Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File:                     FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier:          jR5UvHIjiyCFUyWvqG4W3iAvAacBVSFXTrwRtgU/IZA=
Subject key identifier:   FD:7D:0A:6F:1B:03:FF:EE:8A:75:6F:1A:EB:AB:6F:FD:A7:3D:7D:B5
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer:       /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial:       018F4AC6DDBDEB3BA1472ED160D6E2647CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number:          0DCB
Signing time:             Sun 05 May 2024 22:01:37 +0000
Manifest this update:     Sun 05 May 2024 22:01:37 +0000
Manifest next update:     Mon 06 May 2024 22:01:37 +0000
Files and hashes:         1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: 4asfKhZexhBMbFc83rsdeU5d6kMfu3oYcgddDg8Ku7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:dd:bd:eb:3b:a1:47:2e:d1:60:d6:e2:64:7c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
        Validity
            Not Before: May  5 22:01:37 2024 GMT
            Not After : May  6 22:01:37 2024 GMT
        Subject: CN=fd7d0a6f1b03ffee8a756f1aebab6ffda73d7db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:69:96:42:22:d0:6f:d8:36:11:f3:86:71:
                    26:30:06:2c:9c:52:e6:02:fa:2e:25:4a:d0:a9:e9:
                    ab:fa:9e:ce:b8:26:d8:92:f5:8e:d6:90:61:66:0c:
                    23:c4:5b:82:12:50:82:c6:a3:9c:ad:10:8e:62:ec:
                    39:66:46:21:fb:f5:ee:db:f9:da:0f:58:9d:32:44:
                    2d:52:50:d4:82:2c:f3:d5:b4:dc:34:4e:94:ef:ae:
                    5f:f5:2e:f4:64:c4:e4:27:82:a6:2d:56:0a:4a:0f:
                    21:ca:a6:65:2f:11:14:78:5f:15:4c:dc:3b:8d:7d:
                    a1:3c:87:f0:be:3c:b3:ac:34:e4:8e:00:1d:93:0d:
                    45:43:54:a2:cd:73:43:b5:be:af:f3:d0:cb:80:e5:
                    f8:5b:11:7d:d7:db:5e:e6:71:c7:c1:b3:1e:1b:0d:
                    fd:4c:9a:23:ba:21:53:80:30:8d:29:40:47:f0:65:
                    19:61:0d:ec:78:e2:a0:29:e9:5e:35:9a:3c:5f:4b:
                    4b:79:5d:73:0e:9f:76:e3:44:84:49:72:2a:68:a6:
                    53:d1:23:02:12:39:51:50:2d:06:bb:e1:41:52:df:
                    a8:c0:e5:2e:0e:f3:e7:1a:08:ee:6d:a0:d9:8b:02:
                    55:4b:fe:aa:7d:0a:49:94:0c:64:75:e4:21:77:3e:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7D:0A:6F:1B:03:FF:EE:8A:75:6F:1A:EB:AB:6F:FD:A7:3D:7D:B5
            X509v3 Authority Key Identifier:
                keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bc:1e:28:2f:64:74:c5:66:99:63:a9:de:d3:1d:f0:6b:81:
         a6:14:ba:b2:db:84:18:e7:88:34:85:c9:26:24:f0:9c:10:eb:
         5c:2a:8b:fe:c5:5d:21:ae:bc:ff:94:2f:13:bd:74:f2:98:8b:
         51:c7:e3:69:b2:70:e0:20:d3:35:c8:67:cf:91:ea:24:f3:41:
         82:8f:7f:b8:50:39:45:39:4a:43:21:c3:40:31:98:25:08:04:
         77:9a:ef:d8:9b:c6:42:df:5e:7c:12:e5:b8:d6:8f:d9:ed:a3:
         52:df:4a:3b:3e:37:ce:ef:e1:35:84:57:b7:61:7e:eb:ef:f6:
         a4:bc:1a:e6:92:f1:36:c4:db:55:bb:a8:47:e4:ce:40:36:32:
         f0:71:f9:7c:92:f8:3a:5c:ff:bb:d6:6e:a1:63:d7:45:c3:9e:
         8e:ea:d6:9e:01:94:44:81:8d:d7:bd:09:54:cb:45:de:b8:b2:
         67:f7:48:a9:38:7e:2f:4b:65:b3:4a:83:80:14:0c:a6:aa:62:
         93:f4:6d:b8:26:19:01:06:6f:59:ef:43:de:24:8e:12:30:96:
         2f:26:47:68:70:4c:a0:df:26:3d:15:61:7a:53:4f:88:5d:8e:
         96:73:17:13:53:19:4f:b6:75:9b:72:38:24:9a:79:0a:ec:f9:
         05:cb:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:46:50 2024 by rpki-client on console-ams.rpki-client.org