Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File:                     3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier:          331nL0V9XtXqlUs90+tEyTxgR14DPwG9aW2XF6OJfww=
Subject key identifier:   74:01:D4:EB:1D:16:2B:04:32:0C:5E:9D:24:8B:95:F5:18:35:F4:35
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer:       /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial:       01901EFDB501A4735963B3BA11DAD15EE099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:01 +0000
Files and hashes:         1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: QkFvnh9VXYCsnn0UvdVGMfj7cGnpuzIL1vU37klZVbg=)
                          2: 9iOelXrsj2P6jIgOTvT1qauDzJc.roa (hash: Jmu33ZU3fOXHQp6eA6xg203rCZOopDTmEk0KXS81tHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:b5:01:a4:73:59:63:b3:ba:11:da:d1:5e:e0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
        Validity
            Not Before: Jun 16 03:01:01 2024 GMT
            Not After : Jun 17 03:01:01 2024 GMT
        Subject: CN=7401d4eb1d162b04320c5e9d248b95f51835f435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:76:3c:4e:e1:1a:80:41:df:f2:37:90:0e:
                    e7:33:3d:bc:97:49:eb:07:ca:85:92:5c:47:91:e2:
                    fc:1e:96:30:6a:bd:6e:04:18:9c:73:06:8a:f8:07:
                    bb:f3:78:fe:3b:97:d0:c9:6b:2a:2f:5b:5c:5b:ad:
                    2b:1c:b1:1b:af:d2:6b:2d:e9:60:9c:c1:71:80:4b:
                    bb:fd:c1:b7:43:ed:43:c7:f9:42:52:58:27:59:33:
                    f3:2f:dd:07:16:09:4f:b4:0a:55:95:82:69:c2:21:
                    a0:49:94:b0:20:7e:ff:ca:8c:e2:d4:5b:16:d9:c7:
                    39:d4:a3:93:f9:fa:0b:a2:74:f2:64:64:a3:ee:f0:
                    1d:c6:6f:66:ac:96:95:13:ce:18:4d:98:c8:17:99:
                    31:c7:7b:27:1f:2d:c4:67:58:df:db:28:cb:d0:7f:
                    da:e8:bb:ad:70:62:7a:35:72:76:d1:7f:ea:3b:7b:
                    32:a6:1a:08:96:25:e8:96:b0:c2:b3:83:b9:61:0f:
                    d3:93:91:38:0f:6e:96:ff:a9:f1:22:aa:66:e2:b2:
                    84:91:0d:44:8e:bc:ae:42:7a:ea:cd:c0:b7:2a:59:
                    bd:b6:bf:6d:3d:b8:28:8c:40:a9:e3:1f:17:76:53:
                    76:30:7a:74:8b:80:df:4c:14:6c:90:93:3f:d2:f2:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:D4:EB:1D:16:2B:04:32:0C:5E:9D:24:8B:95:F5:18:35:F4:35
            X509v3 Authority Key Identifier:
                keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7f:40:19:b1:7f:a1:e4:2b:5a:81:e0:67:2c:85:f6:7f:5d:
         3a:a2:20:ba:d2:52:6e:d0:93:37:54:d4:83:72:59:b2:64:f6:
         72:99:6b:75:ac:df:06:5e:ba:70:5a:9c:b4:9e:6c:c0:18:ce:
         42:4a:e0:04:eb:71:83:62:4c:30:a2:d4:be:f5:69:29:2e:0f:
         64:56:b1:b2:af:80:f5:d1:c0:c7:08:e5:56:9d:37:ce:90:eb:
         38:a5:4e:59:3b:7e:63:84:af:77:d1:6e:a9:7f:76:0f:c4:57:
         ee:c4:4f:56:d8:d9:b6:ea:90:7f:0d:b1:dd:a0:12:0d:1c:4f:
         fe:1e:06:e2:89:0e:8c:91:4e:65:ed:7b:1e:f4:7d:2c:9f:8f:
         57:0a:dc:00:96:05:bd:39:b8:22:ec:46:11:a3:6e:6f:8b:1e:
         55:97:ef:eb:d9:35:4c:b7:30:6c:ee:60:4a:6d:06:e8:67:2a:
         78:28:bc:de:0b:b7:11:e1:5c:7b:16:50:d4:86:92:71:73:ca:
         fe:6a:7a:10:9a:2c:3e:9b:11:24:69:fd:df:76:e7:69:70:54:
         07:cf:05:cc:08:a2:36:d3:9a:01:7b:81:b4:c8:46:31:00:0c:
         a2:7d:22:c7:bf:7e:2a:53:cc:20:f0:db:dc:a5:8a:0e:6c:1b:
         8b:22:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:25 2024 by rpki-client on console-fra.rpki-client.org