Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File:                     3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier:          no8EJtCGU1ixVEg1QLqnOB0UXVLeq5LT6A499pLoNJI=
Subject key identifier:   90:B7:0C:6F:2C:16:AA:FD:2E:11:F0:A7:12:EE:E1:B9:C3:3A:8F:FC
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer:       /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial:       01901BFD0633A07197E1A6FA2BE9E8266C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number:          05D1
Signing time:             Sat 15 Jun 2024 13:01:25 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:25 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:25 +0000
Files and hashes:         1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: Jm7GrUZvlxRQHmH30UnTWIRe8uZeKvcJ3id5UgBywds=)
                          2: HGJX27GXVPS4-Sh7KYOLtXA2lsk.roa (hash: ktUOYmvxvNnEDaOyvbNYmuzDQIxtFAbjVvU/kz1DvfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:06:33:a0:71:97:e1:a6:fa:2b:e9:e8:26:6c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
        Validity
            Not Before: Jun 15 13:01:25 2024 GMT
            Not After : Jun 16 13:01:25 2024 GMT
        Subject: CN=90b70c6f2c16aafd2e11f0a712eee1b9c33a8ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:32:d1:b4:3a:55:82:21:98:a7:db:a0:2c:
                    a9:a9:1f:88:42:51:54:7b:74:83:8a:15:03:5f:38:
                    1c:5d:0f:f8:2a:cb:da:d8:3a:a5:96:64:f3:9c:65:
                    fb:87:79:27:b8:18:cd:b6:0f:75:5c:56:ec:22:53:
                    bf:4b:52:f0:74:dd:fa:e1:60:d7:e4:79:0a:bc:f5:
                    fb:6d:b6:6d:bf:56:74:a1:03:10:88:cc:59:0f:a7:
                    c6:56:83:3e:c5:e6:da:76:92:b6:49:d7:39:74:84:
                    0d:39:cc:32:74:f0:f3:38:1e:1e:03:d0:e6:9d:2b:
                    6c:3a:06:30:b8:67:ae:cd:b6:c7:4d:cd:10:c5:06:
                    02:31:e5:b2:f6:23:f7:fb:7c:ea:f7:6b:da:f3:e5:
                    82:52:fe:de:d0:dc:84:51:f0:cb:81:47:d2:c4:10:
                    0d:50:a3:f6:e3:86:ff:3d:d6:e2:7b:46:49:24:bc:
                    c7:43:ce:0f:67:e1:21:aa:eb:2a:7a:a9:c4:8f:94:
                    89:fa:80:a4:d9:4d:66:7d:b5:a9:8a:31:f8:1a:41:
                    d6:d1:d3:a5:89:db:66:8c:98:c4:99:29:bd:ff:d8:
                    fa:f2:39:b2:42:2f:1a:0a:c5:2e:5f:a2:e0:1b:57:
                    ad:7a:ea:74:de:a6:a7:96:9c:ee:39:dc:a8:e4:23:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B7:0C:6F:2C:16:AA:FD:2E:11:F0:A7:12:EE:E1:B9:C3:3A:8F:FC
            X509v3 Authority Key Identifier:
                keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:9e:c3:48:ef:0e:37:45:7e:c9:d3:9c:b3:17:c8:1b:c2:
         f1:bb:d6:8b:c4:1a:a6:b9:75:06:7d:42:34:be:5e:53:99:73:
         0b:c4:26:44:54:0f:3c:f6:48:ac:86:e9:4f:77:0a:60:ec:17:
         0d:f7:36:a9:7d:a2:ec:45:51:10:9c:2a:fb:af:80:21:48:01:
         6f:04:17:7a:1c:71:bb:f1:66:07:de:92:6c:bf:52:1e:75:04:
         1d:a0:4c:b7:b0:98:1e:08:27:4b:40:08:86:be:06:7f:24:52:
         58:ef:f9:84:4a:dc:94:aa:5d:48:5b:31:8d:34:1b:99:6d:dd:
         15:c3:3b:f1:50:7e:df:dd:02:96:b7:cc:e6:dc:78:4e:a2:ca:
         d4:ba:1a:ab:5f:03:74:b6:e9:70:12:c4:f8:e9:58:a9:41:02:
         cb:e7:d1:a8:3b:4c:84:a9:38:c3:7c:6e:93:10:ca:65:04:5a:
         c4:73:fa:0a:f1:3b:fa:e8:0f:bf:6d:e5:97:e2:e0:b0:31:6e:
         64:06:78:65:9a:3e:7f:cf:ed:14:c3:32:d2:05:d1:45:9e:d1:
         d5:02:6a:62:20:ef:a1:7e:ec:73:20:d5:dc:30:c4:22:43:c9:
         20:a8:30:55:c4:42:8b:79:77:e0:e2:b2:a9:bd:35:45:d5:3e:
         f7:3d:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:35:12 2024 by rpki-client on console-fra.rpki-client.org