Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File:                     FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier:          ZdhU1DG8deU2zQuevcl+ZpNxrLukyna3XxN8rIkWB+M=
Subject key identifier:   FC:D2:A2:9C:96:C7:85:B3:84:D4:48:91:2C:BB:33:79:13:4C:A1:43
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer:       /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial:       01936745D9EC235277C943255A4EEC28B91A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 07:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 07:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 07:00:51 +0000
Files and hashes:         1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: tT0y+CzyFHeank8izfkmyZ1vfbk4wtDDmcrw4Lwu29g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:45:d9:ec:23:52:77:c9:43:25:5a:4e:ec:28:b9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
        Validity
            Not Before: Nov 26 07:00:51 2024 GMT
            Not After : Nov 27 07:00:51 2024 GMT
        Subject: CN=fcd2a29c96c785b384d448912cbb3379134ca143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:5e:77:a4:30:d5:32:58:31:7c:03:7c:97:
                    e1:dc:80:33:9c:7d:1b:60:37:2c:cd:a8:ed:7b:29:
                    2a:9a:a4:64:56:d5:2d:ad:3b:4c:aa:cc:a2:63:21:
                    e7:f2:22:e0:c0:be:0a:a3:07:5c:ce:91:97:61:7c:
                    8e:55:56:c9:84:85:4a:51:57:05:25:e3:2b:d3:1c:
                    14:f2:6e:07:da:4e:52:88:51:84:83:22:b5:e9:0c:
                    c7:6c:fa:76:95:44:76:ef:74:03:73:23:49:d0:a7:
                    7e:d0:3c:44:98:3b:0e:bf:d8:6f:da:e5:fc:0b:05:
                    7c:7e:32:3f:b2:5a:18:de:b3:44:96:36:e3:54:8e:
                    bc:f9:01:2c:d9:b5:89:7d:f8:f6:ab:95:96:5a:4d:
                    9d:53:04:56:67:04:a4:23:2a:c6:bd:fd:00:0c:63:
                    3b:34:a0:97:9a:a2:f1:a2:6d:1e:dc:a0:c3:1f:17:
                    b7:6c:7f:8a:bf:7d:4e:57:a3:a6:b7:c4:07:7d:e9:
                    4c:b3:f5:6e:cd:4e:4d:82:30:80:75:e1:8d:d0:51:
                    eb:9f:ea:6b:d0:76:9d:e0:62:00:d2:8c:0a:ee:59:
                    46:ca:77:7a:7b:38:a5:ed:82:ee:69:76:65:9c:47:
                    ae:6a:7f:72:cc:b5:fd:e0:a5:46:95:2f:73:90:d0:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:A2:9C:96:C7:85:B3:84:D4:48:91:2C:BB:33:79:13:4C:A1:43
            X509v3 Authority Key Identifier:
                keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:ec:ed:2f:72:bb:1f:5e:36:b8:2f:f7:ba:b7:55:f9:8f:
         b0:42:58:1b:18:aa:37:75:77:1d:0a:1c:08:d8:33:84:70:23:
         70:9c:e1:d4:09:25:00:a3:ba:ba:53:e5:a2:44:5c:5c:a0:8f:
         d0:7b:4c:f8:7a:30:b6:ac:a5:e3:89:5d:09:04:12:ed:43:e4:
         2b:b9:e7:99:d3:77:9b:98:cc:7a:2d:83:45:86:75:80:b6:51:
         ab:f5:59:87:a9:18:f3:ee:ea:d0:54:23:8a:0a:9e:a2:bf:fd:
         9b:f1:ab:ca:6d:22:65:37:8d:c2:7f:bb:40:f6:10:c6:6d:7f:
         e3:45:39:d7:d6:76:8f:03:d1:77:1f:90:ab:ea:ab:8b:5c:56:
         56:50:01:87:87:59:6c:91:a0:28:b6:84:23:db:1c:15:63:24:
         14:d0:48:d2:7d:7d:5a:35:8f:84:16:3c:2a:ec:21:dc:53:b3:
         05:36:87:0a:58:28:2a:91:ac:73:33:2c:8a:04:cc:dc:19:b2:
         9d:63:38:ba:3e:f8:02:a0:44:b6:7b:3a:70:13:24:10:55:f5:
         26:49:37:11:f5:0a:55:0c:ad:71:e5:f4:1e:5e:53:4a:bf:0a:
         99:09:56:e4:de:11:08:19:b8:1d:c0:29:e6:84:59:3e:59:8a:
         b5:d5:2b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:57 2024 by rpki-client on console-ams.rpki-client.org