Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File:                     FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier:          LId0imt0NxlT0gYvOOLUW+4pmVwCPqy1ChBIoNj10Bc=
Subject key identifier:   B7:9B:9A:0B:26:95:72:1C:F9:C9:15:28:F3:0D:62:4A:C1:AD:56:B6
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer:       /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial:       01936A0F8088E7EA3B5D3CE585FA690D6D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number:          1277
Signing time:             Tue 26 Nov 2024 20:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:20 +0000
Files and hashes:         1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: 3SN4y6FD2589MK3VTyLIcCkKQOaaebnCXNkRUU4Zlw4=)
                          2: wIo7gRbp7iZb-2jeRG9lGC-Re6Y.roa (hash: c/R2Gc35kkHkhxpw6cMeoVLqiOGAlcAA0Z2M+GPKUTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:80:88:e7:ea:3b:5d:3c:e5:85:fa:69:0d:6d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
        Validity
            Not Before: Nov 26 20:00:20 2024 GMT
            Not After : Nov 27 20:00:20 2024 GMT
        Subject: CN=b79b9a0b2695721cf9c91528f30d624ac1ad56b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:5b:15:ad:f2:16:eb:b1:de:d6:0d:46:05:
                    ae:fb:59:ab:cb:52:a6:17:c9:c7:c4:df:18:aa:3e:
                    60:6c:05:21:25:e6:58:b6:d1:87:ab:99:91:7f:5b:
                    a3:69:c7:0d:20:f1:e5:01:de:f6:b3:c7:da:28:92:
                    64:76:4f:55:d8:8a:b1:98:48:a7:cd:e8:39:93:42:
                    46:f1:e5:e4:ab:87:57:a8:8d:af:ac:95:71:b0:dc:
                    31:9d:04:d2:fc:14:eb:a7:3b:1c:93:28:d5:c5:e7:
                    80:24:65:76:b3:8d:56:34:22:f1:79:e2:c8:0c:c0:
                    f3:91:ea:97:cf:49:8c:29:da:ec:3b:11:8d:ac:b7:
                    95:9e:32:e3:a8:2c:78:1a:79:ab:27:47:4e:41:f9:
                    77:0c:33:06:97:30:12:87:8a:9d:56:80:69:c8:94:
                    89:60:18:d1:fe:9f:55:8c:e3:ae:3c:39:2f:f5:08:
                    5a:84:45:f9:66:77:19:d7:1c:55:d0:b0:3c:bc:b3:
                    dc:2e:1d:94:6b:45:ae:14:e3:77:b7:f3:3b:ec:b4:
                    c2:dd:8b:fc:e1:28:8e:3d:c8:29:57:7e:e9:e5:cc:
                    1a:a4:73:aa:c2:a8:ec:1a:c3:62:18:17:14:6d:05:
                    f4:86:b5:fd:1f:24:11:f5:77:a2:39:4d:7b:fa:63:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:9A:0B:26:95:72:1C:F9:C9:15:28:F3:0D:62:4A:C1:AD:56:B6
            X509v3 Authority Key Identifier:
                keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:1b:0e:a7:44:60:57:b6:d0:a0:36:d1:32:fd:8c:d4:76:
         c4:de:37:63:46:40:e2:cb:82:89:69:81:78:a2:b5:b2:89:a8:
         d5:70:f6:f0:f4:8f:87:06:7f:60:c5:d5:b6:93:d1:7a:52:b7:
         e3:d8:5d:f9:e8:f0:3a:f6:42:a8:c7:fc:60:16:f6:c8:5e:85:
         2f:83:80:14:32:cd:32:02:e9:07:eb:db:32:b2:47:16:cf:8a:
         69:32:89:44:eb:d8:6d:12:84:12:6e:c6:26:f1:7c:31:77:d5:
         ff:24:e9:54:41:fe:28:65:19:46:09:fa:12:57:97:8a:dd:d0:
         84:3b:8b:2a:ce:54:4e:da:4c:2d:c1:3e:99:bf:fa:f9:1c:a1:
         d1:3a:5b:76:7d:00:dc:e0:1d:d9:48:69:0b:ac:c5:a6:4b:46:
         02:f8:56:05:99:00:9b:3f:eb:80:43:3e:7a:20:cf:98:7e:94:
         e3:1c:16:91:bd:24:60:cc:ab:41:bd:ea:c7:b7:ad:a2:d7:c0:
         62:50:a4:7c:03:eb:ac:89:6f:b3:33:a6:cb:f1:b1:52:03:d4:
         e8:37:3e:c4:ee:f5:01:45:e7:e5:09:f8:e8:60:a2:66:d0:15:
         b8:56:cf:af:1a:49:b0:29:86:10:2b:d4:f0:84:e6:a8:0b:2e:
         f4:fd:ee:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqD4CI5+o7XTzlhfppDW2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzg1YzA0OGNmM2Q1YjIxODY5ZjQ5NDM0ZjJkM2JiNDdk
NDNiYTEwHhcNMjQxMTI2MjAwMDIwWhcNMjQxMTI3MjAwMDIwWjAzMTEwLwYDVQQD
EyhiNzliOWEwYjI2OTU3MjFjZjljOTE1MjhmMzBkNjI0YWMxYWQ1NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeVbFa3yFuux3tYNRgWu+1mry1Km
F8nHxN8Yqj5gbAUhJeZYttGHq5mRf1ujaccNIPHlAd72s8faKJJkdk9V2IqxmEin
zeg5k0JG8eXkq4dXqI2vrJVxsNwxnQTS/BTrpzsckyjVxeeAJGV2s41WNCLxeeLI
DMDzkeqXz0mMKdrsOxGNrLeVnjLjqCx4GnmrJ0dOQfl3DDMGlzASh4qdVoBpyJSJ
YBjR/p9VjOOuPDkv9QhahEX5ZncZ1xxV0LA8vLPcLh2Ua0WuFON3t/M77LTC3Yv8
4SiOPcgpV37p5cwapHOqwqjsGsNiGBcUbQX0hrX9HyQR9XeiOU17+mO8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLebmgsmlXIc+ckVKPMNYkrBrVa2MB8GA1UdIwQY
MBaAFBZ4XASM89WyGGn0lDTy07tH1DuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAt
YWIzN2ZlZDUyYTRkLzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAtYWIzN2ZlZDUyYTRk
LzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADksbDqdE
YFe20KA20TL9jNR2xN43Y0ZA4suCiWmBeKK1somo1XD28PSPhwZ/YMXVtpPRelK3
49hd+ejwOvZCqMf8YBb2yF6FL4OAFDLNMgLpB+vbMrJHFs+KaTKJROvYbRKEEm7G
JvF8MXfV/yTpVEH+KGUZRgn6EleXit3QhDuLKs5UTtpMLcE+mb/6+Ryh0Tpbdn0A
3OAd2UhpC6zFpktGAvhWBZkAmz/rgEM+eiDPmH6U4xwWkb0kYMyrQb3qx7etotfA
YlCkfAPrrIlvszOmy/GxUgPU6Dc+xO71AUXn5Qn46GCiZtAVuFbPrxpJsCmGECvU
8ITmqAsu9P3uoQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:52 2024 by rpki-client on console-fra.rpki-client.org