Manifest

$ rpki-client -vvf rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
File:                     3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft (raw, json)
Hash identifier:          mXS5uN+P3tExFejCzk5JnIpyTdQ9zNEA1GrzxI5AH74=
Subject key identifier:   D0:BD:F4:A9:9D:E7:B1:69:1B:CE:A5:B3:30:5B:9F:91:F5:BD:7E:E1
Authority key identifier: 3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2
Certificate issuer:       /CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
Certificate serial:       7AEA3B8FAF71C37BD697B789A5B008F3EC38B207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
Subject info access:      rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
Manifest number:          0214
Signing time:             Fri 19 Apr 2024 19:30:15 +0000
Manifest this update:     Fri 19 Apr 2024 19:25:15 +0000
Manifest next update:     Sat 20 Apr 2024 21:30:15 +0000
Files and hashes:         1: AS202400.asa (hash: vsgZ/wNnL/V6gxq9/w3z4kd3cjC7gyRmbl1B9akIbJU=)
                          2: AS59730.asa (hash: 5dd2w1DoUlnS+v8HPzoZW0NerU+R+zE1hMYBfLDrQLs=)
                          3: 3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl (hash: Xhu2trEaGrlizBqSGWg9AaxEJGQt97B8A8JHXmSy+F0=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl
                          rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ea:3b:8f:af:71:c3:7b:d6:97:b7:89:a5:b0:08:f3:ec:38:b2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
        Validity
            Not Before: Apr 19 19:25:15 2024 GMT
            Not After : Apr 20 21:30:15 2024 GMT
        Subject: CN=D0BDF4A99DE7B1691BCEA5B3305B9F91F5BD7EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:31:39:0a:8c:df:a5:52:d4:99:6e:1b:84:
                    3c:7a:e4:0b:e3:52:69:df:3a:b7:63:da:e0:a1:80:
                    99:b0:bb:0e:d5:94:81:76:4d:21:51:a2:90:e0:7d:
                    9e:81:c6:1e:b7:31:9f:76:71:69:88:d1:40:2a:fc:
                    a6:ab:97:d3:f8:3c:94:41:b0:2e:22:0d:09:98:cc:
                    38:33:cb:73:fe:d8:05:c5:68:85:cf:37:dc:9c:a0:
                    da:52:51:34:b1:eb:fc:31:90:dd:ce:56:8b:f5:9a:
                    88:68:ef:97:41:9c:cd:01:16:c7:57:9b:37:77:7b:
                    e1:8c:fd:43:ed:17:1b:22:ab:04:04:f0:36:1e:f4:
                    a1:e2:f9:7f:15:46:72:4d:c1:99:44:ee:6e:5e:48:
                    45:cb:b1:3a:56:f0:d2:d0:1d:66:b8:b3:1f:39:d7:
                    1a:5b:d0:03:ce:51:ab:8f:60:8f:56:ea:f0:f7:fd:
                    58:f2:b9:68:1c:fd:27:d4:53:61:a8:30:aa:bd:66:
                    e6:16:1d:ae:19:07:5a:82:46:49:43:0c:d3:8f:14:
                    ab:08:de:7b:f5:08:50:40:40:93:b7:7b:cc:6c:65:
                    e1:ed:6f:dc:06:1f:c4:d8:b2:46:d3:e0:b2:a4:b7:
                    58:21:13:5a:c5:6e:34:ba:00:dd:ea:8f:4d:91:73:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BD:F4:A9:9D:E7:B1:69:1B:CE:A5:B3:30:5B:9F:91:F5:BD:7E:E1
            X509v3 Authority Key Identifier:
                keyid:3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:92:00:e8:4d:df:37:44:c7:a3:b6:44:0f:20:3c:62:32:cc:
         6a:9e:e1:23:94:eb:4c:b3:a7:c6:07:f9:e7:70:f0:7b:c4:98:
         9a:61:d1:3f:c8:6c:06:77:73:22:ea:b6:c2:30:89:10:11:52:
         37:51:01:de:1e:e1:ce:29:2e:76:87:c3:33:04:7a:53:19:b4:
         22:a4:2e:70:a8:47:5e:a8:3a:4d:96:53:66:b9:9b:77:9e:1f:
         84:02:bf:62:b8:65:b7:f8:a9:46:ac:e7:aa:99:22:80:73:87:
         3e:75:5c:e5:c7:e2:c2:ca:f1:ab:e8:0e:ef:e2:61:2c:2c:9b:
         cb:dc:1c:0e:40:aa:f9:14:4e:ee:65:bf:ea:f7:a8:37:3e:54:
         ab:42:65:88:4e:48:1a:96:02:20:c0:42:5a:82:b0:e5:b4:49:
         c8:6d:13:cf:3b:8d:1d:6f:47:fd:d0:cf:08:ff:e3:f2:b6:1d:
         4e:20:e6:02:98:49:a3:17:90:36:a5:fe:25:16:af:bf:af:5f:
         f6:16:00:3d:c7:cc:58:e7:f9:54:ab:0c:ea:12:56:2a:40:96:
         42:14:07:7e:23:24:b2:d0:38:13:01:a6:75:ce:dd:cd:9b:e0:
         cb:d0:98:7a:68:1e:a9:83:a5:8d:41:54:1e:9f:a5:45:d8:0c:
         5d:bb:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:30:11 2024 by rpki-client on console-fra.rpki-client.org