Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File:                     z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier:          5EcxrXfFibFkUEJra+qRIzyBoCGAYxH2kGx+N/Y7R/I=
Subject key identifier:   A3:8A:2C:C4:41:EC:E7:06:C7:E9:33:62:AC:AD:F7:97:4E:C7:70:BE
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer:       /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial:       01901E8F97B0AC3CC372FFEF070513863DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number:          0C36
Signing time:             Sun 16 Jun 2024 01:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:45 +0000
Files and hashes:         1: nXo0jQC_N_DawW_obVGdmjMKql0.roa (hash: rT/ivrPts8m/Eqz+yl5RIBZ8n9uYQG+8gCFXajN6J6c=)
                          2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: lW8rPSoGq4Ui07eOEn7qDgvvHszqeoX0uV2JkW8lJwE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:97:b0:ac:3c:c3:72:ff:ef:07:05:13:86:3d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
        Validity
            Not Before: Jun 16 01:00:45 2024 GMT
            Not After : Jun 17 01:00:45 2024 GMT
        Subject: CN=a38a2cc441ece706c7e93362acadf7974ec770be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:1b:09:eb:c9:78:5b:3e:46:07:4a:bc:52:
                    47:fb:7f:6e:b0:dd:15:e9:ae:38:84:82:4c:47:e0:
                    73:3a:ae:b0:9a:42:4e:ca:f6:45:18:21:e7:fa:7a:
                    1d:8a:2c:cb:33:47:15:ee:12:00:c8:2c:b3:34:87:
                    ff:d6:44:02:cd:c6:78:25:f7:63:64:0c:7d:93:03:
                    f5:f3:cb:3b:08:25:51:be:e9:eb:3f:39:f6:0b:83:
                    c3:84:b1:82:9d:5b:5d:98:a3:7d:8b:ab:13:7f:12:
                    74:e5:43:39:56:73:37:78:38:33:91:a5:92:bc:7a:
                    58:c5:eb:4f:a0:95:25:f5:9d:52:9e:3e:17:53:22:
                    8a:47:2f:a0:f7:a8:1c:75:09:5d:fe:03:54:ac:59:
                    19:f9:b8:e1:2f:54:32:a7:48:ea:2e:95:bb:52:d4:
                    fa:c4:67:ba:5b:a1:56:14:83:40:76:3f:b3:ee:44:
                    7e:84:64:82:d4:54:67:d1:85:82:af:3f:6e:48:3c:
                    f1:95:40:db:e7:ac:60:74:55:af:88:ed:7c:ad:0c:
                    17:82:94:46:8d:31:bc:d1:05:af:2b:14:4b:87:2f:
                    cd:a7:3e:54:4a:ae:e8:68:9d:c5:4a:b7:bb:3e:44:
                    bf:7e:2f:76:16:04:33:9b:a8:58:88:0d:b8:a1:d2:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8A:2C:C4:41:EC:E7:06:C7:E9:33:62:AC:AD:F7:97:4E:C7:70:BE
            X509v3 Authority Key Identifier:
                keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:43:9e:0f:19:9c:56:8d:da:7a:50:90:ad:c8:33:21:38:ad:
         a3:c4:cb:ef:fe:3b:fb:e4:3b:2a:65:d6:83:e3:8d:f3:9d:08:
         5f:5d:ba:18:cc:2e:bc:91:86:bf:4d:60:f2:18:7f:f6:37:08:
         10:ce:cc:01:fb:df:4b:6d:cf:4a:95:f6:e1:90:be:6a:c3:dc:
         c4:3a:16:1e:02:f1:0f:13:ac:3f:9b:44:ad:53:ba:0d:f8:2b:
         87:32:d8:c7:b0:89:86:4b:e4:59:16:7e:31:3c:77:76:37:57:
         a4:c1:a7:23:14:92:d0:bf:8f:2a:9c:44:8d:64:e9:6c:1b:06:
         4e:c7:0e:02:38:a0:8a:cf:f7:e3:e4:67:46:f6:8a:6c:67:4f:
         56:30:26:f9:96:90:4e:55:af:8e:26:36:87:86:be:1e:48:78:
         38:6e:1c:ea:9f:ee:da:31:bb:9d:92:34:28:14:ea:d6:d9:2a:
         e6:c8:85:ae:e0:cf:2d:28:36:a3:23:38:4e:a3:19:dd:71:05:
         79:26:da:ff:5f:35:f5:ea:70:68:bf:7d:4f:6d:54:e3:6e:33:
         e0:df:9d:57:fc:28:f4:90:bf:02:b2:8d:26:17:63:81:71:91:
         59:32:31:0e:7c:73:e4:1f:76:d0:15:4c:8a:71:43:d7:1b:03:
         86:b1:97:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:09:15 2024 by rpki-client on console-fra.rpki-client.org