Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File:                     Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier:          3W4QqjLti1WagtEpr/c8XYB9jZlmuIt75YNJnKCpgs0=
Subject key identifier:   C7:A3:EB:4C:56:02:83:DD:A7:8D:8A:1A:C6:BC:67:8A:5E:EB:89:FB
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       018F87B6BF9F9C882152983F9022BBEA9AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number:          D8
Signing time:             Fri 17 May 2024 18:00:51 +0000
Manifest this update:     Fri 17 May 2024 18:00:51 +0000
Manifest next update:     Sat 18 May 2024 18:00:51 +0000
Files and hashes:         1: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: 7SfhEvTY85z41r21niL1D5bL10uuT7/Pa011xihby5Y=)
                          2: vpcCujnAFcUo2pLB8foQLo4og-Q.roa (hash: XcNgW9E0RFkBozZbGXhxgHLjwSL8SUDZbAXqYT0/mYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:bf:9f:9c:88:21:52:98:3f:90:22:bb:ea:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: May 17 18:00:51 2024 GMT
            Not After : May 18 18:00:51 2024 GMT
        Subject: CN=c7a3eb4c560283dda78d8a1ac6bc678a5eeb89fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:95:33:fb:dd:43:dd:24:a9:f5:d3:a5:12:
                    a9:65:a9:f0:dc:0e:c4:39:1c:9b:1f:f2:d1:7c:1d:
                    c3:48:37:01:38:22:da:c9:72:82:5d:f1:82:f2:d7:
                    ec:85:ea:c6:d7:b7:50:f2:14:cc:88:80:d6:7f:5b:
                    0b:28:d3:2a:77:8e:5d:c5:45:10:dc:d2:5c:74:b6:
                    6b:f8:2b:c2:f8:d2:f8:c8:a0:a1:e2:37:88:5b:6f:
                    96:41:a7:cc:7c:68:ad:b2:3a:23:81:57:42:ee:ab:
                    07:c2:3a:80:36:69:0a:8d:d3:0d:a6:e1:fe:2f:cc:
                    48:47:25:f3:06:92:ea:05:1c:28:8c:7d:79:46:6e:
                    d4:9a:61:2a:2f:e5:0a:a0:07:63:26:c1:90:fe:0f:
                    2d:1c:54:35:bf:3d:d4:8a:cf:a7:d7:52:2d:bc:62:
                    e6:a9:1e:d7:3d:be:e4:f8:2d:2a:ff:d8:ad:99:3e:
                    6f:bd:ca:e3:bf:3f:13:e4:0a:f3:34:29:42:ef:4b:
                    bd:a6:d3:4d:9f:58:c4:af:bf:b1:57:05:c0:de:4d:
                    ab:78:74:e1:7e:3c:21:68:f6:7a:62:b4:78:81:c0:
                    c6:d0:7f:f8:9d:14:92:8f:d2:fb:bd:71:28:20:77:
                    08:72:d1:a3:d6:db:98:cc:d5:d3:e5:48:7d:2e:f6:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A3:EB:4C:56:02:83:DD:A7:8D:8A:1A:C6:BC:67:8A:5E:EB:89:FB
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:12:ff:93:e3:a5:69:0d:79:73:a5:1a:20:c1:cc:3f:70:9a:
         88:10:eb:83:99:6d:30:7a:8b:b6:29:2a:ef:f7:20:c7:42:ce:
         a0:ae:82:3f:cc:4e:c4:0f:44:e6:12:01:2a:2c:84:52:59:09:
         ca:dc:ff:23:dc:3c:8b:69:49:4c:39:fe:7f:36:41:55:17:57:
         07:92:29:6d:ff:ee:bb:9f:1e:bd:5b:1f:01:d7:45:94:59:6e:
         53:5a:c2:86:62:1c:c1:82:9d:e1:8a:2b:d2:62:79:a0:b0:f7:
         c8:b7:85:06:be:b2:ff:f2:16:16:bc:3f:e6:f8:ad:a8:a0:d6:
         34:18:49:fd:23:3f:17:e6:6c:f3:4e:04:4f:88:4a:1b:43:6f:
         3c:ba:ef:c5:92:e9:4c:5a:5b:6b:55:4d:f8:8d:76:e0:ad:fa:
         9a:7d:f3:bd:eb:8c:fc:3c:e7:10:72:e4:d2:ed:b9:40:70:0b:
         05:cb:9a:5e:cf:81:5e:38:dc:03:82:3a:bd:01:c9:2e:a5:b9:
         e9:d0:21:7a:5c:51:c1:e6:71:af:e8:95:e4:55:0b:72:ca:fc:
         ba:f3:a6:9a:77:28:b9:d2:9e:7c:f4:97:fa:47:ad:d3:dc:53:
         aa:79:c0:6c:59:71:52:21:44:93:a3:a8:39:f7:26:a7:8f:28:
         21:4b:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:55 2024 by rpki-client on console-ams.rpki-client.org