Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
File:                     cPaM3tOePsVM7iIzJS7zk3upgo0.mft (raw, json)
Hash identifier:          hIqilyCZc3vYxgicPDkUB0Ax2SGORCFmvCNS+l2A1fo=
Subject key identifier:   58:10:9B:48:6E:8F:34:AD:F9:03:39:98:C9:A0:7D:57:AC:42:0D:EC
Authority key identifier: 70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D
Certificate issuer:       /CN=70f68cded39e3ec54cee2233252ef3937ba9828d
Certificate serial:       018F87B687EAAADDAC04AFD34A91A99362EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
Manifest number:          03F0
Signing time:             Fri 17 May 2024 18:00:37 +0000
Manifest this update:     Fri 17 May 2024 18:00:37 +0000
Manifest next update:     Sat 18 May 2024 18:00:37 +0000
Files and hashes:         1: bjzQ3crU5PcA96LY9dtw4NuDZis.roa (hash: c92ekc6E+hzq/irXhplbV3DQ1UOi7LGz/QcJM4z4KJg=)
                          2: cPaM3tOePsVM7iIzJS7zk3upgo0.crl (hash: ZITn2VHieGJ/AU0mMO+ZtHRozMqV66pjDien56y/NFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:87:ea:aa:dd:ac:04:af:d3:4a:91:a9:93:62:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f68cded39e3ec54cee2233252ef3937ba9828d
        Validity
            Not Before: May 17 18:00:37 2024 GMT
            Not After : May 18 18:00:37 2024 GMT
        Subject: CN=58109b486e8f34adf9033998c9a07d57ac420dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:7c:d6:e1:95:8e:9b:1c:53:db:c6:99:0f:
                    35:b1:17:d9:1b:d1:c8:1c:8a:80:3e:8a:d9:7b:5f:
                    e0:36:1d:8f:9c:ea:b3:56:8f:d5:00:45:81:0d:10:
                    1d:de:ce:b8:91:6d:88:41:7a:ac:6c:72:98:b3:5c:
                    f1:7b:e9:a5:b7:7f:65:78:6d:eb:ae:ae:d7:ca:a2:
                    e6:71:85:20:a5:87:e8:66:32:28:ed:d1:93:78:1b:
                    5f:ba:ba:06:a6:8b:e3:ab:8f:b0:3d:f0:14:c1:4e:
                    2c:e2:93:58:d3:0d:b8:97:c4:b0:1c:36:db:9a:e5:
                    d6:25:08:1f:04:1f:1c:26:50:bb:a7:2f:7f:24:08:
                    9d:7d:8b:20:60:e1:32:e2:c2:e8:5e:a4:b7:81:2c:
                    d0:19:35:f5:7a:3b:f3:38:5b:5c:b2:5e:d2:2b:a7:
                    cd:b6:50:19:f7:0f:2f:06:fd:54:8a:4d:22:af:9b:
                    92:91:20:a1:d0:e5:3d:d1:c6:94:8e:c0:a4:83:5f:
                    2c:c0:c3:87:7d:cf:c1:4c:12:76:0d:13:02:d1:dd:
                    10:d1:14:cd:93:91:b2:8b:de:eb:70:04:10:be:44:
                    e1:5c:e0:5b:43:80:ae:e3:3e:00:14:dc:37:2c:cd:
                    77:43:6b:4f:2d:8c:cc:32:c6:5e:3f:05:db:57:85:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:9B:48:6E:8F:34:AD:F9:03:39:98:C9:A0:7D:57:AC:42:0D:EC
            X509v3 Authority Key Identifier:
                keyid:70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:69:7d:ed:63:79:45:c8:f5:c0:52:44:4b:84:ae:71:87:df:
         e0:ba:f2:0a:03:08:dd:27:c1:f3:d7:4c:a4:35:d1:82:42:2f:
         09:09:f9:8a:bf:46:d7:75:4a:9a:59:ef:8d:b1:04:12:9b:43:
         e5:e5:3d:f0:8a:02:f3:41:d9:74:9a:a7:cb:17:78:35:86:4f:
         73:46:99:34:87:f4:73:4f:9b:6c:86:e9:ab:78:ab:7c:5c:14:
         e3:36:44:d2:d4:1a:3f:04:45:d5:12:8f:1b:ef:38:e6:83:bd:
         a8:67:68:bf:12:49:32:fa:05:9c:03:48:85:e2:c6:0c:15:f9:
         ed:28:47:e5:84:9e:97:21:6b:4f:ad:e7:28:bb:3b:81:09:7b:
         18:f0:08:0e:0f:72:9e:ae:27:a5:49:ab:88:69:bd:24:15:0f:
         e4:2c:3d:89:aa:39:42:4d:ea:a9:83:6d:fa:11:7c:8c:63:c7:
         f8:9c:6a:00:e7:05:ad:9b:71:a6:d8:61:4c:ce:72:7e:4a:86:
         3a:7b:e9:bc:19:e5:ea:22:cb:8a:84:56:0b:d1:7e:88:b2:d7:
         3f:06:c0:4a:8f:c9:cf:b4:05:32:e3:76:d1:03:1d:90:1d:9d:
         77:ef:b4:32:77:a1:ab:ee:f5:ec:c4:b2:0f:06:0c:ff:f6:d8:
         85:7e:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:37 2024 by rpki-client on console-fra.rpki-client.org