Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          pJdgvqpPaFkcKWoq+Ku1KBAsAQ9NsjU8jAM9F1MvVyI=
Subject key identifier:   C5:AF:E2:55:4D:64:E8:21:BB:F9:7A:3A:E6:06:7D:7B:8B:BF:35:47
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       01901DEB80A4E5947BDFDF85487A6F119D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          11D3
Signing time:             Sat 15 Jun 2024 22:01:31 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:31 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:31 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: W+x0oZKHskxAmPda+SOFdOjM7CGhaNYW9sqlU4Pe27g=)
                          2: 4gNRqA6ayijX61zcJRr85Fqsf6w.roa (hash: YlK7lh0FITBKBq9EDPUwPAH9QN4l0wCISzIsomDHf0o=)
                          3: Q4PlefsqmXWqy5gnAYkw40HhENM.roa (hash: 6tK0YkOLEby5pL4YKwgq5GvyZ87BoABxTyu7qzz9cmk=)
                          4: _ebRMxmH5KizFz1IETPGn1v9aOU.roa (hash: LZZ3BN5oEiVwLRT5urIQRWtTLJAAkgzjM7hHJN41ECE=)
                          5: j7IGzzvM2EBcSP-J9hPVJKA5XBQ.roa (hash: 8rd3LgO814XLlnk0GEZiU0her0DnjcwO3+3F5uwEEu4=)
                          6: nx7cFKeTbr8gXZKTN4tUct3gmOY.roa (hash: mpvfbcDq8nZOsQCVh1gJuQhIDXO81JTJWxSj1bruTK8=)
                          7: r53OJMPJwDE3ZT7D0PQdKPUA0gY.roa (hash: cPwAraFEz9eoRgWeB4UshDGYJfd2OBTsslpfNN5iceE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:80:a4:e5:94:7b:df:df:85:48:7a:6f:11:9d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Jun 15 22:01:31 2024 GMT
            Not After : Jun 16 22:01:31 2024 GMT
        Subject: CN=c5afe2554d64e821bbf97a3ae6067d7b8bbf3547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:d1:b3:22:9f:de:94:fb:ba:40:51:47:ba:
                    78:61:6a:31:1c:55:83:39:e8:39:a1:68:cd:0b:e1:
                    14:4d:46:65:dc:c7:ba:4e:a4:d9:c6:65:fc:14:74:
                    1e:29:ab:6e:75:2d:3e:46:d0:41:11:1d:49:06:10:
                    f6:4b:ac:02:85:29:84:94:12:4b:3a:8b:bf:2b:98:
                    1c:2a:a0:95:fb:55:0a:58:f3:4d:9d:04:66:02:11:
                    38:7e:c5:42:1c:3a:b3:d7:bd:d9:de:ca:f3:08:ba:
                    2e:7e:29:a8:e3:d9:e6:d0:89:6c:de:fb:0a:31:d5:
                    93:f9:2b:4f:4c:ca:e7:62:e0:56:a1:36:15:b1:1c:
                    48:de:be:97:6d:74:9c:04:64:b2:57:9f:63:49:96:
                    10:79:6e:fc:6b:e4:d1:69:d6:28:08:87:0f:93:0f:
                    b4:99:61:67:07:25:a2:2d:e1:73:f4:29:1d:a0:15:
                    1f:d5:08:d2:2f:c1:3c:8f:06:b5:90:9a:09:a4:26:
                    0d:1e:62:08:2f:74:34:33:ce:2e:34:df:9e:6e:4f:
                    78:a9:55:c0:4d:79:a3:f4:fb:c3:c2:94:9f:6e:04:
                    bd:d6:ce:af:d0:76:d0:29:9c:41:da:4c:4c:6c:4b:
                    92:e8:19:d3:93:8f:6e:26:d2:88:05:44:1a:db:e3:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AF:E2:55:4D:64:E8:21:BB:F9:7A:3A:E6:06:7D:7B:8B:BF:35:47
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:3a:8e:86:8f:5b:ee:40:6a:d2:0d:a3:ec:df:ba:2c:e5:e0:
         78:6f:d7:ad:aa:24:35:ce:23:74:49:35:e4:29:41:fb:7f:be:
         99:86:cc:10:e6:e8:f9:73:25:d7:e4:99:93:9d:da:5b:ee:a8:
         17:8f:90:0d:70:1d:cf:d0:89:0e:80:84:37:51:c9:50:c3:31:
         74:d3:38:c8:32:6c:08:88:36:54:09:60:68:8c:cb:25:6b:ef:
         8c:bc:0f:a7:cb:9c:6b:5e:0f:7e:3f:a8:25:01:19:b0:29:e2:
         e1:a1:84:03:68:c0:7b:80:47:86:4c:4d:4e:34:58:68:4b:d0:
         91:6d:25:14:b8:1a:57:b1:39:29:7b:cf:8a:50:10:62:13:c6:
         19:6f:45:ce:aa:67:43:06:07:f7:fa:13:20:91:5d:f5:6b:38:
         21:ca:89:4f:43:a8:f8:72:fd:bb:38:f1:89:c1:3f:25:5a:f8:
         90:2b:38:ac:82:07:7a:2b:aa:7b:69:67:48:91:5c:d8:48:a2:
         b2:11:89:d9:e4:42:48:d1:10:30:73:16:96:5f:6a:27:a7:28:
         88:08:19:43:2e:00:47:06:20:cf:34:4e:1d:65:cf:ff:b4:5c:
         7f:76:e9:d6:f2:89:5e:7c:41:c9:18:4a:5b:b6:bf:bd:2f:c4:
         67:e0:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:52:06 2024 by rpki-client on console-ams.rpki-client.org