Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File:                     _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier:          +UAwMv1avc3t7GiJpTiM6oZOCSvJL+4wq/In4gbGrQI=
Subject key identifier:   3F:E4:BE:35:3C:F7:9F:B7:45:DF:E9:38:0E:C8:40:24:42:2E:C3:39
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer:       /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial:       01901EFD62278FFBB8D891755E5D459899B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 03:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:40 +0000
Files and hashes:         1: XnC6vVSdPsQhIjNQUoTgPh_TThM.roa (hash: NUltdx3miBC9ez1knTvOMR6anX4FPpfRatECtOiZ8ak=)
                          2: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: XmfGDBEhC1oIQh+sSUpycdHmWXrrh/SUgsdfbKGah8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:62:27:8f:fb:b8:d8:91:75:5e:5d:45:98:99:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
        Validity
            Not Before: Jun 16 03:00:40 2024 GMT
            Not After : Jun 17 03:00:40 2024 GMT
        Subject: CN=3fe4be353cf79fb745dfe9380ec84024422ec339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:ed:2c:c6:90:9b:28:d4:8f:4c:d9:d5:b4:
                    a1:c4:84:79:7a:44:83:19:6e:79:fb:19:a1:0c:2b:
                    26:b0:3f:75:00:d8:79:0e:37:40:27:c3:24:e2:a9:
                    fb:69:98:48:82:aa:c6:48:99:65:bb:d2:e3:93:de:
                    37:71:d0:4b:65:49:96:eb:0f:d5:4a:39:18:a6:60:
                    db:77:8f:96:c8:76:b4:5e:de:76:15:c4:37:b0:a6:
                    52:ea:2b:0e:69:a3:91:2d:e8:18:01:49:4f:23:e6:
                    ac:0c:45:ca:1e:1f:b0:1e:ea:8c:65:55:62:e1:d5:
                    56:11:ad:6c:50:20:7e:4b:c8:2a:e7:c8:73:7e:bc:
                    90:00:75:e6:9b:1d:f1:b8:02:84:cf:e9:54:05:b6:
                    5e:9b:73:be:3f:9d:85:fa:1c:29:50:12:2f:03:f4:
                    f9:fe:61:27:c3:21:17:46:6d:1d:1f:87:5d:23:5e:
                    6f:fa:e4:71:8a:79:99:7b:dd:4b:1b:a4:f2:5e:19:
                    88:db:0d:9c:d0:05:77:a8:43:b7:14:17:0d:b0:38:
                    66:fa:41:8c:be:4c:bf:c7:2d:cb:31:4f:33:08:48:
                    ee:07:24:85:82:1e:a4:39:ce:40:60:0c:86:4e:7e:
                    03:c7:38:4b:23:f8:42:a2:67:83:28:54:e4:34:6b:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:BE:35:3C:F7:9F:B7:45:DF:E9:38:0E:C8:40:24:42:2E:C3:39
            X509v3 Authority Key Identifier:
                keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:63:5d:a3:95:d7:86:fe:23:7f:1a:33:ef:b5:d5:1a:f1:
         b6:b7:6f:27:bb:ed:cf:a9:bc:03:71:0a:0a:02:a6:59:1b:22:
         8c:ab:75:e5:f3:67:05:fe:f8:b9:e2:25:01:eb:de:cc:99:8d:
         f0:f4:36:32:4d:bc:c5:15:2c:51:41:50:16:36:14:1d:f4:9c:
         84:fe:03:1e:f7:c5:45:42:a5:ab:0f:40:a9:9c:50:80:1e:f5:
         a1:e2:f8:eb:3e:a1:e6:e8:32:2e:01:7c:f6:75:98:ad:64:22:
         00:10:ef:1e:65:64:7f:9f:a6:ae:e7:f0:62:0d:b9:1d:a0:6f:
         34:ca:60:6f:7f:48:54:50:94:96:1c:a3:f6:ee:6b:3e:33:35:
         d1:40:61:3a:0d:12:fb:94:bf:7b:fc:08:6c:b4:10:4c:44:6b:
         e8:a2:b7:42:30:20:e1:ea:b7:fc:2d:9d:66:92:6b:5b:a0:3a:
         7d:ff:95:4e:43:78:c5:c5:1d:bc:a2:2b:6b:d7:dc:ab:fb:41:
         bc:aa:f7:46:6e:8b:b6:71:bc:5b:c0:2a:3b:bb:a7:18:85:9a:
         34:37:a9:ec:d1:74:75:c5:10:70:c0:02:eb:ed:8e:ab:fc:6f:
         f7:75:68:d6:dd:ea:9d:aa:58:d8:4f:2a:e6:2f:f8:95:f0:01:
         9e:ab:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:34 2024 by rpki-client on console-ams.rpki-client.org