Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File:                     3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier:          rsQBLyCt/J//TDLETAOP38nBjB2U3gFF9ZrkVj2BV40=
Subject key identifier:   67:1E:EA:50:A3:7A:94:9B:3A:B1:11:2F:1A:11:B1:D5:75:39:9A:50
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer:       /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial:       018F889227AF672C3CF239CEAA93BC5F3E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number:          FD
Signing time:             Fri 17 May 2024 22:00:30 +0000
Manifest this update:     Fri 17 May 2024 22:00:30 +0000
Manifest next update:     Sat 18 May 2024 22:00:30 +0000
Files and hashes:         1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: GPAFhW+Pd5gmt+F2NC1eLc5aVg2qUdXntSr8+lfWv0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:27:af:67:2c:3c:f2:39:ce:aa:93:bc:5f:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
        Validity
            Not Before: May 17 22:00:30 2024 GMT
            Not After : May 18 22:00:30 2024 GMT
        Subject: CN=671eea50a37a949b3ab1112f1a11b1d575399a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:28:54:98:ba:5e:7f:52:3a:07:8f:0e:ab:
                    ac:ac:10:f7:d9:56:ce:10:2c:12:76:51:78:c1:25:
                    cb:d1:97:d7:a9:8f:12:45:49:28:2b:12:17:9b:13:
                    41:51:1e:69:d8:d0:2a:95:02:c5:94:93:06:0d:d5:
                    a8:df:58:b7:56:58:a9:28:a4:22:9c:ec:de:1c:b9:
                    6a:64:69:0c:21:7c:b6:35:09:11:9e:a0:72:f7:8f:
                    57:28:c4:db:42:69:d9:10:b5:6d:a6:8d:6a:88:3b:
                    b0:7f:78:34:26:5d:4b:06:be:d9:31:19:fa:5f:27:
                    ae:2d:33:73:7d:38:6d:58:f2:86:32:54:bd:fb:1a:
                    d0:1f:43:79:7e:a6:df:f6:7e:59:e2:a5:20:e9:6a:
                    ee:5c:93:04:e3:76:b0:f1:44:2e:75:ac:c4:d6:0a:
                    b8:93:51:68:d7:57:a3:94:82:1e:dd:11:cc:5e:44:
                    7e:99:a8:7b:73:9a:e8:de:78:c1:92:9a:69:62:cd:
                    64:58:2c:92:7a:47:8d:c1:76:ee:2b:f3:8e:5d:24:
                    fd:36:17:3c:e4:b7:b0:eb:55:a6:2b:3d:5b:98:35:
                    05:b8:95:fa:d7:2e:ba:92:75:e7:15:27:00:8f:65:
                    59:89:8a:7b:60:54:67:4f:5f:f1:ef:42:a0:a1:0a:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1E:EA:50:A3:7A:94:9B:3A:B1:11:2F:1A:11:B1:D5:75:39:9A:50
            X509v3 Authority Key Identifier:
                keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:14:fd:76:d8:bb:d0:56:0e:56:7c:74:21:ca:ae:87:61:
         dd:71:01:f6:60:f4:ce:97:74:85:31:9e:fd:f5:09:d8:d9:f3:
         bd:44:25:d2:a9:13:33:d3:bb:99:a9:91:25:6a:aa:ea:9b:a9:
         4d:d9:99:ae:c5:8b:42:2a:60:8a:7a:a7:d4:3c:a3:94:fd:39:
         5c:c8:8c:f6:5c:01:20:3a:16:17:e7:98:44:0e:fa:f6:a6:aa:
         26:b7:1f:1c:b0:e0:63:ef:8f:0e:4a:eb:6b:aa:aa:56:1b:69:
         7c:1e:29:aa:33:f5:84:1a:46:e8:8c:ff:a8:1e:b8:00:9e:9c:
         d5:87:23:84:09:db:7e:26:3a:cb:cc:1a:25:81:e6:a4:6c:4a:
         4a:fe:bb:c6:d2:65:70:b9:43:29:04:5b:3a:b7:0b:5d:b5:7d:
         f9:18:13:2e:3e:e8:94:54:20:07:34:61:eb:48:6a:f7:04:8b:
         fb:5a:68:a7:11:7a:8a:a4:6f:7b:26:72:ba:70:11:f1:50:68:
         4f:19:5c:ba:67:87:1d:de:64:d2:92:b5:01:c2:49:9c:c6:5f:
         14:c2:5d:fd:3d:5f:e3:bb:a5:61:fb:d6:69:a8:b9:eb:c4:89:
         e2:44:6e:a3:dd:ac:15:0a:58:1d:8e:e6:ed:37:ed:a1:e5:f9:
         3d:39:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:12 2024 by rpki-client on console-fra.rpki-client.org