Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File:                     333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier:          WzmFPLKe+8jJNehI07OBRPu12Llvok17r1VaFJychn0=
Subject key identifier:   FA:AC:1B:8F:F7:0E:40:63:E5:AB:23:46:64:CB:FB:EE:07:73:E5:12
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer:       /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial:       018F2E7359D5E520A7811DE25697883649E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number:          114B
Signing time:             Tue 30 Apr 2024 10:01:02 +0000
Manifest this update:     Tue 30 Apr 2024 10:01:02 +0000
Manifest next update:     Wed 01 May 2024 10:01:02 +0000
Files and hashes:         1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: lBKE1Tiv9sEAGsRHC5ieLeA1xHU3a5hNeFJJdiMZlYo=)
                          2: C3rZ7syzF0wu21u-o-RBtrmyrpc.roa (hash: WxrvCsPsEBGUd01QjkZBvkQgu8zopFqrX5g9PMiskqw=)
                          3: YXy7s8MmJPjCMgX9JWB11BbCRWU.roa (hash: Y3ROw8mCKN56ldprVQPPxkA3rtB5SlzvxrYqYk6rgO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:73:59:d5:e5:20:a7:81:1d:e2:56:97:88:36:49:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
        Validity
            Not Before: Apr 30 10:01:02 2024 GMT
            Not After : May  1 10:01:02 2024 GMT
        Subject: CN=faac1b8ff70e4063e5ab234664cbfbee0773e512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:53:ee:5b:59:05:fe:f7:0e:f6:11:11:8b:05:
                    06:d9:cf:03:61:49:5f:49:c9:ab:cd:d3:cf:d8:f3:
                    db:ab:f1:b7:37:0e:b6:68:4d:e7:bf:46:ef:a0:4a:
                    fe:a3:72:11:e8:26:7b:59:01:54:b6:0f:15:01:9f:
                    83:cf:b1:57:23:75:ae:74:44:2b:ca:d7:d2:41:23:
                    74:0e:d8:99:4e:c3:4c:31:bc:e5:b8:21:86:9e:66:
                    93:d8:2c:62:06:d8:bb:55:d9:98:8e:ea:f8:4d:a0:
                    87:83:b0:81:46:f4:d5:13:17:77:48:d1:f2:8d:33:
                    5b:3e:e1:99:db:a4:ec:f6:91:5c:41:09:61:d6:44:
                    18:ea:bb:3b:db:92:c9:c5:89:7d:63:9d:4e:0d:9d:
                    31:f4:d3:b8:b4:c6:8b:ba:ba:45:7f:81:79:39:8d:
                    ea:05:64:d9:a2:7c:ae:15:ad:7e:9e:4b:91:d7:63:
                    77:0d:2f:9a:14:5b:3b:38:1d:20:77:a8:24:91:27:
                    4f:b6:66:7d:03:09:1f:ba:cf:83:57:35:d5:b2:6f:
                    ad:6e:3b:38:60:4e:72:f8:d2:e8:7e:a6:3d:c4:2c:
                    88:9e:cd:5a:14:e5:ed:44:65:c1:d4:db:6b:31:8a:
                    2d:23:53:7a:5e:51:26:c6:fc:66:55:85:96:6c:df:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AC:1B:8F:F7:0E:40:63:E5:AB:23:46:64:CB:FB:EE:07:73:E5:12
            X509v3 Authority Key Identifier:
                keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:b3:cd:37:65:d6:43:e8:60:53:d5:70:6c:1f:a4:0d:17:
         44:76:b3:6c:77:3e:6a:aa:2d:3f:f9:52:9a:b1:7c:44:88:6e:
         30:2d:d1:4b:52:05:46:b5:99:eb:16:cf:6c:02:75:43:1c:1d:
         dc:21:39:6f:20:2c:5b:f5:bb:7d:e9:17:8f:3f:83:00:00:ea:
         b3:37:fc:ac:32:47:01:70:8c:82:ac:13:65:6c:80:98:02:3e:
         e2:7e:2d:1e:ce:56:b3:4f:09:2e:51:89:ef:a8:2d:20:10:38:
         fa:69:c0:5a:ae:89:4f:9d:84:dc:41:fc:66:68:47:b0:8e:52:
         ac:b7:bf:68:66:cf:d6:82:cd:88:4c:8f:fd:3a:72:9f:22:12:
         ed:35:77:bf:48:4a:1c:91:12:cf:e1:1b:15:e7:f9:b1:7c:9b:
         8d:7d:29:ca:fb:c8:c5:d2:e2:84:c6:90:d2:d7:d3:ab:3e:5e:
         6e:c0:df:e2:78:1b:f8:5e:4b:d3:42:9b:e4:45:ee:10:fc:f2:
         49:b0:ba:f0:04:4c:54:75:d6:a2:2a:07:a7:d1:28:b9:76:ad:
         c4:a2:7d:4e:75:2c:55:30:d7:87:fb:77:b8:bb:57:c2:67:40:
         b7:9b:ed:14:fd:ec:fe:99:30:66:1a:48:31:72:c4:28:70:21:
         f5:90:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 13:53:27 2024 by rpki-client on console-fra.rpki-client.org