Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File:                     FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier:          RDeyiMSF/BjBwZUy5uR+t+Qnk4q021bznFt7gSPYaU0=
Subject key identifier:   66:96:7C:BA:B3:F6:70:56:E9:AA:12:57:37:4D:E8:4A:16:FC:36:6B
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer:       /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial:       018FB1C673C3604EE9AE806F31B7F74DCD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number:          034C
Signing time:             Sat 25 May 2024 22:02:03 +0000
Manifest this update:     Sat 25 May 2024 22:02:03 +0000
Manifest next update:     Sun 26 May 2024 22:02:03 +0000
Files and hashes:         1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: mC1XGRvaugVpiWvIxK5ap9VmdQca1PIzDye1fdO8st8=)
                          2: HtTkzCCVSPuYoECQ2y8k2YBEpe0.roa (hash: Qff+CIaNo8njCQx3jCm8+ol4dSGKrVA9tmKJXSZKsWU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:c6:73:c3:60:4e:e9:ae:80:6f:31:b7:f7:4d:cd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
        Validity
            Not Before: May 25 22:02:03 2024 GMT
            Not After : May 26 22:02:03 2024 GMT
        Subject: CN=66967cbab3f67056e9aa1257374de84a16fc366b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:21:77:2f:25:17:1b:49:b1:d0:60:c4:62:
                    2c:76:8d:67:10:1d:2c:39:4b:05:bc:be:46:a9:2c:
                    8d:e9:7d:70:33:f5:53:b1:87:ba:46:10:9e:ea:0f:
                    f5:58:90:97:9d:27:7e:85:72:d7:7a:41:d6:ff:fb:
                    c6:c1:8c:42:21:b0:2f:82:4f:db:63:13:5e:d1:e0:
                    7f:00:5b:59:89:6d:81:9c:76:ff:c5:4e:f7:92:86:
                    88:ad:54:57:db:d9:c6:3c:91:07:29:78:e2:e8:f2:
                    0b:35:25:77:e2:4c:7b:28:77:80:c4:0f:a8:48:c7:
                    94:60:8d:6f:37:44:7f:b1:d5:0e:c6:66:94:65:f4:
                    b5:49:b2:9d:f6:e4:e6:e6:06:4c:60:a0:fe:cd:1e:
                    ad:1e:ac:be:a2:5f:ce:1b:bc:a3:8b:7d:cf:b5:d2:
                    83:96:cb:27:64:23:6a:50:06:6a:f9:89:89:4f:fd:
                    c3:d5:cb:ed:94:8d:25:ac:b8:59:09:f4:1a:34:b6:
                    22:cb:be:b1:ec:ab:3a:ab:e2:46:c2:7f:b5:2f:c9:
                    5d:64:c5:0c:45:2f:19:7c:ae:31:d3:23:46:8e:ba:
                    ff:47:42:ba:3a:9d:be:6c:ef:29:79:76:1d:7f:64:
                    f0:37:01:d3:e1:37:b2:78:72:93:68:ac:6c:4d:1d:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:96:7C:BA:B3:F6:70:56:E9:AA:12:57:37:4D:E8:4A:16:FC:36:6B
            X509v3 Authority Key Identifier:
                keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e9:72:21:a5:b7:cf:bd:3b:a7:b0:c9:ed:27:57:0b:da:fd:
         b5:66:66:ed:92:aa:70:68:a1:8e:08:83:64:6e:ca:38:b9:34:
         08:ea:0e:68:2a:fa:37:29:1d:35:0f:34:14:cc:60:69:d3:e4:
         73:b6:18:d6:66:3c:76:63:2e:29:b5:8c:c5:c8:ff:a4:5a:da:
         f8:a9:50:92:6d:70:77:e3:a9:2c:92:c0:f6:ab:47:3f:c7:25:
         33:ee:fc:d3:a4:84:3b:e8:5f:cd:29:72:0e:d9:ac:6d:96:38:
         39:ac:b5:f3:b3:11:40:20:e6:d3:bc:c1:31:64:1a:dc:6d:ab:
         0b:1d:3b:db:56:73:e0:be:61:07:96:84:44:5a:fb:1f:08:51:
         6e:a7:3c:1f:b0:fc:b8:9c:4f:61:b9:cc:87:06:4a:5c:53:18:
         84:ed:a4:bc:e1:44:15:ca:62:d4:26:8b:08:a6:bd:25:c0:84:
         c3:95:5e:2c:7c:28:87:88:ad:37:a8:1c:58:81:63:75:c6:5f:
         03:9a:dc:b0:79:d2:c3:5f:a7:5b:7f:96:67:81:5b:04:c6:d4:
         d9:34:d2:3a:00:dd:ed:0b:88:f6:9d:af:70:f1:a0:7e:ba:5b:
         6b:c0:e8:d6:76:53:0f:7a:c2:e8:df:05:dd:ad:77:35:0a:51:
         46:73:87:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+xxnPDYE7proBvMbf3Tc0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzFlNjY4NDMwNmI3NDgxNTZjMmFlM2Y0MjBiYjM2NmIy
ZWZjZWUwHhcNMjQwNTI1MjIwMjAzWhcNMjQwNTI2MjIwMjAzWjAzMTEwLwYDVQQD
Eyg2Njk2N2NiYWIzZjY3MDU2ZTlhYTEyNTczNzRkZTg0YTE2ZmMzNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeYhdy8lFxtJsdBgxGIsdo1nEB0s
OUsFvL5GqSyN6X1wM/VTsYe6RhCe6g/1WJCXnSd+hXLXekHW//vGwYxCIbAvgk/b
YxNe0eB/AFtZiW2BnHb/xU73koaIrVRX29nGPJEHKXji6PILNSV34kx7KHeAxA+o
SMeUYI1vN0R/sdUOxmaUZfS1SbKd9uTm5gZMYKD+zR6tHqy+ol/OG7yji33PtdKD
lssnZCNqUAZq+YmJT/3D1cvtlI0lrLhZCfQaNLYiy76x7Ks6q+JGwn+1L8ldZMUM
RS8ZfK4x0yNGjrr/R0K6Op2+bO8peXYdf2TwNwHT4TeyeHKTaKxsTR0G8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaWfLqz9nBW6aoSVzdN6EoW/DZrMB8GA1UdIwQY
MBaAFBVx5mhDBrdIFWwq4/QguzZrLvzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYt
NzM4YzBiZjhlYTk4LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYtNzM4YzBiZjhlYTk4
LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+lyIaW3
z707p7DJ7SdXC9r9tWZm7ZKqcGihjgiDZG7KOLk0COoOaCr6NykdNQ80FMxgadPk
c7YY1mY8dmMuKbWMxcj/pFra+KlQkm1wd+OpLJLA9qtHP8clM+7806SEO+hfzSly
DtmsbZY4Oay187MRQCDm07zBMWQa3G2rCx0721Zz4L5hB5aERFr7HwhRbqc8H7D8
uJxPYbnMhwZKXFMYhO2kvOFEFcpi1CaLCKa9JcCEw5VeLHwoh4itN6gcWIFjdcZf
A5rcsHnSw1+nW3+WZ4FbBMbU2TTSOgDd7QuI9p2vcPGgfrpba8Do1nZTD3rC6N8F
3a13NQpRRnOHEQ==
-----END CERTIFICATE-----
Generated at Sat May 25 22:52:15 2024 by rpki-client on console-fra.rpki-client.org