Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File:                     F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier:          Pu0/QWrZ9EkcQ+JuZAM6RN0W+g428/71BLn99mvasko=
Subject key identifier:   FC:F0:4C:1E:C4:FA:1F:2A:8F:DF:B6:CF:38:DD:4E:04:EC:42:4A:37
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer:       /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial:       018F8748EF735A0847FC0DA2BB3A12F36656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number:          03AD
Signing time:             Fri 17 May 2024 16:00:55 +0000
Manifest this update:     Fri 17 May 2024 16:00:55 +0000
Manifest next update:     Sat 18 May 2024 16:00:55 +0000
Files and hashes:         1: F3XdxSn1elmets19uiuSstN190o.crl (hash: Dv4L+JTy34Ivg84dCcfbwnUEMvFkbuj9jbcjogHVVtU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ef:73:5a:08:47:fc:0d:a2:bb:3a:12:f3:66:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
        Validity
            Not Before: May 17 16:00:55 2024 GMT
            Not After : May 18 16:00:55 2024 GMT
        Subject: CN=fcf04c1ec4fa1f2a8fdfb6cf38dd4e04ec424a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:20:99:69:98:01:ec:5b:e4:99:07:af:52:
                    e6:d6:be:5a:76:af:49:1d:0b:65:f0:a4:ca:7e:07:
                    3d:7f:3f:48:6e:21:42:c9:d5:90:5b:e4:f5:98:23:
                    53:76:b6:d2:d3:1b:97:00:38:96:a0:0a:af:a6:b8:
                    fd:73:b5:92:4e:05:c1:91:ab:3f:c5:69:2a:c0:63:
                    6c:c5:2c:c7:77:d4:05:49:90:61:c4:ce:e0:24:76:
                    f3:e5:b2:f1:3c:d7:81:3c:90:62:2c:18:13:af:0c:
                    ca:c9:08:77:c9:36:72:b7:5c:c0:c1:b7:c5:53:78:
                    fe:5d:32:a5:ce:01:72:13:ac:b0:24:ee:74:26:e1:
                    91:31:07:a8:c3:a9:c9:24:f0:c9:62:4a:e7:ca:2a:
                    6e:9c:d0:35:f4:42:c0:7e:d5:60:17:9d:0c:3a:3d:
                    1b:aa:8c:e1:49:7e:5b:48:19:82:ca:ba:e9:d5:53:
                    c5:6a:53:b5:bb:aa:c0:32:4e:0c:cd:6a:4c:b7:00:
                    87:79:df:4d:e9:5a:7c:a1:eb:03:a3:13:d8:6b:f0:
                    56:01:b2:31:c5:f8:68:26:e2:4d:b2:b9:0e:52:ec:
                    20:c1:db:3c:c9:26:fb:c0:1c:4d:f6:28:cf:b8:25:
                    d2:24:6c:df:b1:d3:f1:f1:a3:0e:8d:be:65:26:ff:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F0:4C:1E:C4:FA:1F:2A:8F:DF:B6:CF:38:DD:4E:04:EC:42:4A:37
            X509v3 Authority Key Identifier:
                keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:4c:ba:68:df:34:c6:ea:a6:cf:c4:61:a5:20:1e:68:53:8b:
         3f:7d:50:0e:1c:cc:cd:ad:30:77:d0:35:fa:ea:92:8e:f2:6b:
         9f:98:dc:8d:86:f3:a3:e6:72:93:46:53:80:68:d3:10:86:37:
         61:80:4b:15:16:23:bc:5c:09:bd:1f:be:e7:aa:8f:43:47:42:
         3f:3d:1f:be:29:92:96:30:01:5a:49:c8:03:44:6e:a6:fe:75:
         7d:e9:11:48:42:a7:3c:4d:c1:1c:1c:f6:da:4a:ce:8f:1d:df:
         6e:2d:eb:58:a5:e6:bd:76:96:00:1a:80:18:55:02:ac:4e:22:
         17:c6:56:c0:e7:36:58:a7:38:4e:c0:c5:38:6b:70:cd:ca:2a:
         44:e4:4f:4f:d7:ab:80:a4:c9:b2:0f:69:67:cd:d4:04:b7:fc:
         f8:bd:12:11:a2:94:f7:1c:f0:c7:0c:28:2d:a8:12:e2:74:a1:
         45:1f:fa:c6:0d:fc:84:90:b0:f2:05:a6:6d:18:d2:40:4e:d3:
         d9:de:5b:62:94:e3:36:ca:a2:5a:7b:19:9f:cc:c9:fb:ca:28:
         5c:34:ca:94:99:8c:6d:f0:a6:01:23:33:9f:ed:ec:fd:cf:49:
         61:ef:d6:f4:40:06:8b:b2:5b:12:2a:f3:31:ef:cd:a7:83:61:
         d6:45:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:00 2024 by rpki-client on console-fra.rpki-client.org