Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File:                     3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier:          jm19AOLmsUlxvGYn5Y2M8fwqBS8i/wBaAxs0CAhm5Kk=
Subject key identifier:   55:32:24:53:A3:4C:B7:FE:02:33:BB:8B:03:E5:6D:C2:23:F1:6E:6F
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer:       /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial:       018F4F4B066D66BBE81D137E697468AA3CE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number:          075A
Signing time:             Mon 06 May 2024 19:04:27 +0000
Manifest this update:     Mon 06 May 2024 19:04:27 +0000
Manifest next update:     Tue 07 May 2024 19:04:27 +0000
Files and hashes:         1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: XmUKp+B5ogvqsFq398kwyrL+cTWGmA7ezXPCDORirF0=)
                          2: 91tN7HkXnshRbSaZjqvFnOFTMy8.roa (hash: +tw/8qJv2FR07D4NdURZE+TlhImBe6LsBwh6bNGi6Fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:4b:06:6d:66:bb:e8:1d:13:7e:69:74:68:aa:3c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
        Validity
            Not Before: May  6 19:04:27 2024 GMT
            Not After : May  7 19:04:27 2024 GMT
        Subject: CN=55322453a34cb7fe0233bb8b03e56dc223f16e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:33:b4:10:59:61:ad:18:cb:d6:87:3a:65:
                    20:5e:ad:8c:d6:1e:ed:5c:9b:d8:e4:fd:fa:04:57:
                    79:e4:63:68:5f:ce:71:3d:01:d4:03:0c:a6:3f:24:
                    e4:ca:d7:80:ba:f7:fe:4d:3e:fc:9c:ea:ea:67:40:
                    34:a2:13:f2:f3:7f:03:d2:e8:5e:5f:15:09:e8:12:
                    f6:43:56:4a:cf:cc:5b:9e:39:8d:5b:77:44:9b:7c:
                    ab:ec:f9:92:ee:c7:3e:2a:7f:de:c9:a4:93:e4:69:
                    bb:03:59:3e:53:0f:cb:6d:38:ad:04:06:17:44:0e:
                    03:ca:d1:70:38:bb:e0:c4:50:6c:b8:6d:9c:28:ec:
                    08:3e:3b:e3:b8:d0:ca:0a:ec:1a:91:d1:74:37:5f:
                    90:15:64:0a:d5:3e:bd:92:65:e8:08:26:0b:10:98:
                    e3:1b:97:16:43:8d:d6:55:ce:45:ac:29:11:59:75:
                    4e:3d:64:0d:cc:f1:6e:ac:22:d7:b8:02:1f:0e:2d:
                    56:55:2d:7e:43:4f:0c:45:4b:b2:ec:29:a0:8d:5d:
                    c4:bd:ee:fc:63:cc:0f:4e:fe:03:f5:3e:29:9f:c4:
                    03:f4:e2:02:45:14:06:94:87:d5:36:11:4b:c1:d7:
                    b4:b9:68:de:a2:42:e1:f3:fb:db:32:68:93:27:0d:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:32:24:53:A3:4C:B7:FE:02:33:BB:8B:03:E5:6D:C2:23:F1:6E:6F
            X509v3 Authority Key Identifier:
                keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:83:b1:5b:99:bc:8a:77:50:3d:c7:cf:3a:b5:79:07:e8:
         b5:c9:16:96:59:cb:6b:5c:70:54:2a:7b:c8:79:b8:26:4d:44:
         06:56:3c:7b:80:7e:65:c5:bf:14:fb:20:6b:05:66:91:d3:98:
         db:21:39:fa:ae:9e:a0:10:95:17:92:52:80:a7:2a:28:85:8b:
         64:5c:a8:67:29:8e:5f:74:74:1b:4b:42:7c:90:98:d3:4a:ea:
         10:9b:38:be:35:3e:da:51:8c:03:00:ba:40:9e:60:43:d6:35:
         51:dd:a2:8a:c6:4e:96:91:1e:1e:44:49:ba:61:76:27:e0:d0:
         ad:39:c1:65:f0:e6:65:92:0c:12:1b:b5:82:24:e9:f4:31:84:
         e0:72:49:7e:f3:b0:9c:53:58:9f:0c:a8:c1:12:05:d5:db:49:
         ba:95:d8:e3:ce:a1:37:fe:26:72:26:02:66:93:ee:f6:84:e2:
         ac:c3:f2:d5:e4:63:3e:68:41:f4:02:a7:41:92:f0:36:6c:aa:
         0f:6d:c1:4f:38:be:de:21:11:a8:f3:6e:eb:05:14:65:d6:6d:
         c4:ad:5d:38:c4:b4:7a:1d:5f:fa:2e:4d:78:b5:bb:d4:3b:3c:
         2e:51:e5:11:d9:bc:82:54:5b:70:da:4c:b9:27:6f:6d:4f:34:
         8f:c3:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:00:42 2024 by rpki-client on console-ams.rpki-client.org