Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File:                     F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier:          hP28TvN+FZ+taeCLkzqF5XWlBYpWYqnvpN/JlHROUjk=
Subject key identifier:   7F:D7:D6:0F:FB:D9:B0:C2:E6:7E:DB:39:3F:F7:7F:BE:46:6F:5D:BF
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer:       /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial:       01940645E5025FD5C1840BA7FD66A6FAFD66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number:          0327
Signing time:             Fri 27 Dec 2024 04:00:31 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:31 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:31 +0000
Files and hashes:         1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: HMwg63Ij46RzvXpgwFAXu5MahIOR4lAJ/z3WGUoq3Ok=)
                          2: uMTuLT7MUxRJ7VLoMlIsbUkboao.roa (hash: gXrGnlM9dbxa5RskE16yn3yk99wnBXw7Mucbzwb4b3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:45:e5:02:5f:d5:c1:84:0b:a7:fd:66:a6:fa:fd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
        Validity
            Not Before: Dec 27 04:00:31 2024 GMT
            Not After : Dec 28 04:00:31 2024 GMT
        Subject: CN=7fd7d60ffbd9b0c2e67edb393ff77fbe466f5dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:f4:60:05:54:1c:05:3b:12:bb:6a:b6:a4:
                    74:9e:02:58:9c:92:71:75:d5:7d:28:19:5c:76:c8:
                    23:d9:e5:d7:8d:06:32:a4:36:c7:a1:1e:1c:f7:19:
                    e8:55:20:89:94:ef:94:d7:7f:55:57:94:64:95:68:
                    f6:ab:c6:b3:cf:de:6d:a8:37:b3:ae:b2:f1:fa:00:
                    5f:9b:1b:39:7a:83:14:39:0f:57:21:8d:fe:01:2f:
                    20:a8:2b:dc:c1:8a:8d:bc:53:a1:be:e5:55:95:c9:
                    65:f9:06:99:61:e5:36:c6:59:ab:bb:56:82:8b:d2:
                    54:a4:6e:a7:b3:22:01:c2:23:da:b8:2d:b1:05:75:
                    0a:76:24:61:57:c6:78:fe:e9:41:61:c9:67:99:b9:
                    8f:6a:4e:2c:71:b7:9d:57:47:c5:7c:3d:c8:2a:a5:
                    e8:54:6e:7a:64:93:93:32:95:11:b5:5a:ce:39:9d:
                    e2:72:52:cd:25:01:07:7c:f8:fb:fe:bd:fa:06:da:
                    7f:d4:63:c0:8f:82:4b:4f:84:27:20:aa:8c:45:e9:
                    90:11:b1:da:65:f6:08:f1:6a:2b:54:83:44:35:85:
                    b6:83:d3:16:37:ca:d6:b2:25:f2:38:4a:e2:fa:86:
                    48:90:c1:44:92:6c:11:e4:fe:03:81:5d:52:af:a1:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D7:D6:0F:FB:D9:B0:C2:E6:7E:DB:39:3F:F7:7F:BE:46:6F:5D:BF
            X509v3 Authority Key Identifier:
                keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:36:d4:20:3f:25:83:e9:46:1f:2c:70:db:dc:88:f1:ad:4b:
         77:b5:c1:3c:df:70:b8:72:b1:33:01:bf:83:c2:53:29:ab:4e:
         91:93:39:44:75:df:97:e3:c1:0d:1e:35:0b:f2:9e:a1:c9:e5:
         eb:12:5b:0d:84:99:60:07:14:18:b4:4f:31:58:53:e7:a1:bd:
         72:7e:08:f5:ad:c5:ae:ec:ae:0e:c7:41:b6:39:be:54:6d:bd:
         c9:5e:51:d0:2d:4a:34:47:68:52:b2:88:bb:7e:d5:68:e4:59:
         17:dd:e7:3c:9e:e0:67:77:70:a5:62:88:79:38:67:cf:a3:11:
         cf:43:6f:fa:82:a0:f8:e1:39:50:14:a2:f7:35:df:42:30:e1:
         b2:e0:ec:14:ed:47:2a:e0:4b:c3:57:f9:28:7f:ed:37:b5:a9:
         28:e2:d5:83:9a:61:a3:bb:74:5c:ac:a7:44:61:32:ec:83:ee:
         59:49:20:48:a9:70:2a:d4:13:cf:f2:66:cd:2e:26:d7:50:2f:
         e9:cf:cb:4e:99:8b:a4:58:5a:36:a9:db:61:78:06:98:d3:ed:
         dd:aa:c8:da:f8:d1:71:0d:d1:45:c8:5d:eb:4a:9c:97:d8:01:
         95:c3:e2:6d:eb:41:29:4b:80:2d:53:34:5a:fb:02:33:40:63:
         88:1f:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:38:22 2024 by rpki-client on console-ams.rpki-client.org