Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File:                     f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier:          74XQ7uMVpuFzKMjI3poHE1k2YomyG1aR0mVcPSaOZ2o=
Subject key identifier:   3C:97:36:40:08:8C:5F:9D:0D:BC:B4:CC:0F:AD:58:73:67:4F:E2:38
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer:       /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial:       0190742D2ECFF0FD3A6AE423811E278AB431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number:          4B
Signing time:             Tue 02 Jul 2024 16:00:36 +0000
Manifest this update:     Tue 02 Jul 2024 16:00:36 +0000
Manifest next update:     Wed 03 Jul 2024 16:00:36 +0000
Files and hashes:         1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: SAJZCHa4M2gII7GlNM8HKDOsx/nE655TWqpBe+XZK8A=)
                          2: pdWUbZJPr3Nv5DSWkwgRVO4PQ2k.roa (hash: 07RggR5Yc/EYWo1xKEG+e5dvBI/CcK0lSIxWOYrJPZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:2d:2e:cf:f0:fd:3a:6a:e4:23:81:1e:27:8a:b4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
        Validity
            Not Before: Jul  2 16:00:36 2024 GMT
            Not After : Jul  3 16:00:36 2024 GMT
        Subject: CN=3c973640088c5f9d0dbcb4cc0fad5873674fe238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:da:41:9d:ed:93:f8:ae:5a:ec:d7:dd:89:
                    6e:1d:bb:78:ee:64:3a:70:c7:2c:7f:e5:80:3c:f2:
                    e9:61:f3:bd:9a:ec:a0:1b:68:63:10:20:bb:c5:c2:
                    9f:51:aa:9f:2d:fe:80:e0:44:92:e3:d4:bc:97:be:
                    bb:32:1e:da:8b:a3:48:fa:d3:03:2b:c7:a1:8b:e5:
                    ff:61:b8:06:82:bb:d6:5d:d8:98:17:74:9b:ef:c5:
                    2a:c6:e7:cb:86:9d:79:dd:ed:fa:24:af:00:d7:03:
                    46:2b:6c:9c:a1:49:05:b9:be:fe:f5:50:d7:7e:48:
                    33:9d:51:76:bf:54:69:72:1f:f9:9b:1d:75:80:13:
                    1e:9b:83:2c:e1:61:62:68:87:37:ec:30:94:18:03:
                    43:ba:d5:b0:12:e9:3b:67:5e:2d:54:af:81:8c:1d:
                    59:09:b2:b8:f0:21:91:59:67:dc:3f:53:44:5d:86:
                    f0:b6:79:03:51:7d:f4:fe:d8:2b:38:4c:c7:d7:32:
                    e7:45:72:cd:07:ff:b2:02:7a:56:50:aa:7c:b7:fb:
                    2b:d7:3b:fe:c3:5f:b3:e9:7e:40:f8:41:4a:9e:c4:
                    50:a2:83:8a:79:9f:37:c4:fd:07:5f:a7:c1:10:60:
                    9e:ef:bb:fe:b8:38:a7:00:a8:c0:6e:d1:05:b9:93:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:97:36:40:08:8C:5F:9D:0D:BC:B4:CC:0F:AD:58:73:67:4F:E2:38
            X509v3 Authority Key Identifier:
                keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:30:fa:d5:83:3c:d7:f3:73:42:c8:94:3b:8b:9c:72:e6:
         70:9f:56:d4:be:d1:0b:3b:8d:3e:da:53:ad:32:5d:83:93:1e:
         4a:a1:ad:38:43:fb:96:c6:a7:8e:6a:af:a5:9f:fd:ac:1f:9a:
         9c:57:e6:f1:56:d4:d2:64:b3:64:14:96:43:f7:44:d5:52:19:
         d7:ae:1f:ee:e2:ab:a3:78:b3:45:97:30:ca:2e:49:a8:65:45:
         43:0a:b9:59:0b:36:05:f7:cb:c9:f2:f4:85:41:ed:45:68:9a:
         89:91:50:2c:de:cc:7d:ea:0c:79:7d:fb:6a:d8:2e:f0:05:a1:
         db:06:53:0f:19:e7:92:2e:1c:60:86:dd:59:70:16:ba:40:b4:
         ff:4d:09:3d:bd:77:85:cc:0a:bc:56:8d:60:35:9f:31:f1:68:
         8f:a1:4b:ab:99:9f:ea:87:e5:31:b9:6e:5e:c9:87:64:88:2b:
         da:69:e5:d8:22:5b:59:f6:20:04:05:1b:a0:cb:db:eb:b6:9c:
         0c:23:09:15:4a:07:a7:9d:91:48:29:d2:f8:cc:31:ce:b4:be:
         de:9f:46:f9:ff:97:22:da:4d:bd:23:75:d7:3a:3f:35:d9:7b:
         2b:eb:16:05:e8:89:ec:76:f2:6e:14:60:92:34:40:aa:92:16:
         3b:20:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:37:13 2024 by rpki-client on console-fra.rpki-client.org