Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File:                     b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier:          Mwo8XVJjzm8OwdpRgkghEsiexwGlafm7rJoCcdNfftU=
Subject key identifier:   CA:03:66:57:4E:A8:97:6D:24:0D:42:53:21:B5:E3:C3:BE:C1:C5:B1
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer:       /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial:       01901E8FEBC5A64FD2ADC1D87B6008914C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number:          0EFD
Signing time:             Sun 16 Jun 2024 01:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:06 +0000
Files and hashes:         1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: 3+i6+fY0e0Ys6Ua7WP/G5YhQva9ldwMzY/ZP5VB/Ii8=)
                          2: uaEXGSBAvju3GA_Mo_SkheEJc08.roa (hash: xYpNCDEOIEuLsrjqCYpZhP3sZSvuF7QHlTqYOtqYAM8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:eb:c5:a6:4f:d2:ad:c1:d8:7b:60:08:91:4c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
        Validity
            Not Before: Jun 16 01:01:06 2024 GMT
            Not After : Jun 17 01:01:06 2024 GMT
        Subject: CN=ca0366574ea8976d240d425321b5e3c3bec1c5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ce:c3:12:1b:bb:f2:ce:41:87:56:43:67:cf:
                    68:9a:a7:6a:c4:0c:11:a3:cc:60:b8:ba:92:2d:09:
                    f4:bd:24:1f:9d:e1:00:7e:f4:c6:cc:06:58:0d:d5:
                    a4:38:72:79:0d:4c:a7:b4:40:be:2d:57:11:e3:93:
                    3c:92:3b:9a:32:99:14:ca:a7:0a:f6:3a:f6:43:3f:
                    ab:08:fc:b2:97:b2:5f:41:a3:ef:f9:89:95:b4:ed:
                    f3:8b:d9:2b:99:a2:17:33:68:c1:6c:66:91:42:a7:
                    a4:20:08:1d:9d:f4:1c:71:20:7d:d6:3c:18:f4:26:
                    f8:02:b4:61:db:44:3b:bc:df:6d:d6:38:49:34:aa:
                    3f:49:55:db:4e:04:70:fe:d0:02:12:55:08:c7:47:
                    8d:e3:da:cd:98:9b:c4:ab:f7:88:37:90:64:4c:d1:
                    7a:53:83:a9:6d:0f:3c:43:7c:7e:d3:38:fe:0a:b8:
                    34:86:3b:fb:e8:54:e5:4c:56:17:cd:8c:11:c7:ea:
                    19:ec:51:3c:a2:88:9a:f2:e7:05:08:4f:cc:d8:b9:
                    0a:4f:ed:f4:ba:6d:b5:40:d4:ae:da:c3:eb:d0:97:
                    e7:48:77:37:87:18:74:fd:37:c9:85:72:f5:c1:9f:
                    71:29:43:5f:f2:a9:bf:1e:71:5d:d7:8d:5c:60:f9:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:03:66:57:4E:A8:97:6D:24:0D:42:53:21:B5:E3:C3:BE:C1:C5:B1
            X509v3 Authority Key Identifier:
                keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:b6:1c:7d:e1:e5:53:4f:ba:5d:26:89:fb:17:10:78:32:
         0d:59:dd:33:99:64:59:d9:11:be:c4:f5:a6:11:23:67:c8:e8:
         1b:81:13:2f:78:38:a9:02:5a:e0:2b:b2:d5:5b:61:93:b5:5a:
         85:37:5b:cb:67:89:e8:cf:a9:d2:d4:6d:78:bd:46:72:21:bd:
         af:8f:43:26:7d:af:a2:9c:58:6a:d3:dc:df:bb:89:f5:4f:06:
         1a:59:72:b4:c8:be:a2:2d:a2:ea:b3:a7:fd:5f:25:84:47:5f:
         fa:fe:f3:3a:f2:60:3b:ab:c8:48:81:10:87:96:09:2b:8e:47:
         d7:b4:a5:ae:17:9b:d1:6b:d7:e1:06:47:8e:38:dd:d5:97:86:
         cc:b7:2a:f0:73:73:28:53:c2:ec:8f:4c:56:23:41:97:3e:ed:
         b1:83:4c:8d:e8:a3:4b:56:4a:aa:34:30:b7:2d:c2:db:db:b1:
         8d:3d:e1:5d:49:8d:2d:fc:09:53:86:69:09:14:53:c9:32:f7:
         96:86:d6:08:a0:5c:35:31:a7:3b:c9:11:fc:8d:60:93:ec:29:
         85:ca:6a:91:bf:15:bf:2d:9b:f0:a6:c6:09:e3:9d:af:b7:d7:
         d4:73:c4:39:8d:ec:f8:0e:76:de:10:9f:4d:7b:e0:ac:f9:59:
         49:da:c0:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej+vFpk/SrcHYe2AIkUyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzczZWIzZDMwNzk0ZDIyZDc1Y2Q4NzJiOTFhM2JhODQ4
ODQyZDcwHhcNMjQwNjE2MDEwMTA2WhcNMjQwNjE3MDEwMTA2WjAzMTEwLwYDVQQD
EyhjYTAzNjY1NzRlYTg5NzZkMjQwZDQyNTMyMWI1ZTNjM2JlYzFjNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M7DEhu78s5Bh1ZDZ89omqdqxAwR
o8xguLqSLQn0vSQfneEAfvTGzAZYDdWkOHJ5DUyntEC+LVcR45M8kjuaMpkUyqcK
9jr2Qz+rCPyyl7JfQaPv+YmVtO3zi9krmaIXM2jBbGaRQqekIAgdnfQccSB91jwY
9Cb4ArRh20Q7vN9t1jhJNKo/SVXbTgRw/tACElUIx0eN49rNmJvEq/eIN5BkTNF6
U4OpbQ88Q3x+0zj+Crg0hjv76FTlTFYXzYwRx+oZ7FE8ooia8ucFCE/M2LkKT+30
um21QNSu2sPr0JfnSHc3hxh0/TfJhXL1wZ9xKUNf8qm/HnFd141cYPmGqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoDZldOqJdtJA1CUyG148O+wcWxMB8GA1UdIwQY
MBaAFG93PrPTB5TSLXXNhyuRo7qEiELXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQt
NmEwYmFlYjIzMzZlLzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQtNmEwYmFlYjIzMzZl
LzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLK2HH3h
5VNPul0mifsXEHgyDVndM5lkWdkRvsT1phEjZ8joG4ETL3g4qQJa4Cuy1Vthk7Va
hTdby2eJ6M+p0tRteL1GciG9r49DJn2vopxYatPc37uJ9U8GGllytMi+oi2i6rOn
/V8lhEdf+v7zOvJgO6vISIEQh5YJK45H17Slrheb0WvX4QZHjjjd1ZeGzLcq8HNz
KFPC7I9MViNBlz7tsYNMjeijS1ZKqjQwty3C29uxjT3hXUmNLfwJU4ZpCRRTyTL3
lobWCKBcNTGnO8kR/I1gk+wphcpqkb8Vvy2b8KbGCeOdr7fX1HPEOY3s+A523hCf
TXvgrPlZSdrADQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:52 2024 by rpki-client on console-fra.rpki-client.org