Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          galYlZLvO1+qlAvKcviE4JSeuL7d60vTHtWuLxKG0a0=
Subject key identifier:   B6:74:A4:7A:79:67:76:2F:68:A6:BB:4A:A9:74:06:C8:B5:25:A0:5F
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       018F877F441B184D0BD5A06975EB3FE47FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          01CC
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: AlojmQJlpz98pqsjX8b3yZAPPgI.roa (hash: ULWugVoz2ltuFV0GRmxSALnHOkNA8C0zkY1dxj6zD9g=)
                          2: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: jL8+3EGhJYqxSdNzee9Q1GmYpljKpnFt39kzCJ6QRAw=)
                          3: PV_plfgYTDC4x-lVEYY6LRYvZcY.roa (hash: EEBmPbRpPalJaTbQRDHKPpOaiABhsjvMKbRirUFMquI=)
                          4: XQALUUdc8j-wAGWMUMlf0zsRZtc.roa (hash: 8tel7lhDNHUmrQah94lZjiXAHtYuT3oHPGYImd2ah3k=)
                          5: cnA-of2_SxgamX6C0W2bvJ91Fh4.roa (hash: hYXAV5PN3BI3bxJ95Pe1pijb1fgGc+e5h3QX12F7xYk=)
                          6: lTc37Gj2EVRSVBgqaQ8LcmroXeY.roa (hash: lk31sUDgGMIEmr3noXpq4KlsRg+gbUXcjtDDIOPZY/M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:44:1b:18:4d:0b:d5:a0:69:75:eb:3f:e4:7f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=b674a47a7967762f68a6bb4aa97406c8b525a05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:81:af:8b:45:33:7c:cc:6f:be:2f:9d:e0:
                    6d:65:f8:3a:c0:a3:e2:a0:ad:da:74:72:68:e8:ee:
                    ef:30:ba:28:3f:9a:37:94:d0:b0:6c:98:08:a7:2f:
                    e5:63:ed:fe:63:b9:af:74:06:b9:74:7c:ef:62:b4:
                    5d:d6:e2:6d:ab:41:9f:d5:27:16:47:8e:1e:74:ee:
                    e0:8b:40:71:d8:2b:36:34:dd:70:74:bc:bb:24:24:
                    af:01:ae:72:ff:2f:ce:e9:11:bd:04:7f:2f:b1:62:
                    56:e4:ff:bf:65:21:cc:d6:e6:50:d8:2b:7c:53:29:
                    ba:59:82:e2:ac:67:25:03:3c:8a:af:9c:aa:7b:78:
                    ba:d4:54:ac:00:5d:d1:26:a5:61:6e:a1:50:52:98:
                    13:87:42:78:1e:5c:c8:c9:fb:cc:dc:60:e3:a4:96:
                    17:9a:59:d1:d2:89:b7:c0:66:0e:ad:2e:98:23:06:
                    40:c2:23:28:f1:9d:12:41:38:f3:f1:e0:8d:0e:6c:
                    a0:07:cf:e4:70:ec:df:96:67:01:52:02:5c:56:02:
                    9c:ff:60:02:70:58:cc:b6:5e:d7:64:37:92:2c:ad:
                    4d:12:29:db:4a:1f:43:28:9b:2d:96:46:d6:22:ed:
                    32:21:dc:b5:cc:62:4f:c0:d7:77:58:b6:78:0f:08:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:74:A4:7A:79:67:76:2F:68:A6:BB:4A:A9:74:06:C8:B5:25:A0:5F
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:02:82:49:c1:f2:3b:66:5d:98:29:88:a0:06:a4:01:5a:
         db:be:0f:b6:4e:1e:f3:a7:21:7a:c3:76:e0:54:6c:b3:eb:5a:
         8e:4c:87:fd:c4:9f:18:9e:50:d6:06:36:61:53:79:62:fa:48:
         0a:2d:1e:0e:35:23:7a:be:d4:ad:0d:92:66:28:c8:93:54:1f:
         14:8c:b4:88:4e:a3:83:57:69:3c:c1:91:b9:84:fa:d6:cd:ac:
         d2:38:1b:e7:03:50:37:a0:ae:c2:1e:c5:f0:6a:df:9c:73:70:
         1e:14:ac:ee:ba:c3:31:a1:cf:69:d9:d4:b1:bb:e0:21:73:69:
         ef:1f:76:19:9f:ce:0d:e2:16:7b:44:4c:72:53:88:ce:7a:e8:
         3f:f3:69:46:e3:e4:91:e1:e9:79:4c:d8:c5:54:dc:3a:b7:b0:
         22:9f:a1:fc:71:fe:46:d5:ae:1f:41:25:f1:95:b6:64:47:a7:
         8f:0a:c4:f4:23:ed:64:a1:3d:54:72:45:fe:05:0d:68:d2:c7:
         50:93:98:f7:98:59:9f:c5:67:91:12:ab:0c:e8:19:20:96:63:
         c6:5e:c4:b5:6b:93:7f:cb:a8:96:0e:1b:90:9d:c5:6f:5c:69:
         09:c7:00:b9:2f:fe:e4:ac:48:86:05:01:28:cc:60:30:c0:80:
         2c:b7:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:30 2024 by rpki-client on console-fra.rpki-client.org