Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.mft
File:                     FIUs-v_vx2Av-Mmpsop3wnUUD9k.mft (raw, json)
Hash identifier:          wRS/35vSVAVMMyxdkj0ALKQpBJ0VjJh2FgrIOgOsw0o=
Subject key identifier:   6A:79:A8:14:9E:7F:AC:09:88:E3:A1:DB:E7:26:66:B7:D6:4E:6A:40
Authority key identifier: 14:85:2C:FA:FF:EF:C7:60:2F:F8:C9:A9:B2:8A:77:C2:75:14:0F:D9
Certificate issuer:       /CN=14852cfaffefc7602ff8c9a9b28a77c275140fd9
Certificate serial:       01938F662D3A1796E26367B44FA5DB4FF9B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FIUs-v_vx2Av-Mmpsop3wnUUD9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.mft
Manifest number:          03B8
Signing time:             Wed 04 Dec 2024 02:00:58 +0000
Manifest this update:     Wed 04 Dec 2024 02:00:58 +0000
Manifest next update:     Thu 05 Dec 2024 02:00:58 +0000
Files and hashes:         1: FIUs-v_vx2Av-Mmpsop3wnUUD9k.crl (hash: 6uYz5ibPzRpYA3FXQ9ZYRccHHWlugjLMiuhWlrYU5eQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FIUs-v_vx2Av-Mmpsop3wnUUD9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Dec 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8f:66:2d:3a:17:96:e2:63:67:b4:4f:a5:db:4f:f9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14852cfaffefc7602ff8c9a9b28a77c275140fd9
        Validity
            Not Before: Dec  4 02:00:58 2024 GMT
            Not After : Dec  5 02:00:58 2024 GMT
        Subject: CN=6a79a8149e7fac0988e3a1dbe72666b7d64e6a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:d3:73:2c:62:84:85:df:56:c7:c5:7c:8b:
                    1b:5c:03:d2:00:02:a5:b1:90:69:37:13:7a:c9:87:
                    9a:64:40:32:ff:71:73:b8:59:1a:4c:05:42:e1:b2:
                    41:cf:85:fe:1f:00:f9:3b:d9:46:7a:d7:58:4f:48:
                    dd:8c:e7:90:7f:99:49:8a:49:06:b7:bf:98:82:c4:
                    6f:7f:39:df:73:58:34:5b:c1:ad:1d:d6:5c:00:d5:
                    68:5b:cc:c7:85:cc:b5:8b:3b:0f:14:a5:e5:66:07:
                    be:89:fc:aa:cf:f9:9e:30:4d:3f:9f:59:9a:59:3f:
                    ed:2c:0f:47:36:79:0a:96:9d:6f:53:9a:af:70:76:
                    2f:06:cd:19:a0:22:7b:a6:35:16:d4:a2:bf:bb:3c:
                    52:6b:4e:94:a7:fd:c3:15:05:95:f1:76:c3:ca:70:
                    c1:46:33:a5:8d:a6:b5:24:3a:ed:1d:f2:95:ee:1d:
                    77:8b:38:98:9c:26:e3:be:aa:04:37:a5:f8:9f:70:
                    13:5a:5a:dd:cb:7c:c0:86:d7:ce:6d:49:6a:cc:6d:
                    13:be:3c:d0:48:70:0c:eb:d8:5d:5d:22:bf:66:43:
                    55:9b:be:94:9d:46:92:5b:8e:3f:19:97:05:7e:b2:
                    8c:ef:5a:78:04:24:e7:dd:cf:fc:bd:7b:e9:26:e2:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:79:A8:14:9E:7F:AC:09:88:E3:A1:DB:E7:26:66:B7:D6:4E:6A:40
            X509v3 Authority Key Identifier:
                keyid:14:85:2C:FA:FF:EF:C7:60:2F:F8:C9:A9:B2:8A:77:C2:75:14:0F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIUs-v_vx2Av-Mmpsop3wnUUD9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:9d:dd:e4:b0:7a:7d:66:24:9c:8c:ad:59:b4:11:f9:62:
         8a:2b:3d:c3:4a:97:69:b1:c9:49:fd:0b:a3:e1:46:ee:94:71:
         5a:57:c5:ca:78:e7:e1:04:c8:f8:4e:b6:ca:ff:7b:6e:5b:ea:
         2e:b6:03:74:dc:20:74:66:17:49:62:34:fe:47:79:47:8c:0a:
         94:62:4f:af:14:fb:78:e6:03:1a:31:a7:4d:71:eb:f4:d2:01:
         fb:06:e7:17:23:f8:3d:6e:a2:0a:76:ef:46:ac:72:e6:79:37:
         1a:17:17:99:97:fe:23:83:3e:dd:3d:06:e8:98:75:fa:d4:f2:
         3b:68:71:54:fd:c5:40:0a:05:41:b4:32:cf:1f:a0:df:d1:fc:
         7c:32:25:7b:95:7d:bb:ab:61:f9:5b:f8:43:11:6b:2e:2b:7b:
         9b:29:47:b5:ba:91:a5:8c:b8:2d:88:4d:2c:81:91:58:34:30:
         9c:b3:e3:f8:8c:41:68:ed:56:dc:62:8b:76:63:34:ab:90:f5:
         c2:44:fe:be:d7:af:27:26:92:c0:37:1e:fc:7c:77:ca:6d:84:
         cf:0c:13:e2:5d:80:8c:58:2d:58:6d:08:00:6b:61:f0:8f:46:
         22:27:94:e2:d6:41:c3:de:56:78:14:bc:db:83:85:60:3e:30:
         2b:4c:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 09:05:22 2024 by rpki-client on console-fra.rpki-client.org