Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File:                     3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier:          is/skgl4ME4OXcx9sgiKcvyhlKIrWonJhdQlAepld5M=
Subject key identifier:   F2:34:F4:DB:EF:A0:C9:57:94:F6:A2:01:E2:7E:C9:85:44:85:DE:36
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer:       /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial:       0190452FC97A10B084A1D37294DEC930C51F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number:          11DE
Signing time:             Sun 23 Jun 2024 13:01:17 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:17 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:17 +0000
Files and hashes:         1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: FTes8qYZWQlHx1fb0eZKgKuwVcAIGeW4dzeh0/DZbKo=)
                          2: RE7BaNwDFBQibq66dggVliVLXSo.roa (hash: 2TfLrozkW0wcGiGdvHXM0I0blxEp2fGLpUjeQfZQAPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:c9:7a:10:b0:84:a1:d3:72:94:de:c9:30:c5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
        Validity
            Not Before: Jun 23 13:01:17 2024 GMT
            Not After : Jun 24 13:01:17 2024 GMT
        Subject: CN=f234f4dbefa0c95794f6a201e27ec9854485de36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:16:f1:d0:88:a2:ab:ae:e8:27:67:eb:cc:
                    59:4a:86:64:e5:ab:bc:df:af:e9:ee:52:e2:ab:60:
                    93:c8:be:d6:2b:4b:c0:28:a2:08:8d:34:e5:fe:47:
                    22:86:d9:f1:70:8d:3c:f7:e7:d3:7a:a9:3d:69:76:
                    84:0b:25:90:cf:2f:30:0f:d0:88:e3:46:93:ce:61:
                    76:08:21:90:cc:d1:23:e4:fa:fe:54:72:e4:a6:a0:
                    ab:08:37:64:0c:46:7f:cf:d7:4e:db:fe:e3:88:54:
                    1c:a0:a2:ce:6b:5b:98:6f:31:3c:8b:0a:10:fc:92:
                    3a:97:7f:47:fd:0d:b4:b9:ec:cb:2c:25:32:ee:f4:
                    bb:2c:cc:4c:06:50:45:f5:2e:b5:84:5a:fa:05:5e:
                    80:73:79:2c:a0:c0:75:92:02:65:5e:a2:fc:1b:c0:
                    6a:4c:6d:d6:a6:e7:a2:9f:38:80:a7:2b:b1:c0:2b:
                    dc:12:07:fb:73:59:0d:31:39:22:bb:33:94:07:52:
                    4b:cf:f2:1c:d0:51:58:0a:f9:ea:84:25:a3:9b:65:
                    fe:9f:06:fc:cf:1d:ba:e8:23:35:6f:a7:47:a5:e2:
                    3e:59:b8:8d:00:70:87:fa:56:48:e2:dc:0b:95:19:
                    26:37:85:67:0d:13:15:3d:ba:df:c5:72:2f:23:13:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:F4:DB:EF:A0:C9:57:94:F6:A2:01:E2:7E:C9:85:44:85:DE:36
            X509v3 Authority Key Identifier:
                keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bd:ca:51:ac:dd:a7:cf:9f:34:21:27:96:7c:1d:6f:e3:0e:
         b4:df:92:80:8a:85:ee:f2:36:ab:46:31:3c:bf:ea:79:0e:45:
         a5:8f:fd:dc:6b:e3:f7:8a:61:b1:c7:4e:84:3c:42:f2:70:26:
         43:94:7a:ea:ba:a9:f5:2b:38:41:16:61:1c:71:68:b0:b7:ca:
         48:95:c7:62:75:e8:d6:d3:a3:d5:10:64:6e:b3:04:81:77:7b:
         6f:c7:14:9a:f0:90:38:a0:e4:ac:11:f0:d9:be:8e:18:16:f8:
         49:53:35:93:05:65:fb:bf:87:c6:00:cf:d9:34:9d:11:41:35:
         3e:64:af:ab:31:63:0e:4a:53:05:ca:63:7f:26:d3:39:a0:bd:
         01:2a:8d:17:10:ec:07:de:ff:1e:44:a0:4f:21:3c:78:2c:ba:
         e1:94:29:6e:b3:75:2e:ec:f4:88:16:0b:59:06:b5:09:db:dd:
         5f:62:be:a5:12:55:52:dc:ea:c3:78:b5:82:b7:d9:96:c2:44:
         fd:85:9e:00:d3:5a:e6:b5:e7:02:e0:7d:ee:2c:fd:1a:d3:20:
         8d:bd:0b:9b:17:97:8b:6e:f1:cc:8f:c7:2c:cd:1b:86:52:c7:
         16:6a:b7:af:5c:33:66:84:61:2a:5c:2a:15:63:8c:40:46:d4:
         70:f8:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:22:58 2024 by rpki-client on console-fra.rpki-client.org