Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File:                     FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier:          t4gUKlbmuaDt+HUMxlZA4d5MlipgFG0Oudf90DkNTbg=
Subject key identifier:   08:89:C2:3A:E3:97:07:48:1E:7E:A9:33:7A:55:AD:18:F8:F5:60:22
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       01940648102172851DF9EA37E773BDD53154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 04:02:53 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:53 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:53 +0000
Files and hashes:         1: 4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa (hash: P8qHKjktwY0LMJk2kNSxIkV5VZfMxq6978hedImOnLo=)
                          2: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: ui8S+fUCeSU2O9OQBypaEGvjt4eL341caScxW7W3YTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:10:21:72:85:1d:f9:ea:37:e7:73:bd:d5:31:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: Dec 27 04:02:53 2024 GMT
            Not After : Dec 28 04:02:53 2024 GMT
        Subject: CN=0889c23ae39707481e7ea9337a55ad18f8f56022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:c5:8d:ab:c2:17:a9:c4:65:56:1f:b6:34:
                    ea:ff:8e:7d:b4:96:02:89:f0:e0:cf:ea:42:bb:55:
                    72:d4:d0:f8:6b:5d:05:1b:ec:82:47:12:e7:00:a0:
                    1a:86:7e:13:34:32:f7:4d:b4:92:11:7e:76:44:8a:
                    1d:78:5f:a0:e9:2c:b2:69:bf:e9:c2:e7:aa:b0:67:
                    b3:47:fb:b5:1b:0b:83:31:5f:ab:a4:fc:6d:f1:02:
                    41:5b:dd:2d:49:0b:44:db:04:4b:63:4e:fe:e8:21:
                    12:de:17:4f:30:56:97:77:9c:5e:0d:7a:31:4c:78:
                    af:6e:a0:f2:55:f6:97:be:25:94:11:9d:eb:81:f9:
                    8d:9c:74:c2:84:c2:0f:75:98:5f:46:93:e3:f3:a9:
                    fc:16:78:ef:44:e0:a5:76:57:fc:51:37:24:2c:20:
                    ca:ca:de:b0:bc:cf:bb:6b:a6:ff:9a:a2:75:6e:69:
                    f3:df:e2:01:b3:fa:89:20:0e:2b:4f:2d:30:93:1e:
                    1b:e5:7f:22:c2:bc:ce:04:9a:19:3b:03:c3:94:97:
                    fc:0c:cc:f7:7c:c5:af:b8:e4:2e:aa:cf:a8:8a:43:
                    6a:6e:cb:34:4e:30:e0:6f:20:49:f7:7c:bb:f2:92:
                    2c:96:5d:56:d4:80:7d:a9:f9:15:3c:af:a2:4f:d5:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:89:C2:3A:E3:97:07:48:1E:7E:A9:33:7A:55:AD:18:F8:F5:60:22
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:b4:ee:79:f1:0b:a8:29:1b:39:06:50:75:a0:16:ac:0b:
         18:7b:4c:e4:ce:7c:b4:f5:3c:1d:c2:1b:9c:6e:bb:00:01:82:
         dc:ed:76:3a:31:db:0d:a9:59:9d:00:4d:0a:f0:af:90:03:35:
         f9:23:90:39:a4:dd:0a:5d:a1:0b:7b:76:57:28:59:03:ab:cf:
         b3:47:f3:a1:3d:9a:54:73:a9:b6:dd:7b:49:db:e7:53:c2:00:
         fe:1a:72:a2:c0:d5:30:af:01:71:61:fb:2c:2d:1c:9d:c4:83:
         c9:7b:1b:3d:9f:a4:e4:99:2e:cc:e0:6a:9f:05:0f:34:f7:f4:
         4d:e5:ce:18:a7:13:42:b7:11:40:db:0e:65:be:a7:8e:ed:39:
         e5:d7:6e:be:51:c6:92:d3:b5:2a:d6:a5:ec:91:85:27:7c:3c:
         3c:7b:68:a1:03:d2:72:50:e4:c3:e2:89:eb:a1:83:07:52:7c:
         cc:2b:d2:f1:29:9c:af:8b:90:49:69:93:93:c4:59:d3:c8:ee:
         87:15:57:c5:c1:06:94:a0:7e:5e:75:bf:93:57:b9:8b:ac:10:
         a5:d9:13:ce:a8:0b:38:3c:d0:e7:06:45:af:6f:df:39:a2:5d:
         82:a0:a0:98:d3:2b:12:f8:ed:46:6b:be:e6:14:48:9f:9c:cb:
         2e:cc:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:02:33 2024 by rpki-client on console-ams.rpki-client.org