Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File:                     3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier:          Pb3ZOGX6ND1jpWl/BPyg8MpVND/qdcusIDBTXejYMcE=
Subject key identifier:   02:E9:55:4B:AF:BD:DF:B0:54:97:05:A5:AA:89:35:BE:42:1B:34:E9
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer:       /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial:       018F8749F84BD5922DA6E9B87F0ACF7EE69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number:          01CE
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: NlGMirNN4t1fltNsEPIJ0DkvNd20i/kTCxk55HGdcIc=)
                          2: _Bum54a-s9YDXjwYlyoOh_BdHsE.roa (hash: p0OugWy8oYDszv3kSJL2BzIJfMuxmDd8yFA82nWkbds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f8:4b:d5:92:2d:a6:e9:b8:7f:0a:cf:7e:e6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=02e9554bafbddfb0549705a5aa8935be421b34e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:5e:08:21:9e:51:3b:31:61:7a:0e:19:aa:
                    16:60:e6:ba:87:b7:88:a4:c8:de:94:ed:5b:a5:98:
                    eb:26:54:f2:62:eb:97:01:fb:c8:49:38:f4:47:71:
                    30:80:3c:76:e6:56:7e:a5:c0:5e:e0:04:8b:eb:16:
                    f2:7a:98:f0:74:98:54:26:64:cf:d3:de:d1:0d:94:
                    b7:c4:c9:ed:07:fd:72:26:76:0c:09:f0:6a:0d:3d:
                    83:a1:a7:ac:af:8a:75:ab:33:d0:b5:9f:61:14:20:
                    ee:a5:79:7d:90:a6:42:86:b9:76:07:dd:77:37:42:
                    96:6a:a4:30:26:db:ce:8c:c5:72:b0:a2:10:98:49:
                    9c:4f:1a:64:5f:42:ef:d8:ae:b3:d9:a6:6a:0f:be:
                    25:01:6f:04:f5:3a:ea:f8:69:e5:f1:70:8f:04:1e:
                    34:14:c7:c4:53:e6:17:75:af:b6:b8:93:96:43:02:
                    a5:20:e4:42:19:9d:fc:6b:cb:74:5e:a5:2c:a8:ec:
                    f8:78:88:a9:c6:4d:fb:f0:51:d7:13:84:42:9f:10:
                    31:a9:0e:78:81:3d:64:63:90:ab:3c:83:b4:5a:24:
                    fb:d1:65:63:44:9c:29:4c:ee:5a:87:00:0c:8c:43:
                    6d:30:7f:7e:aa:ed:ac:82:f2:06:13:fe:59:2f:bd:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E9:55:4B:AF:BD:DF:B0:54:97:05:A5:AA:89:35:BE:42:1B:34:E9
            X509v3 Authority Key Identifier:
                keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:cd:5b:45:55:8c:3f:83:be:0d:ca:37:b5:28:0f:69:d9:
         fc:09:86:9a:e6:bb:35:72:8c:c2:e3:3a:b5:75:a4:a6:48:a6:
         a9:42:1e:b8:92:c7:63:4a:37:cb:77:78:c6:1f:c1:0e:a6:3c:
         99:c7:6d:f1:80:d7:fe:bb:6a:37:22:c0:4f:38:af:0b:7b:2a:
         7c:5a:db:06:13:40:6b:ce:c8:bc:37:4b:af:e2:ad:3f:85:86:
         4d:01:82:53:d6:94:ce:06:1a:9f:37:2d:0a:76:15:ec:78:e9:
         2a:c8:6d:18:ac:56:92:98:40:be:b7:6f:83:a3:70:d8:e3:18:
         d3:6d:8e:ac:95:43:b6:ce:02:7d:6f:2f:57:23:64:32:7f:b9:
         b2:64:97:4b:93:a1:57:f3:cf:9a:9f:08:be:8b:a5:14:73:09:
         42:ff:1b:c8:22:21:02:ad:7a:af:12:ab:13:e0:cd:fe:4d:0d:
         4a:7e:8b:b9:d5:52:5e:91:70:a0:ac:21:08:87:a1:a3:d9:7c:
         25:78:bb:b4:a2:e1:86:ec:9d:83:c2:98:df:a3:e3:1c:b4:39:
         d5:0f:13:87:9f:d5:d3:e3:81:1b:a9:5c:e5:40:19:e0:eb:a8:
         6c:7b:41:d0:03:eb:64:bd:b1:98:6b:1b:3b:ae:2f:39:41:0f:
         cd:cf:51:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:28 2024 by rpki-client on console-fra.rpki-client.org