Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File:                     3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier:          J7CXm9qEom9UC4eqc1NAlcM3W0jWfJ1Uoo6tGdwcTQM=
Subject key identifier:   29:FC:A2:77:26:A9:08:97:9C:C7:F9:D4:22:57:E6:1D:27:36:8B:17
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer:       /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial:       0193512BD6F08672057A36082D5363B07BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 00:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:47 +0000
Files and hashes:         1: 0u2sQt8PK_0-FMApdIithVvyQ4I.roa (hash: qne0t8Jt7NcQqUmJxqzwxwD+svtQjOqPRkh9+LLEyQc=)
                          2: 1-9AlAVqar8-vfxOY_1Coe1MNeqA.roa (hash: ktX9SoeWW470jcGmfLqRg6lOXLcjXWBcXhDBsL2aG7Q=)
                          3: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: 7VpJ0mPiaQlDS3NlOz4+aprSMuBAbmlPFnN8yz6Sxao=)
                          4: 43xkqhf8qJADnvq2LhUbT8yMRdA.roa (hash: yYSmzZPQN0uGyNR+jCS734f49ZlS4CaVOwtgqUhaQPA=)
                          5: cXnKX_2LUdgL0u_LJwrQ-IXwdM4.roa (hash: ODttyT3/taPj4JLmSfU2ZkUYsORmzVO8/U9jbrB/DLo=)
                          6: dRK-a_9SSk-WTT8ueZl-utOUfXc.roa (hash: RLojpCeaDVQGFrsJ5NqKfrcV9lXjCDxYRgSKu4UbcRc=)
                          7: o9lO_j4ClBfpFgX_kkyPXrZxOjc.roa (hash: DPYbfEgAyok5Y8ZiCvCOkHk6tciMf3lFXxjG31euknw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:d6:f0:86:72:05:7a:36:08:2d:53:63:b0:7b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
        Validity
            Not Before: Nov 22 00:00:47 2024 GMT
            Not After : Nov 23 00:00:47 2024 GMT
        Subject: CN=29fca27726a908979cc7f9d42257e61d27368b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:df:2e:92:04:4b:6d:df:a0:8a:38:23:25:
                    30:a7:a5:31:47:3e:50:20:49:b1:05:25:b7:17:44:
                    fd:cc:5e:5c:5f:c0:03:11:cd:ee:e1:72:6b:e4:28:
                    2b:b8:66:86:64:2b:89:75:2d:ed:4c:3e:49:07:b2:
                    29:ec:87:a6:8c:6c:de:ff:c0:4d:28:95:08:e8:b6:
                    0d:fd:fa:06:0d:f2:7f:c6:36:8f:d4:5d:1f:7f:ff:
                    1b:c2:e9:b3:97:5b:18:d8:24:a6:47:97:15:0e:ea:
                    44:50:ce:17:92:09:fc:38:4f:87:84:5c:60:48:d9:
                    52:4f:bd:c1:e7:2d:5e:ec:8d:64:70:5b:c6:16:d3:
                    c8:83:bd:66:5b:39:ee:9a:13:ea:ad:97:5b:27:97:
                    ec:1a:26:85:e8:c7:74:d2:99:1b:e7:37:85:22:c1:
                    b0:fe:95:7b:33:d2:f6:81:2d:15:15:cc:43:c1:7f:
                    c7:67:01:40:60:49:2e:63:0b:bd:4a:a8:18:5d:eb:
                    39:17:cf:a9:e1:29:e0:74:bc:d0:82:ba:a4:6e:d0:
                    a7:46:dd:01:8f:e3:f1:20:66:7f:c6:8c:f9:73:64:
                    2a:89:47:05:63:89:47:71:5e:12:78:df:7e:fe:82:
                    d2:93:03:ab:f6:51:7c:57:c0:a6:a9:5a:a6:0b:24:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:A2:77:26:A9:08:97:9C:C7:F9:D4:22:57:E6:1D:27:36:8B:17
            X509v3 Authority Key Identifier:
                keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d6:17:75:01:51:f7:da:be:bf:1f:e3:bb:4e:a8:3a:ac:70:
         9a:8f:c1:77:be:a7:4b:d4:ef:98:f5:5b:9c:dc:24:8a:16:bf:
         69:71:87:1c:71:d0:f1:b3:ee:6e:c4:de:3e:78:35:a2:a0:54:
         29:48:5a:b3:91:35:36:cb:52:fb:7c:52:a9:e4:96:23:71:be:
         a5:3b:e7:8f:de:25:e4:f9:a2:86:02:21:aa:30:81:eb:2a:65:
         13:27:02:7e:55:86:27:39:72:b7:55:8d:be:62:19:10:87:a1:
         63:d7:ef:bb:e1:d4:2a:fb:b5:66:6b:dc:c9:af:f0:3b:7f:c1:
         54:9b:78:ff:06:65:5e:8b:54:67:81:08:67:6f:15:41:99:84:
         86:a9:6a:10:9b:de:6f:59:cc:54:88:ec:b3:6d:26:3f:bc:58:
         86:6e:c5:43:45:1f:7f:22:a8:2b:34:c5:7e:ea:8c:5a:74:c3:
         68:82:7c:1b:ea:98:61:5a:3b:4a:ad:81:39:3c:a7:32:6f:3e:
         5f:6e:39:54:e1:cc:18:6c:ae:c0:84:3c:c2:f1:44:57:54:22:
         43:9f:92:a3:9b:b5:9f:eb:cf:bd:48:8c:a9:0d:4c:db:4f:a0:
         f1:10:88:d9:81:29:44:6d:fc:76:db:f8:3b:da:09:ef:d3:63:
         85:12:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:38 2024 by rpki-client on console-fra.rpki-client.org