Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File:                     H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier:          hiuqA/m7B5CtPXjEJsSgsgriLG6slWDTp+fRJkQ1Z+k=
Subject key identifier:   DC:F0:E0:DF:31:A4:CE:AF:98:77:CB:56:71:9C:66:B2:6A:75:7A:63
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer:       /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial:       018F2DCE896376DD13F30BE26741C53D1289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number:          114A
Signing time:             Tue 30 Apr 2024 07:01:01 +0000
Manifest this update:     Tue 30 Apr 2024 07:01:01 +0000
Manifest next update:     Wed 01 May 2024 07:01:01 +0000
Files and hashes:         1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: sTGfEDYELBguYLFAZ+nMcL336c1PTcM2+Pali9+zHN0=)
                          2: TVeHjhVWbICpNHZP772KOh7sIXA.roa (hash: /rFgWEBK5MuYOGSTb1HsjVhMUcJExp31MsA6lxna8gY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:ce:89:63:76:dd:13:f3:0b:e2:67:41:c5:3d:12:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f74988332069e1835246a85a1094125152b3765
        Validity
            Not Before: Apr 30 07:01:01 2024 GMT
            Not After : May  1 07:01:01 2024 GMT
        Subject: CN=dcf0e0df31a4ceaf9877cb56719c66b26a757a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:bb:37:e6:2b:e6:12:42:2e:e2:16:7d:e8:
                    9a:84:fb:21:dc:2d:f8:41:2d:2c:cc:55:79:91:ab:
                    45:e6:3b:23:1c:40:e7:b0:61:71:8f:8b:40:47:47:
                    63:0c:aa:49:7a:e3:c3:d0:b8:35:8c:6f:bf:ec:24:
                    21:7d:c3:eb:06:40:83:50:d7:dc:56:06:1b:a8:6a:
                    b8:f0:8f:a0:b4:4f:9e:31:b0:f5:b9:fe:8a:ec:6d:
                    63:24:84:24:a0:d6:aa:f4:62:c3:2c:4a:b3:1e:8b:
                    66:74:c2:f7:f3:48:c4:32:db:56:55:93:74:19:f0:
                    38:2b:1c:88:69:b8:af:4a:8c:31:6e:b8:ed:d1:2d:
                    28:0b:94:49:62:11:a4:43:f5:77:56:d0:f7:4a:d4:
                    73:62:94:fc:d7:77:ca:8f:4e:b5:1f:b0:0b:b1:6b:
                    c7:62:ae:eb:ac:59:60:51:72:a5:99:04:a5:95:72:
                    1b:0d:8e:08:58:ef:9c:ce:d0:2c:10:38:62:14:8e:
                    d0:7e:42:3d:63:03:10:d1:b5:46:13:8f:93:1d:12:
                    19:08:7f:93:9e:8b:ef:f0:64:ae:f3:ea:92:f7:15:
                    57:5d:ef:b7:22:86:42:b1:a9:e5:3a:12:b3:79:71:
                    1f:d0:33:df:79:e6:40:a0:f5:bd:04:74:38:f9:d5:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:E0:DF:31:A4:CE:AF:98:77:CB:56:71:9C:66:B2:6A:75:7A:63
            X509v3 Authority Key Identifier:
                keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:9e:ed:ca:48:be:91:4a:6d:1d:2c:32:4a:05:a5:8e:0c:
         07:d8:05:5b:58:b0:eb:2a:7d:96:86:42:38:5b:f7:84:0a:5b:
         29:d7:44:4b:20:8d:ee:99:5b:b6:b1:a6:d4:57:cc:b8:45:39:
         46:99:f8:26:a4:b7:52:ca:ce:46:03:58:68:25:d7:85:98:09:
         5b:2b:b8:9a:91:29:4f:85:9c:0d:0b:73:57:30:d9:52:cb:af:
         0b:7e:24:bd:d3:d0:08:45:70:7f:ac:31:5a:18:28:53:d6:bf:
         08:f0:65:d1:2c:a4:50:54:e1:b4:b5:4b:fc:97:ef:17:5d:bc:
         7f:6c:02:d2:95:0e:97:e8:07:9b:23:49:3a:66:0b:fd:23:c6:
         00:21:57:f2:a3:af:9c:30:8c:ba:79:16:34:70:26:fb:51:a6:
         23:d5:78:2f:ac:2b:bb:6e:c8:72:b5:7e:72:05:11:8b:30:52:
         c3:13:b6:75:20:46:b2:d6:c6:cb:02:09:d8:81:91:71:7a:97:
         9b:a7:a3:8b:8c:cf:f9:75:59:9c:6b:30:62:62:40:48:8e:f7:
         fc:f2:c0:85:0d:dd:18:a3:fe:87:87:db:51:3a:71:72:c2:71:
         13:80:f7:dc:46:7c:a1:be:65:5e:96:ad:f6:9f:cb:11:19:33:
         b2:c0:a0:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8tzoljdt0T8wviZ0HFPRKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzQ5ODgzMzIwNjllMTgzNTI0NmE4NWExMDk0MTI1MTUy
YjM3NjUwHhcNMjQwNDMwMDcwMTAxWhcNMjQwNTAxMDcwMTAxWjAzMTEwLwYDVQQD
EyhkY2YwZTBkZjMxYTRjZWFmOTg3N2NiNTY3MTljNjZiMjZhNzU3YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvO7N+Yr5hJCLuIWfeiahPsh3C34
QS0szFV5katF5jsjHEDnsGFxj4tAR0djDKpJeuPD0Lg1jG+/7CQhfcPrBkCDUNfc
VgYbqGq48I+gtE+eMbD1uf6K7G1jJIQkoNaq9GLDLEqzHotmdML380jEMttWVZN0
GfA4KxyIabivSowxbrjt0S0oC5RJYhGkQ/V3VtD3StRzYpT813fKj061H7ALsWvH
Yq7rrFlgUXKlmQSllXIbDY4IWO+cztAsEDhiFI7QfkI9YwMQ0bVGE4+THRIZCH+T
novv8GSu8+qS9xVXXe+3IoZCsanlOhKzeXEf0DPfeeZAoPW9BHQ4+dVLVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzw4N8xpM6vmHfLVnGcZrJqdXpjMB8GA1UdIwQY
MBaAFB90mIMyBp4YNSRqhaEJQSUVKzdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zZmE0NWQtNjFiNi00YTI2LThkN2Yt
OGQ5ZDc1MmM0ZjRhLzEvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zZmE0NWQtNjFiNi00YTI2LThkN2YtOGQ5ZDc1MmM0ZjRh
LzEvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbSe7cpI
vpFKbR0sMkoFpY4MB9gFW1iw6yp9loZCOFv3hApbKddESyCN7plbtrGm1FfMuEU5
Rpn4JqS3UsrORgNYaCXXhZgJWyu4mpEpT4WcDQtzVzDZUsuvC34kvdPQCEVwf6wx
WhgoU9a/CPBl0SykUFThtLVL/JfvF128f2wC0pUOl+gHmyNJOmYL/SPGACFX8qOv
nDCMunkWNHAm+1GmI9V4L6wru27IcrV+cgURizBSwxO2dSBGstbGywIJ2IGRcXqX
m6eji4zP+XVZnGswYmJASI73/PLAhQ3dGKP+h4fbUTpxcsJxE4D33EZ8ob5lXpat
9p/LERkzssCgOw==
-----END CERTIFICATE-----
Generated at Tue Apr 30 10:56:19 2024 by rpki-client on console-fra.rpki-client.org