Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File:                     3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier:          XW2is4Iw84dT4v0GvYTJLWwyE1BP+VaiGLWZdcDKqtM=
Subject key identifier:   04:2E:D9:18:63:A4:51:93:C9:B1:8C:5C:B7:59:2F:DF:6E:31:FF:AA
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer:       /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial:       01901BFCD7ECD0F73724720B7159DA276176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number:          1117
Signing time:             Sat 15 Jun 2024 13:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:13 +0000
Files and hashes:         1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: 2A9h25wRUYmOHALXEF2ihw5zBuerdB/ZBlyaJRrdvfo=)
                          2: zT27IWSWIQOtH3t5JpEAiW21MXQ.roa (hash: pLSDizvQ5Ro5Ng1RTRGvK1Edp7sHn4oy/DHomPtGunE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:d7:ec:d0:f7:37:24:72:0b:71:59:da:27:61:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
        Validity
            Not Before: Jun 15 13:01:13 2024 GMT
            Not After : Jun 16 13:01:13 2024 GMT
        Subject: CN=042ed91863a45193c9b18c5cb7592fdf6e31ffaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:73:b6:8d:ff:fb:e8:4a:83:0b:27:48:cd:
                    5c:56:76:76:51:1c:2c:6f:ba:24:d3:69:f8:ee:f6:
                    d9:54:83:69:7b:72:c8:e6:ae:df:ba:b5:c9:ec:b3:
                    0d:e5:f6:88:cd:2a:a3:64:b5:00:dc:de:6b:ad:3c:
                    2b:af:c8:c4:1e:88:cd:16:3d:e7:41:72:ac:64:aa:
                    0b:4e:a6:af:f8:9e:d4:28:09:5e:fd:2e:f2:1f:e9:
                    30:7b:fe:a5:4e:c7:31:42:b8:55:4d:8e:86:e5:ee:
                    62:61:39:63:93:8c:ec:79:da:e0:90:da:76:f1:bf:
                    cc:41:52:75:99:3e:a0:b2:a2:dd:4e:85:3e:a2:26:
                    f3:08:7d:9f:3a:37:e0:ac:76:5d:53:58:76:5b:43:
                    1f:0a:8f:0b:71:cc:a3:18:1b:6a:9c:f6:4a:10:a6:
                    0d:d9:a3:0f:78:31:a8:39:97:ab:de:2a:ae:04:75:
                    2a:ec:f0:e8:65:12:12:bc:0c:b2:bd:8c:c2:25:a4:
                    68:32:ce:2b:b6:6f:9c:09:62:49:eb:04:8c:92:4b:
                    fd:04:34:95:95:b1:a8:24:d4:4c:e1:50:93:00:ff:
                    60:b0:49:d9:bc:e6:67:46:4f:64:43:c2:72:32:9f:
                    05:9d:c5:4c:48:b4:09:b3:ad:b6:61:cd:87:52:5b:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2E:D9:18:63:A4:51:93:C9:B1:8C:5C:B7:59:2F:DF:6E:31:FF:AA
            X509v3 Authority Key Identifier:
                keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c2:0a:52:52:77:18:35:d2:2f:aa:ae:de:2c:74:83:8c:c3:
         43:58:6d:9d:18:ec:71:10:95:d0:81:19:b1:46:86:4d:23:52:
         ed:0f:e3:23:f1:07:88:6d:bf:5e:27:af:57:1b:32:f4:69:1d:
         f2:ce:70:08:33:d8:4c:c9:e6:75:71:fc:c5:41:61:00:97:30:
         80:01:a8:d9:9b:c5:5a:44:67:b1:dc:e7:8d:61:f9:59:bd:14:
         d8:22:fb:0e:07:6a:c8:4c:b1:93:1a:32:b6:0c:07:f1:57:f3:
         e5:d2:ab:66:33:2c:35:d1:c7:48:04:36:0e:a1:b8:e1:50:04:
         63:d5:82:ca:88:38:57:29:df:27:50:85:b0:ea:9b:61:85:01:
         d1:d8:09:c7:e8:13:d8:8f:62:56:99:3e:11:fb:74:5d:90:87:
         09:68:51:b1:99:4f:d5:b7:01:7e:d7:73:de:a4:2f:54:1e:3c:
         b0:48:ef:01:fb:78:36:d4:1b:34:c9:02:97:c9:bb:3d:20:24:
         e1:88:d6:da:ad:d1:1a:9d:0f:8a:e6:91:cf:84:5c:ce:a7:36:
         f6:e1:1c:8e:9f:f5:54:12:4d:57:c3:53:04:1d:34:7b:10:54:
         ae:26:cf:bd:5b:30:b3:1c:fd:9a:ad:df:9c:8a:5e:0b:04:78:
         39:de:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:37:51 2024 by rpki-client on console-ams.rpki-client.org