Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File:                     DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier:          RmBjVewNC8QE70dz0sFeUW37PmsqI8ob7B7nQ3fqOzE=
Subject key identifier:   E7:B8:EA:66:66:A4:0C:4D:EB:DD:9A:22:A4:5E:ED:50:43:39:A1:83
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer:       /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial:       018F3FD57448E5F46E323A0FCC48CCEBB7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number:          0F18
Signing time:             Fri 03 May 2024 19:01:44 +0000
Manifest this update:     Fri 03 May 2024 19:01:44 +0000
Manifest next update:     Sat 04 May 2024 19:01:44 +0000
Files and hashes:         1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: 6bxlmhv93DysgKRKNuvP7wZQwW1ImbBmQlU+rW+d+PQ=)
                          2: PpcdogixcULNIbouBJ6rUarSsOQ.roa (hash: aoEzrzQ6jN9jWA0r7vP1QFEQNfsVl+ZNhzO0jI2+6eQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d5:74:48:e5:f4:6e:32:3a:0f:cc:48:cc:eb:b7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
        Validity
            Not Before: May  3 19:01:44 2024 GMT
            Not After : May  4 19:01:44 2024 GMT
        Subject: CN=e7b8ea6666a40c4debdd9a22a45eed504339a183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:4d:ac:aa:58:5d:fd:d8:72:60:df:f5:6b:
                    37:79:05:24:7d:4f:f7:28:e8:b5:26:8c:84:db:d3:
                    3e:aa:c4:6a:c8:01:30:16:e2:75:fa:60:e6:7a:67:
                    f4:d7:b7:25:36:b5:00:ed:46:95:40:3e:c3:ba:22:
                    d3:c2:81:60:a4:f2:a4:6d:1c:90:1b:20:7c:da:ce:
                    bd:7a:b6:b3:6f:2a:69:42:ba:55:fe:0e:dc:d4:b5:
                    6a:a6:3a:53:8e:f1:1e:68:79:49:4c:1f:dd:91:72:
                    cc:fa:e1:79:32:74:be:1a:c6:87:14:1a:1d:60:2f:
                    fb:4d:a9:7f:80:7f:6d:0b:ed:77:96:da:33:2b:c5:
                    fe:ba:c3:07:96:de:f4:44:d2:c0:75:37:a4:5a:61:
                    ce:70:d4:01:5b:89:a9:0b:c5:15:47:7b:16:ad:5b:
                    ee:20:e2:45:ab:53:5f:d8:5e:80:82:26:04:3d:e7:
                    73:0e:1b:5a:d9:e6:49:0a:90:67:be:4a:85:d5:44:
                    53:d0:6e:d4:01:da:a7:29:a0:1d:6b:36:84:0f:1d:
                    fb:c5:51:09:ec:1c:01:87:7f:8e:12:7c:0c:65:f4:
                    27:8e:bc:5c:ba:48:8d:61:f7:27:ec:ad:94:ca:a5:
                    b8:c8:7d:55:a1:de:62:45:7c:31:7f:c9:ff:47:60:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:EA:66:66:A4:0C:4D:EB:DD:9A:22:A4:5E:ED:50:43:39:A1:83
            X509v3 Authority Key Identifier:
                keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c7:bd:82:fd:f4:55:ca:d7:bc:14:83:9c:9b:af:12:6a:6b:
         6a:86:38:86:a2:eb:30:80:21:09:cb:d4:e6:21:38:8a:a3:73:
         20:e8:ed:d6:07:41:58:97:c4:f1:a5:5c:75:0f:c6:8b:6a:f3:
         53:dc:6e:e9:97:70:4b:50:91:2c:0f:73:f3:0d:d7:d6:26:7b:
         64:61:fd:12:23:f4:c2:39:73:19:78:2d:9a:05:3a:3a:19:0a:
         c1:d3:1e:3c:1c:ec:20:b0:28:4d:f5:ca:17:01:cf:8d:fb:db:
         c5:43:81:75:d0:bc:7b:74:d1:a2:90:85:6c:b2:44:33:1e:d7:
         2f:1e:2f:44:e4:56:89:06:78:aa:8a:ac:71:b9:65:4c:f1:93:
         ed:cd:3d:5e:3c:e9:57:23:8e:ab:f6:99:c0:0b:a5:53:16:fe:
         2f:cb:b2:b8:fa:5b:76:c1:13:75:35:a6:52:7f:d1:ae:ad:b6:
         7c:c9:f7:ca:5d:8b:ca:a3:86:e0:2f:b6:b6:05:ac:34:17:da:
         64:22:9b:3c:92:39:09:91:63:47:26:b2:2b:b8:ec:d7:ea:bd:
         5e:52:88:7c:2c:75:17:e4:64:ed:99:60:3e:99:a6:07:b9:32:
         f6:fb:a3:39:6f:dc:27:e3:89:97:9b:bc:9d:25:79:f4:0f:1f:
         a0:ea:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:13:53 2024 by rpki-client on console-ams.rpki-client.org