Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File:                     3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier:          3fEHDYLhV8yGudTjvH3dXgN3kgBlFveyHYu86m+yjfg=
Subject key identifier:   71:0A:AD:AD:14:C6:2D:E7:28:CD:24:99:67:17:35:45:31:37:F8:8A
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer:       /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial:       018F58F044762CCABA11C0ADBD3B8D9AE323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number:          10F3
Signing time:             Wed 08 May 2024 16:01:32 +0000
Manifest this update:     Wed 08 May 2024 16:01:32 +0000
Manifest next update:     Thu 09 May 2024 16:01:32 +0000
Files and hashes:         1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: g0Vwx0+EmPZVHqvjnJUeEQRSoLL8czyuhvdz4emahBM=)
                          2: nW9yy_bVOrUBQmBe1tvllk4z7NM.roa (hash: WWHtD1E3Oy1QRwB1BCH/D6JbgtzV7XVfTK8fdWavpl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:44:76:2c:ca:ba:11:c0:ad:bd:3b:8d:9a:e3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
        Validity
            Not Before: May  8 16:01:32 2024 GMT
            Not After : May  9 16:01:32 2024 GMT
        Subject: CN=710aadad14c62de728cd2499671735453137f88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:c0:e7:ab:4c:b9:23:92:22:d0:21:ff:37:
                    bf:37:9b:8e:b9:71:6c:2f:dc:eb:97:2c:e9:f7:dc:
                    cd:3c:b3:0a:e0:a7:0c:9f:a1:03:4b:6e:a9:e9:4c:
                    30:e3:b7:2b:f6:c2:ad:87:67:b4:16:7e:8b:43:0e:
                    65:43:33:ff:da:0e:36:c5:43:0b:30:09:2a:6e:0d:
                    da:71:07:3b:4a:81:e0:3a:7e:47:be:2b:01:5a:5b:
                    5e:71:1a:21:7c:58:a3:90:28:20:a8:c1:ed:e1:f4:
                    4c:20:21:e3:56:ba:09:e5:f4:c8:8f:41:71:2c:ad:
                    2a:d1:5a:76:28:9d:76:af:3d:16:36:de:44:2e:37:
                    9c:32:79:d7:3a:98:df:82:33:dc:58:fb:9d:21:2c:
                    5d:a8:db:0b:8b:6e:98:ae:6e:8b:aa:43:56:ab:de:
                    8f:81:50:20:57:f3:8e:f4:2e:7c:da:c5:f4:08:a4:
                    a8:d5:b5:75:b7:ad:71:3b:fd:1f:4f:ae:0a:83:4b:
                    87:15:26:f1:38:9a:e8:70:5e:36:6c:70:1a:90:a9:
                    c6:71:95:d1:53:3b:4c:dd:5a:d7:b1:f1:98:7c:bb:
                    75:9d:ac:6f:92:54:76:65:2c:9e:80:d1:d1:00:a6:
                    14:b6:58:a8:ba:e0:b0:c7:05:a1:39:89:fa:72:12:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0A:AD:AD:14:C6:2D:E7:28:CD:24:99:67:17:35:45:31:37:F8:8A
            X509v3 Authority Key Identifier:
                keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:c0:d3:67:2a:71:cd:75:66:c8:6d:8f:45:34:65:05:af:
         53:60:0b:e6:92:6c:bc:9d:83:b4:a5:c9:6d:29:54:84:0b:22:
         0e:d6:77:d0:4a:24:96:63:af:19:16:6d:38:b1:05:59:00:92:
         b3:f1:c3:0d:21:e1:2c:52:3a:b4:06:d5:5f:70:fa:00:03:6b:
         57:0b:89:2c:4f:79:a8:45:a0:3e:37:ce:89:a8:f0:fb:bb:7f:
         10:c5:9a:19:9a:6e:91:6b:a9:08:0f:f1:27:ac:0b:f8:72:b1:
         37:ee:e6:c5:af:32:6d:91:db:e6:37:79:67:fc:9d:56:84:1a:
         e3:fe:09:a4:f8:6d:0d:68:47:26:85:b7:fb:1e:50:1b:58:6b:
         3e:91:34:74:eb:5c:0b:8e:f8:e2:b8:7b:78:77:68:93:09:43:
         dc:bf:0b:ce:50:65:eb:82:52:9d:6f:23:ce:62:85:fc:14:f8:
         fa:81:8a:c7:bf:66:95:21:fc:51:4e:2f:a5:1d:9d:25:2a:ac:
         a6:25:56:1c:d1:f7:9b:a8:97:60:db:1d:62:20:51:f3:a7:f9:
         1e:d5:3c:37:1a:46:c3:f3:7b:38:e2:d0:e6:b0:9c:f9:b8:74:
         17:c0:1f:0d:df:14:70:52:ec:73:b8:b2:40:04:49:b8:7a:12:
         ad:17:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:53:16 2024 by rpki-client on console-ams.rpki-client.org