Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          Rhd73nbsNbOEcxcb/qNhgYhKStU6cCWJ9NhespGe5/o=
Subject key identifier:   E1:AB:4C:62:77:49:11:87:70:A2:CB:99:3E:2E:87:81:8F:C6:68:45
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       019060388CFCFF4128EC897B59FC07992FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          11E9
Signing time:             Fri 28 Jun 2024 19:00:37 +0000
Manifest this update:     Fri 28 Jun 2024 19:00:37 +0000
Manifest next update:     Sat 29 Jun 2024 19:00:37 +0000
Files and hashes:         1: DExpHn7C8Rd6w42ArDu-r9aoj9Q.roa (hash: Umy0/zCiDsSXtOf4LwdgsWBIUrrd9VVvi6YxMUAmTaU=)
                          2: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: PtFZnYR8+BEG3uWUsPgrIs9SuZ+yU50D6xfPiDizMfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:38:8c:fc:ff:41:28:ec:89:7b:59:fc:07:99:2f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Jun 28 19:00:37 2024 GMT
            Not After : Jun 29 19:00:37 2024 GMT
        Subject: CN=e1ab4c627749118770a2cb993e2e87818fc66845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:6d:db:44:48:c1:c1:f8:27:85:84:d7:e6:
                    33:3a:46:d8:f5:e2:3b:13:1d:ae:89:cf:68:57:49:
                    00:ee:f1:9e:60:2a:db:6d:be:bb:75:cc:ce:42:d0:
                    e6:dd:5b:35:55:24:04:52:6a:7f:28:0b:5c:ee:7c:
                    a9:82:d8:6b:b6:8d:8b:6d:b4:a5:c6:d6:ab:d5:8b:
                    67:9a:7b:4c:1a:03:7f:68:3c:63:bc:49:f2:9a:f5:
                    4a:75:3b:29:49:de:5d:6d:3d:1d:c8:c9:4a:20:de:
                    b7:4c:1b:36:b1:98:80:ae:1e:d0:24:5c:c6:cb:e8:
                    7a:17:77:b7:2f:12:d1:0f:76:b5:d0:5d:d1:1c:8d:
                    2f:f8:f1:7b:b4:8e:aa:ae:7b:05:8f:6e:ad:6f:c3:
                    ff:96:f3:b2:0c:20:b5:bf:3c:29:93:fe:a5:d8:8b:
                    17:81:16:e6:fc:4e:f2:0e:42:5f:23:43:93:f1:7a:
                    ce:75:df:a6:d7:12:af:62:60:ea:19:51:2a:d8:cf:
                    0a:f4:b4:d7:9f:31:f6:11:a4:9e:fa:08:00:a6:5b:
                    38:35:a8:95:e2:b6:77:b9:11:68:ee:86:6f:24:e4:
                    8d:d7:cf:5d:09:f6:45:10:cd:1d:61:a6:2e:12:f9:
                    de:fe:92:c7:ba:ca:7d:09:9a:8b:c3:f7:f3:2c:2b:
                    d2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AB:4C:62:77:49:11:87:70:A2:CB:99:3E:2E:87:81:8F:C6:68:45
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:65:94:41:14:b5:fa:a9:8a:9c:8e:33:81:d8:12:c6:22:20:
         df:ba:59:24:11:45:ff:3c:b2:6d:4e:bd:95:54:1c:aa:69:66:
         fb:7a:0e:2b:eb:b4:31:9f:7d:d4:70:ac:7e:c1:9b:b0:88:ad:
         c5:50:86:e9:31:ca:17:c4:78:e5:e6:13:cb:36:50:1a:9f:97:
         f9:7e:f2:b3:10:d1:82:00:15:f7:29:12:ff:af:73:78:68:ae:
         4e:9e:06:88:1b:5a:64:b9:b1:9e:03:07:4e:0a:94:0b:66:44:
         ec:03:bb:dd:2d:97:16:a7:13:d6:fd:5b:49:62:9d:33:31:b2:
         e8:1b:b6:b8:6f:35:9f:31:3a:28:e8:b0:32:94:43:4d:93:85:
         23:96:2d:99:86:e8:33:b1:66:11:3b:e0:c8:11:56:cb:9f:13:
         c7:66:ef:e0:0d:9e:e3:73:92:27:8b:ae:96:ed:d4:14:66:27:
         5b:e5:40:c1:ad:e7:f3:d2:01:91:1d:59:c7:17:5d:4c:64:9a:
         07:9f:d2:ff:7d:b3:2e:63:e8:c3:f1:0d:4e:8a:b9:59:b1:27:
         fd:0e:36:56:a9:8e:c4:04:53:9b:96:39:7b:d4:dd:ed:26:f0:
         1b:dd:a4:cc:90:27:06:48:6e:26:54:a0:d5:be:36:79:5f:ff:
         72:09:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 05:43:54 2024 by rpki-client on console-ams.rpki-client.org