1b:2e:46:9e:84:79:10:50:a4:cd:
                    fe:14:57:6a:9f:93:cf:be:35:77:e6:00:40:69:5c:
                    83:ed:f6:d3:92:28:54:32:3e:47:e0:ae:90:b2:1b:
                    28:3d:9f:3d:98:32:f3:73:ef:cb:9e:4b:ae:4a:b0:
                    ee:e2:60:d0:eb:bd:24:d9:19:27:da:b4:4d:4f:18:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1A:C4:77:AA:25:83:50:DF:89:CE:A0:18:E8:33:79:14:A8:35:BB
            X509v3 Authority Key Identifier:
                keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:88:3d:21:63:e2:b7:a8:b7:a1:d1:44:df:47:8b:c0:52:1d:
         29:93:4d:89:27:7e:a2:b1:37:0c:1e:ca:8d:23:6d:ca:9e:1a:
         18:e6:d3:48:b1:e0:df:dd:f1:02:13:5b:37:03:90:c0:34:2f:
         25:cc:76:a6:96:3c:e7:ca:e8:de:99:b6:4a:17:fb:63:4b:41:
         ad:89:35:6c:a1:94:23:32:bf:20:41:8e:71:3d:71:bd:a0:63:
         bb:38:9a:58:3e:34:fa:4d:8e:92:1c:66:97:84:49:c7:81:c9:
         88:cb:40:18:1b:81:8d:09:b8:32:8d:a2:52:3d:e5:ef:46:05:
         54:42:4b:41:4e:3c:5c:d7:bd:be:f0:b7:71:a1:eb:a4:4f:1e:
         56:86:cd:01:44:0d:67:12:54:4d:ac:02:b1:b2:45:b8:47:9b:
         af:c0:20:bb:3d:da:45:19:cf:a5:53:b5:9b:fe:d4:f2:db:93:
         86:9f:dc:b9:d9:c1:86:a6:50:63:28:d9:8a:05:bc:03:b4:14:
         0a:a4:76:7d:40:e6:2b:bc:c5:d5:e8:16:73:07:c6:31:0b:09:
         4a:9b:d5:38:4b:b3:35:8a:ed:05:81:ac:83:f5:0e:ff:b6:01:
         17:07:58:74:2b:e6:1e:a0:79:dd:89:2a:fa:ae:93:7e:34:d9:
         a9:43:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:41:39 2024 by rpki-client on console-fra.rpki-client.org