Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File:                     81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier:          lMMXM8yxbliSQRi73jYWswVB+UgEr9tPAmNuqWKM9FM=
Subject key identifier:   24:00:26:39:1A:D3:8E:00:54:47:C3:41:5F:80:C8:0C:DD:50:5C:2E
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer:       /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial:       018F3A40B10F35F03074FEC852CB188DA9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number:          07F3
Signing time:             Thu 02 May 2024 17:01:09 +0000
Manifest this update:     Thu 02 May 2024 17:01:09 +0000
Manifest next update:     Fri 03 May 2024 17:01:09 +0000
Files and hashes:         1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: xavmklRLyf6A4lS/CjzmGD6nrCT/zUPMQ3+vEoaar9s=)
                          2: FodEnnOoVzy0vd61kGNgjFNBHdg.roa (hash: 3WEfwm1M3YUOqWKCwi0jeppOb8WaIuF/FTiAFgHAbLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:40:b1:0f:35:f0:30:74:fe:c8:52:cb:18:8d:a9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
        Validity
            Not Before: May  2 17:01:09 2024 GMT
            Not After : May  3 17:01:09 2024 GMT
        Subject: CN=240026391ad38e005447c3415f80c80cdd505c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:46:32:e8:64:34:70:13:81:70:a7:d1:11:
                    f7:7b:92:19:72:7d:8d:5e:b3:70:8e:92:6a:15:16:
                    f3:60:70:3d:7d:96:1a:f2:87:3f:71:21:94:c2:55:
                    c6:42:19:59:5c:69:19:fb:27:56:89:e6:0b:61:b9:
                    92:a8:fa:03:d0:4c:50:e5:ce:94:eb:d2:dc:3e:50:
                    8b:88:eb:7b:5e:83:76:25:64:77:11:50:b7:1f:e1:
                    6d:34:1d:da:00:ba:73:39:07:7e:49:a6:00:e8:a6:
                    7f:d3:d4:f1:be:5a:88:ab:41:b3:ad:4e:11:fb:6e:
                    c8:da:9f:12:bb:74:2b:6e:49:87:ce:4c:b9:d0:5d:
                    22:49:c2:18:ca:ee:c6:6f:1b:9a:19:28:4b:77:ca:
                    bd:1b:9c:b0:51:2a:20:2e:93:3b:54:7d:1e:4b:f4:
                    a9:bd:93:58:e9:90:dc:6f:29:f1:2e:3a:8c:ee:7c:
                    fa:d0:82:ff:7e:3f:10:0a:dc:f1:95:2f:38:d0:95:
                    47:5a:0b:34:ef:af:c5:c0:fa:ca:18:c1:c8:dc:b8:
                    25:36:6b:19:f1:80:1c:42:36:2b:82:6e:5a:7a:bd:
                    a9:08:61:d6:c2:90:2a:09:43:0f:2a:a2:bc:cd:e4:
                    f5:46:4f:0d:20:d2:c1:6a:9c:f9:ce:08:f0:95:bb:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:26:39:1A:D3:8E:00:54:47:C3:41:5F:80:C8:0C:DD:50:5C:2E
            X509v3 Authority Key Identifier:
                keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:79:5d:07:8f:af:b8:61:2a:eb:7d:b9:2f:4c:73:04:83:
         36:96:c1:fc:4a:5f:cd:72:15:86:7b:c9:54:20:57:e1:55:b5:
         75:05:f4:27:85:41:6b:75:e6:ee:4a:e0:29:83:2c:8a:f4:5c:
         c8:ab:83:14:47:2e:13:9b:91:d1:ba:51:78:b4:5f:ab:fe:3c:
         7a:7a:c0:80:6c:5a:75:8a:e6:1d:04:e3:f0:ea:91:eb:9a:f0:
         20:91:ee:51:92:4e:6b:4e:f7:7d:0d:76:00:ee:f5:95:66:fb:
         07:d6:53:ca:f1:80:90:02:a3:13:1b:2b:72:3b:53:c6:15:be:
         71:f1:2d:77:e3:60:25:07:42:1f:67:37:46:2c:d7:6b:ae:87:
         c4:40:51:02:a7:d8:e3:1e:99:0f:b9:2e:5b:5d:7e:a9:ee:67:
         e0:b7:22:a0:17:ff:2d:bd:67:bf:c5:97:93:d4:a0:4f:e5:95:
         26:d8:4e:00:e5:d5:0f:ed:32:2f:33:ca:dd:25:e4:7c:14:d7:
         31:8b:8b:75:14:5c:3a:a0:e9:9d:f6:8c:9d:da:72:31:34:69:
         b4:67:54:f3:23:09:ef:e1:36:6e:aa:2f:e9:d0:13:7e:f2:13:
         d5:b8:f4:bc:6b:40:1f:fc:b4:ba:1f:f6:1e:9d:ed:d5:c6:39:
         9d:df:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:31:17 2024 by rpki-client on console-fra.rpki-client.org