Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File:                     FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier:          h4VbMxOsC+xwlj6amCT4putycjz2d5oitq/xHXj056A=
Subject key identifier:   DA:9E:7F:40:9E:23:6C:EF:23:00:F6:99:42:9E:09:FC:43:21:36:E8
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer:       /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial:       018F34AC939906AE8E9BA9D170DC0FA118C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 15:01:16 +0000
Manifest this update:     Wed 01 May 2024 15:01:16 +0000
Manifest next update:     Thu 02 May 2024 15:01:16 +0000
Files and hashes:         1: 2gem_s7OXY9RAP-ycmH2xxzMRNo.roa (hash: 6NO1TmiFHnyHzmCN0vzltL3ibNQx4wAuQ4KlzIiXvoM=)
                          2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: C+YZq/MZJrCK5bDLjaY4d3DAIaGD2WRsMKt1ZIse0UQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:ac:93:99:06:ae:8e:9b:a9:d1:70:dc:0f:a1:18:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
        Validity
            Not Before: May  1 15:01:16 2024 GMT
            Not After : May  2 15:01:16 2024 GMT
        Subject: CN=da9e7f409e236cef2300f699429e09fc432136e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:3e:e4:d4:4b:e7:d5:dd:1e:29:af:e1:87:
                    66:2f:00:98:3d:8a:29:88:61:88:95:a0:52:04:af:
                    58:80:e9:74:cd:e4:a0:0c:5d:b1:e0:c8:71:0d:c1:
                    d6:c8:7c:5f:f4:73:68:d4:e1:03:07:99:52:5a:b6:
                    32:f3:3d:86:2f:ed:e2:fb:9d:4c:02:2c:d6:c6:b1:
                    91:b0:98:fd:d0:0d:e9:0d:f4:7b:f4:bf:51:2b:fa:
                    3a:27:f4:56:fa:68:47:77:50:00:c1:e0:04:5c:8e:
                    c9:d5:21:dc:b8:65:4a:e9:32:36:7d:84:5c:7a:90:
                    a0:a6:e1:13:d3:d2:5a:a5:54:c4:1f:47:17:4c:eb:
                    2f:56:52:37:f9:32:2e:a0:77:bf:8c:93:e4:2a:b8:
                    47:72:0a:34:e5:8e:0f:25:e3:99:5a:c0:19:88:a4:
                    18:f1:87:95:21:e0:77:5d:26:e4:8c:4e:c5:b6:9a:
                    d4:04:62:71:c4:9b:7a:3b:a9:fc:a7:0c:e9:e0:e6:
                    2d:a1:65:34:78:58:6a:5c:6d:f2:31:c8:fe:11:73:
                    d4:b4:22:d9:ad:61:07:20:05:51:8c:67:ac:67:f2:
                    d7:4d:64:c0:0c:84:75:06:bf:62:bc:24:bc:88:82:
                    2b:71:77:a8:59:fe:af:86:ae:5d:0d:a3:ea:82:ad:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:7F:40:9E:23:6C:EF:23:00:F6:99:42:9E:09:FC:43:21:36:E8
            X509v3 Authority Key Identifier:
                keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3c:22:71:14:9c:6e:15:ac:e3:73:e2:3a:87:96:d4:dc:3e:
         bf:cd:90:5e:bf:81:4d:4c:24:8d:41:47:3f:2e:db:98:40:06:
         88:58:15:9f:1e:06:3b:de:7f:5c:21:0b:fb:85:6f:a4:b7:2d:
         55:64:d7:a7:6e:65:8d:dd:7e:1e:47:61:75:a7:b6:68:b4:4a:
         b4:7d:b3:2b:34:07:f6:5e:65:c8:99:de:1a:63:5a:a8:f3:19:
         2d:5e:9d:28:ca:4c:66:ce:ec:1a:4d:a6:34:2c:1d:0b:47:f0:
         e4:30:c3:ad:63:01:70:97:6c:3d:80:d3:b8:30:da:f5:cc:3a:
         f0:ba:18:59:2f:d9:da:f4:cd:67:ac:13:92:72:e2:2e:e8:ea:
         8a:f7:51:1b:08:7a:d3:87:63:bd:45:ef:8b:40:1d:19:4b:6d:
         e7:4b:7e:ac:bc:45:19:dd:2c:41:a6:a8:84:b7:5e:d8:5e:2a:
         03:5d:1e:a8:b1:55:90:45:56:58:9f:ff:8c:43:86:b8:43:7c:
         8a:9b:ab:29:af:00:a8:23:a1:58:37:49:09:63:8e:39:bd:62:
         a5:3a:7d:29:b7:22:2c:a9:50:b0:a7:72:dc:da:bb:43:c7:e4:
         4e:2f:3f:7c:ef:88:9d:12:7b:af:ab:dd:aa:2d:e1:73:17:a5:
         b3:c9:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:04:33 2024 by rpki-client on console-fra.rpki-client.org