Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File:                     3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier:          jyF9cuUAFqV6iI+DzK5TW5KgO9kLK6FOjC9ujyrWpBI=
Subject key identifier:   59:F9:46:8A:A8:D0:A1:FC:B9:B9:D3:D8:83:C7:D6:BE:6E:2E:82:79
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer:       /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial:       018F51387E3E04A0078EB9597544C33DA9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number:          115A
Signing time:             Tue 07 May 2024 04:03:27 +0000
Manifest this update:     Tue 07 May 2024 04:03:27 +0000
Manifest next update:     Wed 08 May 2024 04:03:27 +0000
Files and hashes:         1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: SldB3t3iKlAHE1MR2AVmrSuSArpnbPdG7qyYLH1/otI=)
                          2: ki4HGWBWDo7PIsB8RvLgajH3-I4.roa (hash: px+7e02tqNcnOP95IeM8RN4SCNBjsw/DlkR1oMGw40I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:7e:3e:04:a0:07:8e:b9:59:75:44:c3:3d:a9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
        Validity
            Not Before: May  7 04:03:27 2024 GMT
            Not After : May  8 04:03:27 2024 GMT
        Subject: CN=59f9468aa8d0a1fcb9b9d3d883c7d6be6e2e8279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:b0:56:c0:34:fa:ab:27:9b:de:7d:47:e4:
                    56:a5:9d:f6:a3:42:42:5c:e5:4a:2c:fe:16:06:93:
                    77:c4:b3:ff:1f:42:38:46:1f:45:ef:b6:b7:69:2b:
                    88:19:62:17:75:a7:c4:41:ca:88:49:92:de:16:26:
                    b2:c7:1f:0e:0d:af:f3:8d:59:9a:a9:10:d8:dd:14:
                    6f:c1:f1:48:8c:11:99:2c:43:97:8a:b7:67:02:ec:
                    40:2a:37:fb:0b:8f:f4:7b:c3:3a:f2:b1:de:ee:ac:
                    d9:f9:62:e3:62:13:3e:13:c2:bf:73:22:d8:d8:d8:
                    80:20:c6:ca:73:88:25:74:40:22:7a:1b:8a:36:b8:
                    ed:3b:9a:98:95:1c:a0:cf:f8:64:8b:93:1e:a9:ac:
                    7f:b0:24:98:95:17:e5:02:1c:3c:77:b8:f1:c4:87:
                    96:17:34:e7:25:f8:59:a4:c5:55:83:da:2b:62:43:
                    82:3f:89:f5:89:46:ac:0c:a5:62:09:2a:77:57:6e:
                    7d:f5:2e:d5:92:fb:07:75:9c:2b:55:ea:14:e3:e1:
                    cb:74:09:35:5e:57:d1:58:4f:a3:e1:6c:0f:b7:0d:
                    66:ad:15:37:73:d2:01:87:71:9e:74:e4:24:22:fc:
                    91:1a:d7:a4:05:0b:94:c8:9f:f4:36:16:bf:75:e2:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:46:8A:A8:D0:A1:FC:B9:B9:D3:D8:83:C7:D6:BE:6E:2E:82:79
            X509v3 Authority Key Identifier:
                keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:9e:e0:3e:89:71:84:e6:1a:18:6f:8b:92:c2:43:ef:54:
         d2:92:78:9f:19:15:67:ee:a5:08:a0:64:9f:84:5e:2e:9a:89:
         28:4f:c5:59:29:2f:0f:51:09:50:ba:59:1a:36:52:b7:ef:30:
         1c:b3:c3:46:32:bb:b7:64:d1:61:da:65:20:26:7d:77:be:31:
         01:2d:6e:c2:b0:65:18:60:bc:14:44:0c:33:35:f0:02:ee:09:
         64:f3:6d:29:f1:0d:eb:ae:29:7a:5c:b0:12:4a:20:36:2c:44:
         0f:d3:67:bb:ca:dd:63:85:cf:a8:5e:42:ab:12:cc:a0:c0:70:
         42:4f:3d:f5:18:53:db:aa:c6:ff:04:6a:26:9e:8f:83:a6:b7:
         13:83:a3:10:25:75:93:39:23:ea:74:e6:2f:55:35:97:e3:25:
         75:f6:4b:48:c0:c6:f9:d4:3a:5c:25:da:cc:52:57:c1:df:01:
         8d:9a:f2:c8:7b:ee:f7:60:c6:1d:23:5b:6e:e1:49:39:75:23:
         c1:48:77:71:cb:32:94:a2:0a:b4:51:68:b4:b1:37:bc:93:c7:
         93:31:95:72:c9:70:c9:ad:5d:cf:75:24:60:b5:db:3f:90:74:
         17:46:fc:0b:fc:14:27:da:50:be:ce:22:47:1b:85:4a:fd:ca:
         fb:8d:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:58:38 2024 by rpki-client on console-fra.rpki-client.org