Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File:                     3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier:          r3BXF9WweZPurH7yr9orbDTV8E/zvmtui5nyjhTa1g8=
Subject key identifier:   EF:CF:F2:F4:06:C3:E9:E8:30:62:BC:F2:86:4B:9A:1D:60:17:B5:B1
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer:       /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial:       018F3DE8AD876FF0921324EDD2B3E18C7952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number:          086D
Signing time:             Fri 03 May 2024 10:03:29 +0000
Manifest this update:     Fri 03 May 2024 10:03:29 +0000
Manifest next update:     Sat 04 May 2024 10:03:29 +0000
Files and hashes:         1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: NgZKa7HAptjm4cpZsDj2zeixGMSdOz1wNjLnQS4Fqgg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e8:ad:87:6f:f0:92:13:24:ed:d2:b3:e1:8c:79:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
        Validity
            Not Before: May  3 10:03:29 2024 GMT
            Not After : May  4 10:03:29 2024 GMT
        Subject: CN=efcff2f406c3e9e83062bcf2864b9a1d6017b5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:07:0d:67:d9:bb:d4:9b:9a:a9:e9:aa:bb:11:
                    4d:4f:d9:a3:a1:78:85:77:a5:8b:01:e0:c6:1b:ac:
                    73:fe:b8:f7:7b:b2:a7:f3:2a:70:41:83:84:ff:d9:
                    de:22:ef:5e:7c:27:51:78:3a:a0:b3:00:80:63:75:
                    68:16:a5:37:90:ce:ea:5f:a7:3f:b5:89:f0:f6:1a:
                    13:dd:05:7a:49:20:b0:67:f3:57:27:24:74:74:6b:
                    7a:1d:ab:f3:1a:9c:62:38:5f:3b:e9:5f:cc:ca:00:
                    81:74:ab:c3:a8:a1:69:f4:67:1c:89:57:af:92:2d:
                    45:2e:41:a3:d8:b7:bf:48:db:42:7c:cd:a2:8b:b2:
                    ef:83:1c:6e:c8:bc:eb:69:62:03:88:02:9e:a7:4b:
                    b0:07:d6:83:f0:e6:38:3a:af:6f:38:83:31:b2:b5:
                    97:a6:04:8a:bf:5a:ed:68:76:33:2c:cd:ba:33:3c:
                    5c:e6:05:fc:93:cb:a9:71:56:b7:4d:bb:f4:e0:ab:
                    cc:81:db:06:be:fd:1c:31:fe:18:ff:4d:93:b3:6c:
                    7b:07:44:e9:65:e7:43:0b:82:16:17:6c:d7:fd:7f:
                    41:91:db:01:80:06:e5:40:c9:0e:a3:51:45:e9:00:
                    0f:c5:e8:c2:3a:de:c7:42:fd:9e:ef:3e:67:bc:9e:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CF:F2:F4:06:C3:E9:E8:30:62:BC:F2:86:4B:9A:1D:60:17:B5:B1
            X509v3 Authority Key Identifier:
                keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:a6:42:5e:49:68:46:65:3f:0e:17:d5:8a:58:a0:a5:4e:
         7e:d0:50:c1:0c:79:8e:ff:2c:66:91:ac:37:76:16:6e:0a:bc:
         6a:f8:f8:07:e4:92:f3:65:24:e1:12:2d:83:bf:bd:55:7b:c0:
         ff:ee:89:5a:ad:46:86:0f:51:ae:bc:30:86:6c:d0:08:cc:a7:
         0b:68:d3:32:57:98:35:39:cd:7d:35:53:91:45:9f:75:60:42:
         65:23:73:2a:e1:ff:e5:85:b5:de:18:6a:77:da:72:a7:07:b4:
         b1:61:0c:1e:e7:4a:a5:5c:de:f2:e2:5f:dc:e2:19:4f:60:4f:
         a7:40:83:c5:df:e4:78:21:74:1a:50:5a:d4:ba:26:2d:57:7d:
         a2:cc:e3:ab:6e:b6:31:ae:99:15:ca:62:cd:a9:78:dd:34:a9:
         02:8c:f5:ad:1c:30:2b:14:7b:b2:2c:33:e6:f3:ad:07:70:8d:
         59:82:e7:96:93:18:ee:95:e6:0e:39:a2:f5:58:41:1c:4b:40:
         20:c4:25:57:8a:10:4f:10:f3:29:cb:5a:91:f5:96:b7:81:8e:
         43:07:e5:bb:fb:6b:cc:60:0d:5a:a9:f7:60:ce:99:3c:82:b2:
         34:ab:e1:37:66:65:59:a1:e7:bd:c7:49:f8:35:a2:40:ca:c3:
         78:c7:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:57:33 2024 by rpki-client on console-fra.rpki-client.org