Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File:                     FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier:          eP92eMEGOR2h31LhYbRVWYDMMJ/jKHrq8OrlJ8G9xCY=
Subject key identifier:   6A:20:33:0D:40:98:16:20:CB:97:D7:49:DA:AB:81:5B:EE:88:D5:F4
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer:       /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial:       019355087F7066DBD9A30CC3DF882C8E9B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number:          04F3
Signing time:             Fri 22 Nov 2024 18:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:40 +0000
Files and hashes:         1: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: ytaTsERnqV3qaf/1QIm6mAyzcmq4wfNGToSJDWt+WO4=)
                          2: uCEzdENk6D5HI0Zv8ulR7xwTkn4.roa (hash: YJep8gfXcQaA2+ED3de1qhiSC4O8pzogz9/BdmR05+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:7f:70:66:db:d9:a3:0c:c3:df:88:2c:8e:9b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
        Validity
            Not Before: Nov 22 18:00:40 2024 GMT
            Not After : Nov 23 18:00:40 2024 GMT
        Subject: CN=6a20330d40981620cb97d749daab815bee88d5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:b1:1c:f0:18:94:dc:1b:a6:23:82:2b:a8:
                    89:e9:c2:c0:0f:fa:11:f2:e2:e7:f4:1a:b7:27:54:
                    4c:06:2b:08:3e:7c:1f:d1:91:12:fb:07:6b:19:a6:
                    da:b3:cc:eb:24:32:19:5c:e2:d8:88:f8:a0:b6:d0:
                    80:18:c3:61:10:d9:43:14:69:0f:a5:2a:bc:10:88:
                    2e:7b:0e:39:e2:55:2b:06:dc:2c:96:10:b5:d9:35:
                    cd:57:4b:8f:8d:e7:b9:de:36:6c:34:45:ad:5c:1e:
                    5c:ca:9f:99:6f:ca:b3:1f:7b:57:03:16:27:c4:aa:
                    fa:80:d9:32:15:23:4c:5e:f3:b3:9d:54:77:68:ac:
                    92:82:b3:01:ef:db:10:7d:81:ab:c2:12:b8:d9:f7:
                    03:b9:c8:66:b8:87:93:48:ce:cb:0b:b2:3f:8d:8d:
                    8b:dd:54:07:d1:2f:16:e4:6d:73:80:35:f6:bc:d7:
                    9b:8c:85:11:dd:71:fd:f2:e8:b5:2e:87:ab:c4:2d:
                    c3:44:63:97:0c:d7:cf:59:b3:e2:5a:8b:ac:75:37:
                    0a:0f:a7:20:51:4f:4f:12:e4:9f:4f:99:1d:4f:be:
                    75:83:fa:49:61:fa:af:45:cd:a2:65:5e:ac:d5:29:
                    13:b5:b8:79:00:f5:74:bc:5e:7c:f7:7a:07:e2:80:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:33:0D:40:98:16:20:CB:97:D7:49:DA:AB:81:5B:EE:88:D5:F4
            X509v3 Authority Key Identifier:
                keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:a9:90:fe:b3:e8:33:e2:d8:3d:23:7d:6a:e4:f3:6b:9d:
         64:10:aa:ad:c4:88:27:b4:ea:66:37:64:1b:9d:08:24:91:20:
         4b:cc:1e:b5:5c:bf:aa:7d:ac:52:78:3b:ce:1b:b9:f8:76:0f:
         75:e5:96:b0:6f:bb:0d:cb:82:61:57:8a:43:23:09:74:1d:55:
         97:8d:d7:a2:68:9f:05:c8:44:c3:76:ee:56:7c:6a:e6:f9:df:
         68:88:d4:d3:2a:13:6f:1b:5b:be:a7:4b:af:7c:cf:fc:56:dd:
         b1:e2:c5:e5:d9:ad:5c:a7:c1:a1:10:00:24:45:96:7f:24:df:
         05:84:aa:07:a3:d0:d4:b3:df:e6:99:b8:c7:4f:e5:d3:80:e3:
         03:21:ae:3c:ca:d0:fa:4a:f8:08:28:b4:d3:a6:d5:43:62:f5:
         fe:f0:b5:18:95:3a:95:7c:30:fc:36:a5:87:8f:d6:5e:2c:1d:
         7a:a9:97:0f:32:6e:dd:94:e6:4c:0a:8b:0a:e9:d5:8e:9f:a9:
         18:ac:60:a9:18:a6:16:67:94:3c:e2:18:85:2c:41:28:bf:97:
         a1:b0:08:ca:52:a0:7a:75:5c:14:8c:97:a5:08:f1:f7:08:1a:
         9b:73:95:5a:b2:a3:51:18:16:cf:87:e7:54:5f:75:6e:ac:f2:
         40:1e:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:18 2024 by rpki-client on console-ams.rpki-client.org