Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          3LhHzaeIRe/3inqhebXiL34w7cJIPs8b3XbsIc1FYng=
Subject key identifier:   62:69:65:E5:47:F3:BE:FD:5A:19:32:06:37:B6:37:F5:2A:D7:0B:7A
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       018FC515340F109BE6346B27FE2665A3098B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          0C32
Signing time:             Wed 29 May 2024 16:00:52 +0000
Manifest this update:     Wed 29 May 2024 16:00:52 +0000
Manifest next update:     Thu 30 May 2024 16:00:52 +0000
Files and hashes:         1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 3i4ghJ7bE3n5+6KAQoj79G8JQcONALxvdVnLWJoDqfg=)
                          2: ffTNedAo1k_aUDDvHXkyQliR0W0.roa (hash: w6XBYRfWdW5Ffkmr0EBxtqzdmlwoZ4rCdGclxzW1gms=)
                          3: kWnySw6y8YvQi_GeSM6-aEyT2SE.roa (hash: iDFmCkYKFGjcjpXtU3HcZoolQPmIe0Ij2gC5VTuosX4=)
                          4: rTXsQ2oE7PfAEw1juVzuvVkJ_bI.roa (hash: Ty4unc9PiAYUp22iroqADDzIzT3xP0F4US8go+wM6Vc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 May 2024 13:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c5:15:34:0f:10:9b:e6:34:6b:27:fe:26:65:a3:09:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: May 29 16:00:52 2024 GMT
            Not After : May 30 16:00:52 2024 GMT
        Subject: CN=626965e547f3befd5a19320637b637f52ad70b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b7:a0:b3:98:e5:85:6c:f6:0a:c4:e6:3d:52:
                    ad:66:91:59:54:49:58:98:8c:52:53:57:16:26:81:
                    b3:40:db:b8:3b:27:f7:10:9c:71:93:1e:df:7d:42:
                    35:a6:2b:cc:0c:1a:1e:1b:54:fe:f1:f3:71:df:bd:
                    bb:0c:dd:10:c1:6b:a5:e0:ea:54:51:e7:f6:09:85:
                    a1:ed:84:40:95:74:6b:31:15:a7:8b:48:38:ee:b0:
                    0d:ad:82:f8:1d:b6:b0:d2:e2:48:7d:5c:0c:a1:52:
                    6d:cc:95:81:94:f7:15:2f:86:25:b6:f8:58:cd:9e:
                    9f:0c:4d:89:a2:db:62:5f:25:73:37:08:d5:07:78:
                    f6:f5:8c:6e:48:db:9f:9b:b3:00:13:d7:6b:58:40:
                    b6:9a:9f:e3:94:d9:05:d8:05:bd:e1:21:d9:14:1e:
                    6a:d6:72:55:e7:a5:ee:64:b2:85:84:43:cd:1d:79:
                    73:6e:e1:2d:76:2e:10:c0:1d:a0:77:d6:9c:10:d0:
                    46:64:c0:33:06:67:96:66:07:ca:6f:72:95:03:0d:
                    52:3c:53:9e:6d:db:27:da:50:4f:c5:06:71:b8:fa:
                    0f:c1:65:28:41:48:77:9d:74:10:79:d4:43:3c:a2:
                    d3:47:82:ce:b3:e0:1f:31:6c:bd:34:2d:44:dd:1a:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:69:65:E5:47:F3:BE:FD:5A:19:32:06:37:B6:37:F5:2A:D7:0B:7A
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:36:97:5f:be:54:9f:29:7b:fa:02:09:f5:cd:48:34:ba:
         7e:1e:5b:86:35:46:17:a8:e7:50:e5:fc:12:60:7c:82:de:49:
         c5:f7:04:1b:5b:93:44:3b:fd:97:9a:45:b3:0a:e3:d7:9b:03:
         5a:fc:46:e9:4c:e9:68:dd:29:ac:66:a5:d5:ea:58:a2:fd:22:
         41:cd:dc:ca:00:3b:e6:56:4f:de:0f:9c:52:84:ce:86:40:a3:
         2a:78:3d:38:73:9c:7d:20:b3:08:98:f5:c9:ed:3c:0d:36:21:
         a1:56:b3:5c:cb:11:30:e2:99:5b:62:1b:df:20:1d:53:12:d0:
         64:b9:a2:00:24:33:ac:e7:e8:34:9c:16:3a:e0:59:db:b6:6c:
         f8:9b:bf:2c:5b:e1:f6:a2:6e:09:57:f3:8f:5b:10:ed:7f:6d:
         93:6d:16:4e:48:07:bc:f0:bb:8f:e3:23:77:b7:a1:10:5d:72:
         a8:c1:f4:26:ac:e8:05:33:9c:d4:23:9f:e0:7e:14:e4:ac:c6:
         dd:66:8a:e0:0f:e8:bc:bb:80:74:eb:e4:d3:fe:d3:97:f8:2b:
         72:93:1b:03:7e:d9:ec:39:2e:a8:fe:19:3e:fa:f6:7b:c4:37:
         e9:aa:a3:b2:b9:4d:2e:1d:e6:22:1d:db:84:2e:c6:be:7d:30:
         a0:56:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 22:49:37 2024 by rpki-client on console-ams.rpki-client.org