Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
File:                     MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft (raw, json)
Hash identifier:          s+EwyZ0XTyvT24+xOCKwrp3Q5xqh0HzI8wcJjq3XqTY=
Subject key identifier:   3B:55:27:3C:5B:0B:AD:8D:D4:69:43:23:C9:19:BE:45:FE:CD:48:6C
Authority key identifier: 31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
Certificate issuer:       /CN=3195f73419e822329794cf17fba7e93f375374a9
Certificate serial:       018F87499604CA0371590669382779A31B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
Manifest number:          0D1D
Signing time:             Fri 17 May 2024 16:01:37 +0000
Manifest this update:     Fri 17 May 2024 16:01:37 +0000
Manifest next update:     Sat 18 May 2024 16:01:37 +0000
Files and hashes:         1: MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl (hash: YDUxYxSZ+Ts9Gvy6DWJxHsd5aWKpQFpx+Rkg4BfTb9k=)
                          2: dY0BJpDBbX_NshX5kB86-UwYPiE.roa (hash: eYFqQqUYCXJedeXEaERzkthL1OzW0pGnPviMcIoyyvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:96:04:ca:03:71:59:06:69:38:27:79:a3:1b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3195f73419e822329794cf17fba7e93f375374a9
        Validity
            Not Before: May 17 16:01:37 2024 GMT
            Not After : May 18 16:01:37 2024 GMT
        Subject: CN=3b55273c5b0bad8dd4694323c919be45fecd486c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:39:98:f8:c8:9a:98:ba:13:52:a0:8f:63:
                    4f:c1:9d:bc:3d:06:2f:b0:81:a9:98:4d:35:4c:a1:
                    08:e6:85:b9:99:0d:91:e5:12:26:2e:33:18:6e:24:
                    44:73:20:15:5b:a9:30:af:30:25:5f:ea:40:c5:f4:
                    9f:b9:0d:22:54:af:f4:7e:b0:cf:f8:48:67:07:ac:
                    00:32:ab:71:26:d8:39:f1:55:d1:5f:7e:89:83:b6:
                    bf:fa:26:5d:9b:7c:59:3e:52:9e:e9:4c:78:a0:cc:
                    78:a2:1e:e0:38:64:b1:69:69:7f:64:5a:02:d0:1a:
                    d6:a6:4e:1a:c6:76:fb:76:b2:ef:63:a4:d3:42:73:
                    13:61:57:1f:96:fc:ac:d7:6c:8d:8a:79:a2:1b:2d:
                    03:39:49:89:11:b0:e0:f3:b3:dd:2f:40:66:db:ac:
                    e1:ee:8d:fd:97:c3:57:85:f7:89:2c:12:01:1d:2a:
                    e5:34:88:27:45:eb:04:66:5d:29:9c:ab:6f:ee:82:
                    8a:ad:a3:8d:9d:1b:4b:f9:e3:a5:cc:d2:09:39:1c:
                    ab:81:00:c1:25:8c:d3:d3:c8:98:40:28:98:10:20:
                    7a:8c:91:c2:40:a6:5e:80:8a:8a:62:89:3c:ec:40:
                    fb:dd:f4:24:21:ab:dc:3e:90:e9:2a:0a:30:9e:71:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:55:27:3C:5B:0B:AD:8D:D4:69:43:23:C9:19:BE:45:FE:CD:48:6C
            X509v3 Authority Key Identifier:
                keyid:31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1a:fc:50:d1:20:66:82:12:6a:77:6c:47:b7:4a:59:e2:8a:
         0d:f9:6c:87:9c:c0:51:c6:52:e0:b7:e8:a8:df:8c:3f:5c:96:
         4e:19:f8:ce:0d:f1:c9:e2:5e:3b:e0:0e:53:b4:10:90:70:20:
         c6:dd:47:6b:2e:6f:d6:4f:9d:d0:47:b2:3e:46:78:fb:9c:bf:
         d4:b4:44:77:57:2e:d6:90:24:0a:95:12:b5:c5:e3:c3:f7:2e:
         0c:ac:fa:ad:5d:46:7f:c1:f8:51:a3:89:e1:2f:03:48:36:36:
         9b:86:1e:22:81:8f:7d:21:12:c6:49:ed:4e:7e:1b:ae:b2:4b:
         b7:88:81:6e:19:18:a8:6d:18:89:0c:35:b5:d6:8c:15:e6:37:
         8a:8a:63:f9:8f:a6:78:14:b8:3f:b9:65:df:4a:ba:7d:f3:56:
         f4:ab:a2:eb:0c:de:8a:d5:88:f1:af:59:31:2e:2d:17:30:cf:
         48:54:8c:1a:76:13:a3:40:b9:33:fd:02:42:67:28:ba:7b:1a:
         2d:83:11:e8:86:2f:be:c6:cb:6d:f6:18:a3:0a:80:a5:79:99:
         5f:55:83:26:11:6a:84:9c:a7:04:92:46:f1:ec:f2:07:00:8e:
         2b:9f:5c:a6:38:8c:45:f5:7a:15:70:9c:81:7f:dd:94:73:58:
         56:02:f1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:42 2024 by rpki-client on console-ams.rpki-client.org