Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File:                     3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier:          xQ15qrQ/QVXcrz5xVjkkIrgGmRqSMPJay48blefIBjM=
Subject key identifier:   3A:1E:3A:88:61:42:A3:31:1F:85:C8:CC:54:95:85:B2:FE:79:4F:B0
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer:       /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial:       018F3C6601D0AC95CFDB98B6361906DFFA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number:          06C5
Signing time:             Fri 03 May 2024 03:01:09 +0000
Manifest this update:     Fri 03 May 2024 03:01:09 +0000
Manifest next update:     Sat 04 May 2024 03:01:09 +0000
Files and hashes:         1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: FR7eYeND+NHZQN2a7FY5oC6zsy9hTOYkgPTCKnH1AfU=)
                          2: HMqUmjtKkA-N3fyBqpFEeTnBhXw.roa (hash: ImZKOMRKlYFWETPLAi4ytxwZduq7IzXSaaqDJb+8P/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:01:d0:ac:95:cf:db:98:b6:36:19:06:df:fa:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
        Validity
            Not Before: May  3 03:01:09 2024 GMT
            Not After : May  4 03:01:09 2024 GMT
        Subject: CN=3a1e3a886142a3311f85c8cc549585b2fe794fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:3f:33:b4:82:ca:13:be:b0:65:cb:75:35:
                    f3:c4:f3:6a:83:e5:c7:ec:0f:dd:31:72:a9:0e:d5:
                    e2:09:24:85:44:55:16:f0:4b:43:fe:2c:71:b0:1d:
                    b6:13:20:27:f5:fe:a4:5a:31:39:f9:25:1a:76:db:
                    4a:0e:ce:34:53:67:6c:31:25:17:c5:cb:4d:94:b3:
                    24:af:be:20:74:f5:13:60:14:13:9c:59:5a:de:d8:
                    6f:31:05:57:84:bf:50:1c:30:07:8f:29:09:90:49:
                    28:27:6d:d3:be:f8:19:b3:d6:a0:1a:b6:f2:5b:23:
                    dc:47:da:d6:77:6a:e8:11:3d:20:d1:67:13:af:de:
                    2c:ba:cf:3b:6f:1d:f8:e0:15:db:5c:c8:d6:45:85:
                    27:82:14:f9:0d:4c:c1:00:d8:f1:80:f6:48:c1:37:
                    85:eb:ff:34:f4:36:94:c3:ad:24:67:fa:8d:7d:25:
                    df:97:99:de:f6:1b:49:fd:9c:5f:46:2d:25:9d:4e:
                    de:98:b2:76:b2:23:a8:d9:3b:e8:64:2b:c1:8d:2c:
                    36:a2:d0:95:ef:7c:23:d2:6e:06:c4:d7:61:57:5e:
                    95:4e:e3:cc:53:6f:ba:c4:67:1e:5a:72:13:c8:de:
                    8d:33:84:97:06:a5:57:28:bd:88:1a:e2:d5:25:27:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1E:3A:88:61:42:A3:31:1F:85:C8:CC:54:95:85:B2:FE:79:4F:B0
            X509v3 Authority Key Identifier:
                keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:a3:1e:ce:e1:ef:0b:e0:8c:07:1d:65:6e:01:60:8a:e3:
         1f:7f:07:12:8d:12:21:20:18:7f:72:7f:60:6d:46:b1:ec:d6:
         b9:6a:23:dd:5e:b7:fb:2b:6d:78:5e:a7:dd:2c:28:94:15:23:
         80:49:73:7e:82:df:95:ab:e1:35:61:ac:6d:ec:7a:bd:5c:14:
         f1:e3:ec:3f:f1:41:3f:65:22:4b:7a:af:e8:91:4f:d2:ea:ed:
         ef:8c:b7:77:33:0f:f3:35:11:06:11:e0:09:86:94:a0:9b:c4:
         cf:78:0b:2f:a7:b0:f7:e9:c6:e2:7d:89:03:e5:ac:32:0e:93:
         c5:da:0f:3e:9e:0b:3b:97:1f:74:c6:3a:00:db:b0:40:9f:ec:
         20:63:db:2c:b8:4a:f4:b8:1b:1e:27:43:11:39:27:93:a4:b5:
         bb:de:e7:eb:4d:5a:8f:b8:14:df:3d:67:7f:7b:db:49:32:c8:
         c2:9f:4a:b4:e3:e0:d9:4d:88:0f:cd:44:b9:aa:49:09:65:15:
         2f:40:7a:b3:15:54:44:b4:d3:e8:32:2a:bd:16:11:48:8b:72:
         b2:77:58:78:4f:ff:06:17:db:a5:7b:a6:1d:6c:c0:07:00:0c:
         30:d9:00:c1:05:1c:18:f6:30:c6:54:81:67:69:b2:87:2f:aa:
         84:70:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:38:18 2024 by rpki-client on console-ams.rpki-client.org