Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File:                     3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier:          Yev+pO3zf0HiOQ6qjtJrgBF3OhYdPgTX4tuOPeauFIA=
Subject key identifier:   3E:B5:00:6B:85:1F:B2:ED:0C:2C:B9:F4:6A:BD:59:90:B3:5D:98:D4
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer:       /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial:       018F532770AB39AB65448FAAF203D8872ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number:          0F36
Signing time:             Tue 07 May 2024 13:04:04 +0000
Manifest this update:     Tue 07 May 2024 13:04:04 +0000
Manifest next update:     Wed 08 May 2024 13:04:04 +0000
Files and hashes:         1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: Y9uNGFDqimBXdNCW+eWyJdxATMON40aoCD4vIHwiHrU=)
                          2: SRtmHCiqtWYvIuXBYr31JiAAogY.roa (hash: PTu+Lw8+lflfqbJpGzZnAUXfp79XwIx+2O6LHhimSSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:70:ab:39:ab:65:44:8f:aa:f2:03:d8:87:2e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
        Validity
            Not Before: May  7 13:04:04 2024 GMT
            Not After : May  8 13:04:04 2024 GMT
        Subject: CN=3eb5006b851fb2ed0c2cb9f46abd5990b35d98d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:38:9d:8b:99:c7:e2:e9:9c:99:03:9b:31:
                    d0:81:63:0b:cf:2a:9c:05:f0:15:e1:7b:e9:59:bf:
                    31:79:e8:e5:be:49:90:b1:51:d9:df:5c:d4:38:b6:
                    ed:62:a2:5e:e2:0d:4b:91:c2:be:bc:c7:ef:18:98:
                    c6:f2:3c:d5:86:42:d2:19:e4:c5:74:b0:8b:d7:2f:
                    60:13:08:9a:a7:dd:cd:81:9c:5f:65:f7:a2:6f:09:
                    83:3a:8b:4f:ae:90:8e:9b:4b:ba:cf:c5:60:bb:e9:
                    d2:78:a0:78:c8:be:d3:2c:26:1f:a7:9e:39:b6:a0:
                    2c:3d:cb:14:8a:6d:1c:39:2b:7b:d3:90:50:af:f5:
                    be:ba:34:bb:ea:5c:cf:be:c9:ee:85:40:10:a4:ed:
                    7e:57:8f:e7:b7:56:60:af:b5:3e:93:6a:3d:4c:d0:
                    03:e3:cb:c2:8d:e8:54:09:4c:2e:91:52:dd:09:5a:
                    36:34:11:cf:bc:70:93:cb:8c:0f:65:04:7e:0c:94:
                    ce:a4:67:70:a5:f0:d9:94:66:f2:c1:7c:86:0d:b4:
                    fd:c6:12:71:4e:c4:89:60:26:9d:38:e7:12:c9:09:
                    f2:21:92:7d:34:f3:99:69:aa:83:d1:0b:6f:47:fd:
                    dc:c2:d8:3b:10:35:89:a0:28:aa:37:ae:e4:5f:a9:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B5:00:6B:85:1F:B2:ED:0C:2C:B9:F4:6A:BD:59:90:B3:5D:98:D4
            X509v3 Authority Key Identifier:
                keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:1f:c3:34:21:97:06:ca:b1:4b:9f:57:6c:9c:34:6f:bc:de:
         e2:56:88:f6:f1:7f:1f:aa:3d:eb:f0:0f:a9:d3:b9:1f:7f:0a:
         4c:e2:b4:6c:de:77:65:35:f9:b8:4f:01:35:f1:e4:8e:a3:50:
         dd:73:48:05:14:7a:48:9c:92:74:cc:e3:d1:2e:b4:d7:dc:76:
         e0:73:f4:b7:df:c9:e7:29:f2:27:82:2f:2d:e0:22:2c:30:db:
         51:de:28:87:17:68:a4:e9:5f:45:4f:23:dd:b5:fc:f5:e6:58:
         2d:ce:a8:cf:10:50:9a:ad:f9:aa:ac:a1:8d:c9:00:9d:5a:ec:
         22:f2:10:ad:7e:ab:6e:74:99:91:b1:ac:f1:e6:40:bc:53:e4:
         ad:06:4c:d6:06:f5:e3:84:f2:b9:48:a4:a6:8e:37:4b:25:d3:
         ff:44:1a:0e:60:1a:2a:a8:72:f4:a9:57:94:f4:76:12:fb:bd:
         56:37:86:2f:2b:1e:09:3c:92:45:b3:04:dc:83:85:ce:9f:03:
         ad:33:03:27:b0:ac:6c:e2:3a:3b:a4:61:ed:22:9f:d2:23:3b:
         e2:8d:28:83:29:6e:e1:e9:d5:88:7e:54:ca:27:f8:1b:00:3c:
         38:4b:66:05:01:89:33:fa:52:64:9f:b5:fb:60:a4:bd:51:e0:
         bd:94:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:45:23 2024 by rpki-client on console-fra.rpki-client.org