Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File:                     3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier:          H5IUiLHPN/7thYctHi0ohsk4CfwSXXgsGyZ/+nO7HkQ=
Subject key identifier:   08:B1:86:B3:B7:BD:30:9F:E8:2F:9F:05:1E:FD:97:50:2E:8D:97:04
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer:       /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial:       0193587909C50AFB349F6E275005BE8C49B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:02:27 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:27 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:27 +0000
Files and hashes:         1: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: t1pe37lKEYlwtBu9TBcMkMLsVVXFhOx3XnvJiHBzPpk=)
                          2: IP5HMpZ7u0cJphVtoX5qm1aDDHQ.roa (hash: nXODXQS63AYSlw+ubRAXZZAkGgHkecDbhMBlXT8f/o8=)
                          3: N9HKQNA017sVdiGuCdx7KkmxgmM.roa (hash: vZPxkrk1cxKJHzgFN9fL2+o7fw6RMlfxfZHQe/EJS4I=)
                          4: pLvMgiZAKSFnLE7B1Hzr9gjoXk8.roa (hash: Yo8IK65u2JfJQqCTTWLtWHKwGa/vXzjvgF4G+AvGYxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:09:c5:0a:fb:34:9f:6e:27:50:05:be:8c:49:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
        Validity
            Not Before: Nov 23 10:02:27 2024 GMT
            Not After : Nov 24 10:02:27 2024 GMT
        Subject: CN=08b186b3b7bd309fe82f9f051efd97502e8d9704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:d8:03:a7:7b:58:be:08:87:16:ce:39:f7:
                    bd:10:f3:10:ed:43:1e:57:f9:5b:e7:e8:23:12:29:
                    35:63:86:58:12:69:96:f1:e1:88:6b:6b:db:bf:a3:
                    a9:fa:ec:02:7d:aa:e2:0f:a9:b7:84:49:fa:e8:81:
                    30:26:4f:a9:ba:d8:c0:6c:fd:cf:c4:ff:c7:47:25:
                    3a:f3:83:a5:99:ad:a4:ae:13:3a:52:35:c0:46:9f:
                    b1:77:e2:fe:30:41:9f:5c:e9:0f:d2:60:7a:32:16:
                    5d:40:fc:b0:98:a2:fb:22:87:ef:59:21:92:94:9a:
                    f5:73:3a:a3:e6:9a:62:0d:6e:10:49:3f:08:4d:42:
                    57:50:53:f3:ce:35:a8:b0:56:a7:5a:11:a1:d6:9c:
                    a6:62:5a:0d:bf:fe:28:9f:b9:28:cf:ed:6e:f9:f7:
                    4e:cb:33:6a:f6:4e:ec:ff:d1:e0:e8:07:9e:5d:76:
                    84:f3:0c:f6:bf:d1:0a:92:61:09:14:e3:78:98:e1:
                    4c:cd:99:1e:c1:c7:6e:ce:4d:59:5c:73:04:bd:ca:
                    c6:00:64:c3:46:d0:7b:67:9a:94:ed:74:90:4c:b3:
                    a3:12:25:6b:3e:38:f3:15:10:1d:42:f8:b4:aa:19:
                    d2:83:1e:e3:a2:f6:50:1d:f6:8a:cd:d1:a1:7e:93:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:86:B3:B7:BD:30:9F:E8:2F:9F:05:1E:FD:97:50:2E:8D:97:04
            X509v3 Authority Key Identifier:
                keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fc:d7:9c:62:e2:92:9f:ba:c9:19:9d:e2:a6:38:21:47:29:
         bd:f0:64:f8:0b:65:f5:ae:26:86:05:b1:a4:f3:33:15:4a:20:
         53:88:09:43:7e:f1:b7:b2:5c:db:9a:6a:69:76:3f:20:bf:c5:
         de:be:5c:fd:bd:76:0e:32:4b:18:d6:69:49:66:f9:8b:1d:2c:
         f4:14:99:fb:ab:ec:a7:e8:c7:b0:2e:7e:1d:1f:e8:99:7a:ce:
         9e:5d:91:13:61:cf:8f:4f:d0:51:7c:53:51:94:41:2b:01:9f:
         1f:19:56:f0:42:de:e6:cd:47:70:06:4e:a9:24:33:1e:ff:58:
         dc:b4:25:de:5f:51:d3:10:13:1a:d7:e7:a7:11:06:25:99:75:
         ce:bd:4a:7e:e4:ed:27:59:09:ed:86:f6:a9:68:43:c9:7e:ab:
         d6:3d:36:58:f9:65:50:72:61:61:62:6d:8c:b4:56:ca:93:bf:
         1a:8d:44:a0:4c:ed:6e:29:9d:a8:fe:e4:0d:d4:76:be:10:6e:
         4f:6f:b1:82:d6:b1:87:11:4a:75:f1:57:e0:05:1a:e7:7f:97:
         9d:f0:e5:15:50:bc:81:e8:d6:2e:5e:b1:4f:2a:84:77:64:53:
         74:0f:a2:58:48:69:1e:c9:55:1e:84:22:71:d9:bd:a5:6b:c8:
         87:d1:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:05:46 2024 by rpki-client on console-ams.rpki-client.org