Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File:                     3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier:          046OwbwE+ooiDpvk+KOHrdr5pCzIDAjzm6O4SgMtEWM=
Subject key identifier:   FE:A3:11:7C:D2:EC:F9:51:CF:3A:22:23:D6:5D:E4:25:56:93:28:DF
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer:       /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial:       018F4E356E7CBA013D290E529FBFE23A1020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number:          0A16
Signing time:             Mon 06 May 2024 14:01:15 +0000
Manifest this update:     Mon 06 May 2024 14:01:15 +0000
Manifest next update:     Tue 07 May 2024 14:01:15 +0000
Files and hashes:         1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: A87OAIXY+w90/+kZ6WkpVGF28PiMiIpJ96UZ35lvUZk=)
                          2: Ubz_fNNl2azdz8EuMXZpRVvC24c.roa (hash: o8v5qGVk7UYlHO8OjzcTZH8TDrC5r//UO2RLIh28Vwg=)
                          3: Zaa2ZlTyqcc3-PraTdapPYZfqsc.roa (hash: c1Zvm+tdmTkZ+280FJdRBPTwLWO6y6WYRa3PAhdHQOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:6e:7c:ba:01:3d:29:0e:52:9f:bf:e2:3a:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
        Validity
            Not Before: May  6 14:01:15 2024 GMT
            Not After : May  7 14:01:15 2024 GMT
        Subject: CN=fea3117cd2ecf951cf3a2223d65de425569328df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:86:cf:9e:c8:48:25:cc:e4:eb:c1:23:28:
                    3b:d8:06:63:23:c5:05:f4:24:cc:3b:51:d1:24:ca:
                    a2:ea:27:30:1a:4a:94:57:51:f3:e5:ae:40:9e:7e:
                    a7:d2:85:89:56:ac:a1:f9:4f:84:b1:41:03:75:d9:
                    b0:62:b5:d2:89:b8:18:39:f1:2e:e2:a4:7c:df:96:
                    14:07:81:7c:14:59:90:21:84:74:f4:5e:c3:de:a6:
                    cb:53:6d:90:be:36:64:3a:c5:18:92:39:87:e4:ce:
                    d4:46:98:26:e1:7c:d7:39:f8:d3:a4:e7:c3:d8:90:
                    e9:fc:33:2e:9d:cd:a3:2d:7a:ce:4f:e5:ef:cc:43:
                    72:6a:a0:e6:55:71:6b:6e:f9:23:b1:c4:25:c8:b1:
                    02:a8:77:8e:de:d9:33:61:dd:3a:b3:4f:dd:33:41:
                    d4:55:5f:ca:52:1a:da:16:df:bd:68:ac:41:6a:3d:
                    42:da:1f:a7:cf:ec:9e:db:0f:21:0a:6e:39:31:da:
                    51:44:62:d8:30:c5:96:d1:28:b0:b1:3d:6b:96:e7:
                    ce:78:42:c1:db:91:4f:b0:1c:23:ec:2a:77:19:be:
                    cc:bc:b4:e7:2d:88:d2:6d:e6:3a:7f:85:6e:a3:99:
                    2a:ee:09:a3:5c:05:f5:f1:76:6f:ab:6e:f1:bd:60:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A3:11:7C:D2:EC:F9:51:CF:3A:22:23:D6:5D:E4:25:56:93:28:DF
            X509v3 Authority Key Identifier:
                keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:59:57:ce:6e:bb:bc:f0:e6:63:af:a0:7b:ab:67:06:b3:3a:
         99:56:a2:5f:22:5f:66:2d:27:a0:79:aa:34:a6:3f:a4:41:0d:
         c2:12:d1:a0:60:0e:b1:dd:1f:0a:83:4a:62:45:22:4b:ff:4c:
         23:01:6c:62:ca:15:08:99:10:d1:cd:e8:cb:be:97:c8:04:f5:
         07:7c:09:a8:10:e4:6f:8c:b5:46:63:7c:05:a1:bc:f8:06:0e:
         d0:a0:c4:92:7c:6e:04:01:25:44:79:26:56:4d:b8:13:52:b5:
         96:8f:24:20:ac:26:8a:78:8f:24:f7:de:58:01:1e:c5:10:58:
         c9:dd:0a:84:c9:dc:54:f5:bb:fe:2e:ac:56:32:e7:91:fd:7c:
         5e:d9:df:94:17:56:55:2a:ba:43:ab:81:a1:39:c8:26:ca:68:
         b4:63:dd:c7:ad:2b:5f:a7:84:e7:14:6e:dd:f2:7f:cb:e6:1f:
         f7:61:45:9d:6b:cf:f5:ca:97:a8:81:ee:90:31:9b:ef:97:4f:
         83:f6:5a:7a:74:37:74:cb:49:72:a8:aa:a4:c1:1a:a0:2c:d6:
         8f:43:6e:2b:36:aa:21:2b:fe:93:b8:fe:28:d4:b0:c2:fe:b4:
         79:f7:1b:ac:80:76:d8:bd:1d:df:35:28:1a:ad:a2:70:e0:f0:
         b0:0e:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:52:23 2024 by rpki-client on console-ams.rpki-client.org