Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File:                     3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier:          dw9kFJEAuINOP65SWFjt0J8Zycw2VvU+PiO5NU/iFp0=
Subject key identifier:   25:6C:3E:0A:EA:9B:83:EC:33:F8:FD:B0:F8:9A:B5:0D:AD:DB:76:54
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer:       /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial:       018F4C476A5C5E352706F1F23859A7DF0D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 05:01:39 +0000
Manifest this update:     Mon 06 May 2024 05:01:39 +0000
Manifest next update:     Tue 07 May 2024 05:01:39 +0000
Files and hashes:         1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: H9/Lqv7UavOOK68BopVaYDquArpwjtbkjPCFZ2+AMMY=)
                          2: PFd-5-bPEEO8f3cXkJxQmltEoOk.roa (hash: ZWnHd2+H+3c2RLeJuZPgl8V5kzfRKBzmnL8VLEHXfJE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:47:6a:5c:5e:35:27:06:f1:f2:38:59:a7:df:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
        Validity
            Not Before: May  6 05:01:39 2024 GMT
            Not After : May  7 05:01:39 2024 GMT
        Subject: CN=256c3e0aea9b83ec33f8fdb0f89ab50daddb7654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1e:90:85:98:10:84:ed:b9:66:fe:a1:cc:41:
                    54:50:33:73:d1:44:32:90:cb:67:ad:29:3f:ca:46:
                    3e:5c:06:05:d5:4d:20:a8:64:f4:eb:ef:ab:f1:e0:
                    54:12:c4:35:f1:d3:c4:bd:5c:92:ca:78:3e:66:ee:
                    d2:2a:97:a3:ae:36:36:44:18:38:a8:71:ed:8f:98:
                    01:df:df:75:ce:f0:bf:66:3d:54:3c:fa:9a:43:f8:
                    c8:3e:07:2c:86:f9:63:43:ea:d2:11:30:ce:0c:48:
                    99:2d:73:32:c4:2d:d0:87:a5:5d:b6:4b:c7:bc:4d:
                    1a:d4:4b:82:38:59:21:22:1b:c5:b8:f9:eb:2f:0d:
                    35:2d:e0:bc:dc:bd:e2:51:20:67:bc:5e:5e:33:20:
                    90:bb:56:88:32:1c:85:75:6d:43:b0:58:28:55:a7:
                    0d:93:df:ed:ec:1b:a9:3b:11:1d:ce:6d:18:82:29:
                    e7:3a:b5:e2:2d:e8:e6:ad:de:5e:78:40:f8:7f:6f:
                    bc:71:36:9d:0c:f2:f8:13:a2:82:c8:b7:1a:e0:15:
                    94:0c:5d:2b:d3:7a:b3:ac:a7:52:59:2e:13:e4:15:
                    d3:75:0d:84:a0:0a:90:9b:a6:49:2a:00:c5:b0:7e:
                    f5:58:73:ea:3b:45:86:1a:06:22:5b:04:b2:7c:af:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:3E:0A:EA:9B:83:EC:33:F8:FD:B0:F8:9A:B5:0D:AD:DB:76:54
            X509v3 Authority Key Identifier:
                keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:38:37:4a:6e:bb:08:61:07:b0:22:c2:48:18:da:11:66:3b:
         eb:b1:0b:5e:a7:4a:2e:95:fe:9a:c4:b8:db:f5:77:a5:60:7e:
         d8:d0:ae:d2:8d:ba:f7:95:f3:72:bb:8e:fc:0e:de:39:72:3c:
         58:64:ec:24:7a:66:ac:ee:f3:d2:38:db:52:27:ae:62:8b:a9:
         05:b1:6d:51:5c:22:0e:1a:6e:86:96:8a:8e:0a:89:4d:1b:39:
         92:6e:69:c6:24:04:aa:9f:85:2e:d4:bd:78:ea:53:6a:0f:37:
         e2:09:69:a8:46:e4:08:73:b4:56:20:9d:30:ee:17:18:6a:bc:
         49:28:74:83:6c:b9:15:f2:12:e8:90:80:bb:6c:a8:c7:b4:e3:
         dd:95:16:89:40:31:76:5b:64:25:41:91:6e:7b:17:77:7e:ed:
         ee:ec:10:0a:93:91:45:6e:1b:b3:9f:9e:14:4d:03:52:98:3f:
         1f:4a:e0:c5:7e:af:19:5e:58:77:69:d3:b2:7e:e6:d6:88:cc:
         df:29:3b:5f:4a:0a:7f:5f:8e:a3:5c:35:10:08:1d:a1:48:db:
         07:d0:df:b4:46:2c:07:fc:cc:4a:7e:d2:c4:3a:23:f3:2e:cc:
         e3:fc:94:2e:44:37:a1:d5:01:ce:ee:ad:2c:ef:14:3c:c0:aa:
         a0:5b:c6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:31:56 2024 by rpki-client on console-ams.rpki-client.org