Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File:                     P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier:          DuB4GTpFF6oTkNdgE94z/LawQkPO5zIaC9mEu049n9o=
Subject key identifier:   98:00:94:95:3F:02:D7:73:BE:41:B3:3A:A1:73:BC:C9:86:68:18:EE
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer:       /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial:       018F8892489E3382162D5FB1C9EEF135523A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 22:00:39 +0000
Manifest this update:     Fri 17 May 2024 22:00:39 +0000
Manifest next update:     Sat 18 May 2024 22:00:39 +0000
Files and hashes:         1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: dyBMGYUUyhPa2igem/mfk0Mpy0dIwdsFz5/QhNiUVQ0=)
                          2: ZPpfofbyBUXeLE8IiyMnh0DTy9A.roa (hash: l/k0zrb0UCMo89FnUADuMJHcx0PoUxoXPjKqUMhKU60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:48:9e:33:82:16:2d:5f:b1:c9:ee:f1:35:52:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
        Validity
            Not Before: May 17 22:00:39 2024 GMT
            Not After : May 18 22:00:39 2024 GMT
        Subject: CN=980094953f02d773be41b33aa173bcc9866818ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:19:f2:b8:e4:34:6d:59:ae:b1:db:ec:a1:48:
                    75:42:09:68:a8:ca:d8:6c:d4:8b:4d:be:23:46:28:
                    f9:d1:f1:04:01:bc:56:d7:41:dd:cc:d2:c6:51:d7:
                    22:ef:55:92:e8:34:2e:f2:0f:f5:a4:86:e0:ee:7a:
                    b8:6d:f2:79:10:16:21:bf:23:78:1e:1d:c9:c1:50:
                    06:bc:99:31:ea:89:ac:bd:31:80:ba:e4:7c:b3:73:
                    56:4b:a7:4a:e9:01:7b:52:7f:23:61:3b:0a:1f:00:
                    5d:e4:82:17:a2:69:01:69:1d:d9:54:8a:aa:b6:f7:
                    dd:9c:07:eb:46:b8:57:74:65:07:6d:ef:e1:38:2a:
                    0a:1f:28:05:eb:b4:09:2c:06:30:6a:30:00:58:8c:
                    fa:fe:7d:61:8d:e0:18:fa:80:dd:c9:59:c6:ae:65:
                    0a:69:55:8d:23:93:11:a7:4d:2a:df:f9:9e:d7:73:
                    df:5d:d9:03:0d:6b:b3:c1:17:ef:a3:01:a9:55:c7:
                    dc:c9:45:09:2f:2f:d2:96:c1:0b:bd:64:ce:e9:36:
                    c5:90:85:34:92:ab:ee:fb:1b:2d:2b:16:d2:d4:88:
                    b2:60:59:d4:26:5e:5c:68:2e:d1:e8:8b:b6:c0:f9:
                    58:73:e7:95:57:18:50:b4:d9:57:14:d1:9a:5e:8b:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:00:94:95:3F:02:D7:73:BE:41:B3:3A:A1:73:BC:C9:86:68:18:EE
            X509v3 Authority Key Identifier:
                keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:67:31:5c:05:c2:5e:36:b4:d7:d9:d4:86:7b:20:d9:2e:e1:
         c6:e3:5d:e2:06:1f:96:0e:28:cf:ed:c5:0c:ca:77:0a:6f:93:
         cc:6a:6c:04:bc:93:61:24:d1:f2:b7:02:17:94:2a:af:0c:c9:
         f6:83:8c:7b:37:45:25:58:d5:b0:c2:99:0b:69:92:ba:f3:73:
         b9:3c:6f:0f:c3:36:95:e1:39:ed:c5:7b:52:e5:f5:81:38:0a:
         2e:31:bf:5b:e7:84:62:10:2b:de:96:1a:dc:17:e5:d8:b6:31:
         71:33:23:ba:93:6a:f7:dc:6e:43:f6:e6:48:ec:a6:ea:9e:13:
         35:92:62:aa:c8:5d:9a:f0:e5:c6:aa:be:78:48:f4:91:f2:14:
         49:9c:60:4f:0f:0b:c8:78:79:e5:19:87:8c:d7:e3:47:61:99:
         7f:bb:25:26:fc:ec:43:2b:a4:f5:6f:7c:f3:b7:81:32:a5:71:
         38:6f:ef:4b:a6:82:73:b2:0c:14:78:24:96:1d:d4:dd:a0:42:
         59:d4:dc:60:78:58:16:22:e4:8e:da:f8:83:ea:62:fe:62:7f:
         a9:d9:8c:92:dc:db:ad:69:bf:38:42:a5:7b:a6:8f:87:90:6b:
         fe:ce:9c:4f:40:a8:8f:cb:07:ac:89:de:00:fa:55:d5:9f:07:
         4f:a2:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:53:29 2024 by rpki-client on console-ams.rpki-client.org