Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File:                     FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier:          S+JhY39IWMQYDcLZ4PkRpgeom4sHNgJpPRrIT2NQM8U=
Subject key identifier:   B3:ED:21:68:E4:E2:CC:1D:D6:C1:AA:6D:37:6C:1D:30:EE:62:DF:E8
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer:       /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial:       018F86A386B8D051D2E2F7F06773AABB5AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number:          012F
Signing time:             Fri 17 May 2024 13:00:14 +0000
Manifest this update:     Fri 17 May 2024 13:00:14 +0000
Manifest next update:     Sat 18 May 2024 13:00:14 +0000
Files and hashes:         1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: YxRnmOvs6MyBDBTkr++7Lu1Ic1zYANkraL7dGZ2hhPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:86:b8:d0:51:d2:e2:f7:f0:67:73:aa:bb:5a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
        Validity
            Not Before: May 17 13:00:14 2024 GMT
            Not After : May 18 13:00:14 2024 GMT
        Subject: CN=b3ed2168e4e2cc1dd6c1aa6d376c1d30ee62dfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f3:3a:b9:42:bf:16:9b:53:e6:0a:11:70:ae:
                    62:3c:9d:b3:94:e3:e2:77:15:01:63:a0:04:8a:e3:
                    56:de:71:1d:32:29:ed:48:8a:17:b1:40:53:3e:9b:
                    22:8a:18:ec:de:95:22:0d:55:ca:3f:28:c0:69:c0:
                    b6:1b:fe:55:56:7e:18:2b:d5:09:3d:bb:5c:37:b4:
                    5d:65:8a:57:b6:52:71:2c:10:d9:33:05:d1:6c:a8:
                    3b:b2:1c:fd:ee:90:49:b9:70:2f:1a:85:55:6a:35:
                    97:f5:c0:14:b5:f9:f2:9f:85:74:a6:08:68:fd:e7:
                    fa:1f:ca:46:a7:55:c1:d8:42:ea:cb:01:43:50:1e:
                    c4:d6:3b:67:93:83:63:07:17:4d:4b:0a:e6:09:89:
                    b1:1c:ab:1e:55:19:ac:dd:fb:c3:9f:1d:ca:d7:7a:
                    d7:9b:9b:2c:23:0a:60:0c:98:d0:24:04:da:01:9f:
                    f4:fa:68:7f:23:c4:f2:af:8e:de:71:1e:cf:f4:59:
                    c6:4a:cc:19:01:1a:0b:5d:a7:8b:70:fd:f2:44:71:
                    ff:fe:d3:f5:1f:13:4f:2f:8c:01:19:11:26:3c:6d:
                    01:6b:58:18:68:7a:fd:3e:b8:94:67:3a:74:0e:e2:
                    9c:cd:ed:3d:76:cf:31:17:04:0c:ed:8d:19:fd:af:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:21:68:E4:E2:CC:1D:D6:C1:AA:6D:37:6C:1D:30:EE:62:DF:E8
            X509v3 Authority Key Identifier:
                keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:70:e2:29:0c:30:7f:86:8d:41:9c:b3:98:e0:de:1b:e4:20:
         d0:a4:41:73:27:e5:6f:63:d7:78:65:7d:1e:f3:ce:a7:66:e0:
         be:6a:12:d3:39:05:f0:3e:e8:ae:d6:c8:00:ce:cf:0d:30:0a:
         62:ec:c6:2d:b7:5d:42:20:41:5d:ac:74:b9:c0:16:2d:28:ad:
         95:98:e4:c8:df:fa:9f:f4:0e:13:5f:aa:39:ea:9a:88:8d:7c:
         da:97:92:b3:7c:b9:a2:c1:05:f9:24:63:c2:35:d2:6a:7c:74:
         ab:f7:73:9d:42:71:70:da:32:50:45:4e:4a:e2:f4:c1:22:30:
         bb:a0:12:25:87:c6:fe:f0:0a:d3:bd:7f:e2:3e:34:6e:65:d1:
         63:e3:96:0e:ce:db:dd:0c:af:32:7f:ee:fa:ab:27:32:21:1a:
         06:f1:e5:d0:d5:2d:87:c0:fa:90:20:8b:dc:1b:bb:cf:81:ee:
         e7:e1:dc:75:36:52:c8:5c:a5:ef:64:8a:9f:4a:ac:d1:4d:d6:
         05:93:4d:43:2b:3e:54:01:1c:3e:68:7e:68:d9:4c:dd:65:b3:
         b5:f4:bf:8a:59:53:a2:ef:88:7e:76:ce:84:12:49:8e:89:69:
         c6:d0:03:89:e4:d2:7c:03:ca:44:1a:d9:fe:b0:89:4e:7c:69:
         1f:93:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:20 2024 by rpki-client on console-fra.rpki-client.org