Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File:                     3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier:          IrzCKOHI/jWS9Sm47kVI8jgCfQiHHeEzf+eRr8CDnFw=
Subject key identifier:   6F:9D:7A:01:FF:13:F1:B9:95:01:40:2E:BF:98:06:E9:42:67:F3:09
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer:       /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial:       018F381D986FDF9B643B8AC3954EA75E1E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number:          114A
Signing time:             Thu 02 May 2024 07:03:34 +0000
Manifest this update:     Thu 02 May 2024 07:03:34 +0000
Manifest next update:     Fri 03 May 2024 07:03:34 +0000
Files and hashes:         1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: h/Ag9bOzJhkjlqbxybBTsB2R0tBe/Ucmxjo+edvnN6k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:98:6f:df:9b:64:3b:8a:c3:95:4e:a7:5e:1e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
        Validity
            Not Before: May  2 07:03:34 2024 GMT
            Not After : May  3 07:03:34 2024 GMT
        Subject: CN=6f9d7a01ff13f1b99501402ebf9806e94267f309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:d1:97:d9:99:e0:ee:e0:88:52:1f:cd:ee:
                    84:33:3e:eb:7d:83:be:85:1d:78:a7:33:b2:40:4e:
                    81:20:73:83:25:6f:4e:a6:fc:c4:e0:4d:99:0e:76:
                    05:ac:6b:43:15:89:52:ff:ec:f7:c7:b2:5f:a0:00:
                    03:94:6d:9d:c5:52:fe:92:c5:67:d5:55:1b:dd:62:
                    71:be:28:41:7a:47:79:91:5c:35:ed:5b:7b:13:77:
                    e2:42:9c:8d:1e:fd:1d:c0:65:65:79:6d:98:0c:ba:
                    5d:12:ce:f5:22:5a:54:30:e0:ee:64:9d:11:da:68:
                    a3:99:1f:ee:ef:7b:c0:17:a6:56:67:93:32:c2:ed:
                    72:89:c2:2e:44:40:61:a7:aa:7a:d3:f8:b0:02:c1:
                    85:b7:94:83:7b:91:b9:21:97:05:77:17:b4:64:23:
                    9c:68:8d:cb:af:1e:56:5a:59:eb:1c:2c:52:9f:6c:
                    bd:a5:e0:2b:25:15:ad:56:49:e1:fb:23:f2:3a:35:
                    ef:40:db:04:40:46:90:8f:6e:03:88:37:72:dd:5a:
                    bb:90:7a:bf:a7:16:4b:05:ff:27:7d:64:b1:2b:37:
                    01:42:f8:cb:cb:d7:cc:7c:35:32:08:ad:02:f1:9c:
                    00:1a:9f:4b:fb:b3:4c:74:8d:7d:28:af:a4:a9:31:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9D:7A:01:FF:13:F1:B9:95:01:40:2E:BF:98:06:E9:42:67:F3:09
            X509v3 Authority Key Identifier:
                keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a0:16:aa:fe:b2:99:2b:46:df:fc:82:f0:8c:29:87:4b:cd:
         6d:db:1a:0e:30:e4:22:38:58:ea:5b:a2:39:82:72:2a:15:30:
         10:c4:f5:a8:a8:e1:38:4b:73:63:e8:e7:5c:81:d6:40:01:c8:
         b1:72:52:67:c4:5f:6b:e5:9d:f0:fa:61:ca:f2:f2:39:f3:12:
         e0:b4:45:65:6c:6b:d6:b7:1f:0b:a3:36:31:88:43:2c:b8:4c:
         7f:5a:c5:0a:f7:62:0a:14:8b:72:df:8f:f2:47:9a:71:d0:e9:
         f5:75:b5:d2:34:95:9f:ea:66:ef:8b:72:36:f7:5d:0f:7d:07:
         9a:64:5b:f8:d4:a2:b9:37:53:04:d3:62:34:46:d4:05:cf:d0:
         89:0d:92:f3:87:77:bb:27:44:47:df:6b:ba:16:b9:ee:d8:4b:
         34:f7:4a:55:05:52:a0:2c:9e:d9:2f:55:93:27:4d:56:ef:a2:
         a9:0a:0b:de:ae:54:20:ce:d5:19:f3:63:64:c9:ed:09:6e:45:
         8f:f5:c5:79:48:39:e8:3c:61:25:61:8b:47:92:1f:0f:a7:86:
         4f:81:ef:37:2d:01:d0:58:af:11:32:b1:bf:de:d4:3b:bf:2d:
         81:cb:e6:5a:0d:0a:26:40:59:bf:af:19:06:0c:91:8a:5e:20:
         28:6f:63:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:17:03 2024 by rpki-client on console-fra.rpki-client.org