Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          h7fjfHV9boUfih5L/eStj/uKpdwTYnOfaLwvqqTuWhY=
Subject key identifier:   E7:23:EB:40:D0:D2:48:DA:C1:64:B1:69:09:4B:24:6B:47:74:7D:7C
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       01901F3505F4A9AFC46E6364A48205CB13A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          11CF
Signing time:             Sun 16 Jun 2024 04:01:26 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:26 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:26 +0000
Files and hashes:         1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: 82HYMX5PLv7VXeJlWir2HVAec/Mr3vYjb3YAIIOfj78=)
                          2: KjG42r7hsWune8v3S014MmWNv6I.roa (hash: TPVmjh8y91InJWiEKuBHLKHL9773ucwDIuT+QFl0ru8=)
                          3: UgHu7weosoACc9T3B5WhoI94l1Y.roa (hash: dT7OvVs1aStmoZClf0GA1V1nqOTf6ySOqjY8iY4sv2g=)
                          4: UsVlEaG-Hu6Tokjj1-Tk5mm9HmE.roa (hash: Mi84e0XDCgj9KmMqvuj+F3gR5rgOKglOnn3szbZOxOs=)
                          5: aSDSVsOk4qsC08kLNXUYQTFhALM.roa (hash: iMkYLlB0o/627kQPa9aDJ2DBJ/HUPcjSgsjb3OxDim8=)
                          6: mBG3mq_YQrRaTE_2oY73QK8EzSM.roa (hash: c/SUHUwQsj1PhTT8zKZlQ+SBGuh1OQdY63PPLkioEMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:35:05:f4:a9:af:c4:6e:63:64:a4:82:05:cb:13:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Jun 16 04:01:26 2024 GMT
            Not After : Jun 17 04:01:26 2024 GMT
        Subject: CN=e723eb40d0d248dac164b169094b246b47747d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:a2:e8:08:b0:86:5e:bd:3e:d4:db:e2:4a:
                    b7:d9:82:59:1d:9e:82:fb:41:d6:6f:46:b4:15:93:
                    55:e3:2d:da:07:80:44:6b:74:89:3d:bb:40:05:e4:
                    35:68:14:d6:a1:88:9d:7f:43:4a:35:eb:0a:c4:f8:
                    25:96:06:ab:60:c5:08:f9:8d:a3:42:56:37:05:1b:
                    7f:8e:e8:a1:73:c0:35:2b:72:84:bf:39:6d:0d:92:
                    3a:57:41:05:bb:5f:80:7e:c9:96:42:5f:e7:2c:e8:
                    7a:67:fe:df:a7:55:9e:07:aa:57:be:ca:60:62:37:
                    d0:c9:da:29:96:60:3a:e4:68:74:37:2d:02:2b:b1:
                    f6:bc:19:10:20:4a:4a:c2:bb:13:d7:0a:32:19:e3:
                    30:79:cc:3e:ea:31:c5:60:97:b4:a7:57:9e:3e:3c:
                    f7:3d:7d:ab:5f:be:7e:b0:60:21:37:3a:88:b9:32:
                    20:6a:bb:63:76:2d:10:5e:28:8c:8d:fb:50:f9:8f:
                    75:50:80:73:eb:16:37:6a:11:ae:9b:d6:0d:0a:90:
                    1c:1e:72:7c:5b:47:b2:19:01:9b:bb:0c:f1:3c:b6:
                    52:23:d7:16:97:d5:41:ee:6f:59:a2:db:97:81:f4:
                    90:e1:01:c5:e1:4d:66:60:87:a0:20:86:08:ed:4f:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:23:EB:40:D0:D2:48:DA:C1:64:B1:69:09:4B:24:6B:47:74:7D:7C
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:6f:4d:a8:9c:03:a2:3e:2f:5b:f3:33:8d:19:bc:02:54:
         de:f5:6e:ef:5d:79:38:a7:9c:b7:81:56:d5:a6:78:75:94:be:
         a8:0b:42:a4:1e:3b:fb:cd:bd:ae:a3:86:42:71:26:5b:3e:a4:
         5b:1b:37:16:c3:a6:a5:38:f6:5b:b3:87:66:35:c6:f2:f3:0d:
         6f:de:22:f7:7b:f3:1f:55:21:63:73:23:4a:0e:c3:ea:a2:ec:
         3c:7e:a5:45:88:85:34:3e:c8:87:43:30:31:cf:03:d6:c2:57:
         81:3f:5e:70:7c:58:90:50:be:b6:fb:be:11:f8:e0:24:7b:b9:
         48:6a:44:d7:bf:cc:9c:a7:7d:4c:7b:cf:4a:b7:f5:b2:d8:40:
         34:59:bd:9e:b4:c0:88:4c:cf:a4:91:6e:2a:e1:f5:c3:49:c0:
         e0:d4:33:7b:24:e3:3c:a9:ce:ff:f0:f7:43:91:ca:d8:98:f3:
         3c:7b:5d:27:44:f2:cc:90:da:a2:9e:01:0e:bc:c6:a4:28:75:
         c7:66:51:aa:0b:47:ee:4f:44:de:07:e9:6b:69:de:6c:13:d4:
         09:ee:1d:a2:6f:be:bb:36:7b:16:d0:b9:6a:41:4e:3a:df:2c:
         d0:ca:00:13:82:57:3c:b0:84:5a:1c:5d:ae:57:91:ad:38:b8:
         c5:5a:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:27 2024 by rpki-client on console-fra.rpki-client.org