Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File:                     3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier:          dhOJeo8O8sUF7/UY3/1b93kTLO/Pht3aT+YJYG2coHM=
Subject key identifier:   9D:AD:DA:80:C1:B3:CB:72:22:2E:2F:34:3B:B9:02:FE:51:E2:C1:12
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer:       /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial:       01901C6A339BE1558DF2D54B99627E328A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number:          0D78
Signing time:             Sat 15 Jun 2024 15:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:40 +0000
Files and hashes:         1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: lrbL4j7gSCAbtFBBNHd/uda324lpvqNjAIxBJgl6PdQ=)
                          2: m4RrSU1IHeLtCyG3Bc2CRMfGH3Q.roa (hash: PxhNv3DE5Mj5ja+vjk2YkbldvNJJKQpFyfaeyTVeLzo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:33:9b:e1:55:8d:f2:d5:4b:99:62:7e:32:8a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
        Validity
            Not Before: Jun 15 15:00:40 2024 GMT
            Not After : Jun 16 15:00:40 2024 GMT
        Subject: CN=9dadda80c1b3cb72222e2f343bb902fe51e2c112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:e0:23:83:4f:de:97:96:10:f5:3f:4f:dc:
                    a6:57:34:07:3c:0f:4b:23:c8:5d:52:aa:0c:7f:25:
                    6e:ca:ee:4a:0d:3b:12:be:6e:20:f9:23:e2:83:17:
                    49:cb:71:47:dd:64:24:40:c3:46:21:df:7e:0a:75:
                    c4:d9:10:5b:58:32:bb:df:e5:dc:8f:78:a0:20:86:
                    3c:05:c1:4d:60:29:0f:c2:e4:c9:a2:24:68:24:8a:
                    c5:69:a7:c3:c7:f4:81:83:65:46:dc:79:63:38:36:
                    b3:d5:99:20:2a:ca:6b:15:85:e8:a6:55:82:b3:5d:
                    9d:52:0c:f9:50:ff:ed:ff:a4:a6:7e:58:1d:52:a8:
                    99:bd:6c:df:48:23:56:61:60:8e:17:64:55:a8:60:
                    22:e3:b3:2d:18:9a:c5:c3:39:a2:3a:07:87:1e:94:
                    e3:96:29:25:06:05:ca:61:4f:d8:3c:fc:57:67:fb:
                    4b:f1:ae:b3:bd:28:e6:81:5e:cb:fb:73:57:74:03:
                    85:cc:47:a1:67:31:64:10:7a:c9:9f:47:72:19:31:
                    a9:1a:c0:4c:27:06:93:de:30:15:2e:02:eb:66:81:
                    b1:ba:6c:05:d8:29:e4:d9:33:20:51:61:c6:16:da:
                    55:ab:c3:e4:f9:d5:de:7b:9a:81:f7:95:50:53:3e:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AD:DA:80:C1:B3:CB:72:22:2E:2F:34:3B:B9:02:FE:51:E2:C1:12
            X509v3 Authority Key Identifier:
                keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:f9:36:6d:33:86:c5:f2:0a:d6:d7:8c:a4:72:ce:70:01:
         f5:5c:b9:a4:7a:4a:ea:e7:1c:22:37:9b:12:c9:e4:ea:fc:4e:
         6d:2d:7c:58:be:bc:51:be:db:98:a3:29:ac:37:4f:a3:27:33:
         c2:ed:73:e1:c5:61:29:6d:29:51:7e:e0:78:5a:40:b4:0b:64:
         e4:9b:aa:13:2e:71:04:79:3a:eb:89:14:64:6e:2a:a6:97:93:
         8d:e4:08:b2:2f:5b:be:1b:74:13:7c:90:74:38:1f:cc:7f:30:
         e1:a0:01:c4:2c:5d:9b:c5:cc:82:b7:27:f7:19:f0:ca:9d:42:
         94:08:ad:09:38:79:74:89:f2:e3:78:bd:78:2f:f9:cf:24:13:
         3c:ac:33:28:2a:16:e4:61:00:a5:0b:4d:a6:30:4c:f3:5d:4b:
         bf:9e:26:4a:11:e6:2f:2f:c6:e8:57:3b:ed:65:c5:9a:7b:d5:
         7b:ee:0d:82:a6:aa:b9:a3:f1:a6:83:66:a8:46:e8:ea:66:91:
         ab:e8:62:4c:29:0b:1e:2a:c2:32:0b:42:73:86:b3:35:24:d5:
         b3:4d:3d:9f:66:70:4b:2f:25:64:70:0d:6f:20:86:a5:a1:ec:
         d6:de:ba:4b:09:dc:12:42:78:5f:53:bc:5d:d0:3c:06:a2:5d:
         f4:d6:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:38:09 2024 by rpki-client on console-fra.rpki-client.org