Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File:                     3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier:          +w6WYXL96JbqZj3NHtFL2Dt/13P8jR1yHPsMl3DK93I=
Subject key identifier:   3C:93:E0:89:1A:5C:8A:B5:89:61:27:E5:09:2C:59:E7:31:12:19:41
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer:       /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial:       0194056A9FBFA45635F5D08109DF6A5D4AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 00:01:01 +0000
Manifest this update:     Fri 27 Dec 2024 00:01:01 +0000
Manifest next update:     Sat 28 Dec 2024 00:01:01 +0000
Files and hashes:         1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: rioLH4LE8Jj3kSTpKt2ktb9XH1jbtZCPu3bsgbLz58k=)
                          2: TiZh5zBiO-g7dbop1oufWMKTu9g.roa (hash: V0sayPluiZ+cxNgTGXKjewufghGNoYKIMKuEqp+F4Ug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:6a:9f:bf:a4:56:35:f5:d0:81:09:df:6a:5d:4a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
        Validity
            Not Before: Dec 27 00:01:01 2024 GMT
            Not After : Dec 28 00:01:01 2024 GMT
        Subject: CN=3c93e0891a5c8ab5896127e5092c59e731121941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:b1:29:f9:ba:4c:88:a6:e7:e9:50:c0:f9:
                    7d:fa:78:30:39:ef:2d:68:2b:ba:80:01:f5:8e:36:
                    e6:06:8a:7d:01:b4:67:b3:c5:ff:cc:9b:87:38:44:
                    99:2b:dd:51:78:13:36:b0:00:31:54:79:72:b5:83:
                    31:3d:b9:28:f6:18:8f:55:cc:60:1c:aa:70:19:52:
                    5c:b1:2a:46:bd:5f:8c:92:96:38:dd:e3:ac:5c:0d:
                    b7:73:54:5c:a6:86:1c:a3:1a:99:28:a9:8a:48:ff:
                    0c:6f:5a:e1:88:d2:02:83:c5:dc:ec:0f:f1:a0:c0:
                    83:78:40:5c:14:c3:cd:f6:34:7e:52:6d:4a:6e:3e:
                    cd:db:74:93:7d:d1:e1:3a:3d:2f:f2:ed:1f:43:f5:
                    37:1a:f1:ae:2e:61:74:af:20:80:43:4b:96:d7:5f:
                    bc:c2:cc:c0:18:67:f1:50:2d:56:63:e0:33:73:07:
                    64:99:1d:89:ff:38:03:33:07:69:a2:e9:ac:95:af:
                    1c:45:2e:5e:60:f8:af:4e:21:df:f6:2d:4e:f1:2f:
                    b8:64:78:a1:62:2d:8e:eb:47:2a:cc:a2:0f:9f:6d:
                    6c:71:d2:bf:b3:c6:a9:5b:4f:2a:99:a5:16:d0:b9:
                    74:8f:2a:16:0c:60:67:fb:aa:15:47:77:98:d2:85:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:93:E0:89:1A:5C:8A:B5:89:61:27:E5:09:2C:59:E7:31:12:19:41
            X509v3 Authority Key Identifier:
                keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:eb:03:98:b0:e9:76:f4:f3:3d:aa:4b:00:dd:b1:10:41:2c:
         49:3f:dc:05:e9:c5:71:d0:a2:36:d6:52:64:f0:05:e8:a3:54:
         3c:51:92:d0:34:60:b4:f8:e3:f1:8a:47:2f:d3:21:43:fd:8b:
         aa:e0:c9:17:37:11:01:72:7d:a7:d4:14:66:a7:e2:68:6f:5f:
         ea:8e:e3:48:dc:5b:d7:71:9a:a1:4c:0e:33:da:c7:c3:e3:90:
         54:40:02:07:86:d1:b4:57:04:db:46:66:22:12:9c:81:dc:f6:
         11:33:48:89:25:6d:f0:53:e5:93:8a:68:28:c0:fd:44:bc:31:
         4d:c3:22:23:d9:e0:bb:73:fc:b1:29:43:2a:90:3e:18:f8:43:
         bc:25:15:f0:8b:67:fc:49:cd:c8:ae:d8:00:ee:49:83:66:61:
         67:f2:47:4b:f1:04:74:84:1e:5f:aa:a7:c8:5c:86:9e:6b:c5:
         b4:85:52:3f:b8:ab:78:b9:88:a5:ad:91:2b:bb:41:10:72:de:
         6a:93:75:77:8e:93:19:2a:90:09:ad:ad:e8:41:5f:c4:ac:ee:
         34:64:28:e8:4f:1a:25:1d:74:f1:22:bb:4f:d1:cd:5a:6c:ee:
         ce:cb:07:74:7e:a1:d1:ad:35:05:a2:09:b6:42:4f:33:19:49:
         4d:ce:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:49:33 2024 by rpki-client on console-ams.rpki-client.org