Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          /e1pbe/RMGxri67OEDsvsgEEjej3q2zTXL0VK26dIK0=
Subject key identifier:   D3:55:A2:7B:43:5B:DB:CA:C6:C7:39:D8:5A:D4:D5:12:DD:BC:CB:85
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       0193579BDFD15334DA29A3A02840EC9F5173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          07F1
Signing time:             Sat 23 Nov 2024 06:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:53 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: PM8PfUh/tdrFltJe6wr5nEPUu5BAr5jra9uSythWMXQ=)
                          2: T6Zb-4ko1gVhSldgLe3tm2yxpy4.roa (hash: RRhkGo8BwVi6QmK0sipn2dDGQ7587q529vTVQ0ATq94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:df:d1:53:34:da:29:a3:a0:28:40:ec:9f:51:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Nov 23 06:00:53 2024 GMT
            Not After : Nov 24 06:00:53 2024 GMT
        Subject: CN=d355a27b435bdbcac6c739d85ad4d512ddbccb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:4c:ab:63:63:f3:85:f6:f8:9b:74:8b:31:
                    ce:65:9d:04:6c:da:d4:50:48:26:c0:2e:2e:c6:00:
                    16:00:d7:b2:96:e3:5d:30:4d:f7:52:57:c2:5e:2c:
                    36:c1:82:a0:7e:7e:2e:3e:c5:86:28:c8:87:0c:3a:
                    c3:80:d1:c0:bb:2a:fd:97:00:99:d9:55:e3:9a:a3:
                    7e:89:68:af:0a:f8:80:45:5c:1b:a7:cd:5a:9a:29:
                    d7:4b:21:a6:77:25:d8:a5:59:e7:3e:34:28:40:15:
                    99:bc:e5:e2:3a:51:94:d2:39:83:d1:a9:89:be:76:
                    e6:7b:ed:56:23:87:93:73:24:6d:a6:de:0a:3b:1f:
                    09:69:7a:64:8a:d2:2a:6f:16:a1:19:fd:d6:78:1d:
                    d7:62:0f:5e:97:e4:3c:4c:f3:12:a0:ca:6c:01:d2:
                    1f:b8:9e:b9:2b:cf:28:e2:4e:a2:41:f9:73:80:b3:
                    1b:14:7d:16:89:67:cc:17:78:2e:3c:c9:b9:d3:9e:
                    7b:af:9c:4f:77:57:2c:ef:7c:53:ad:d1:a6:3d:30:
                    cb:b8:2c:99:5f:77:dc:20:19:7b:68:a7:a8:d5:7b:
                    67:b6:03:bf:89:fe:30:0d:ef:c7:bc:24:66:7d:69:
                    45:25:0f:96:d0:31:d5:35:c2:61:41:51:5d:06:b1:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:55:A2:7B:43:5B:DB:CA:C6:C7:39:D8:5A:D4:D5:12:DD:BC:CB:85
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:43:72:a1:66:15:3c:25:17:6e:00:61:ac:fe:2d:98:e4:
         4b:da:0d:ee:3a:0d:f2:21:cd:04:dc:cd:7e:53:42:8b:72:dc:
         4c:dc:f6:c4:2c:cd:80:3c:2a:57:5a:6f:e8:ea:54:c4:f6:99:
         92:94:e7:64:72:13:58:07:8d:85:8c:db:68:78:9c:55:c4:84:
         92:0e:f5:66:3b:5f:d8:7a:8a:43:bc:aa:7a:fa:13:ad:a7:35:
         2f:c1:fe:cb:32:ab:ec:e5:90:7b:3c:26:ba:20:f2:d3:4c:77:
         61:51:2e:3e:a2:01:54:5e:8f:95:ca:64:c3:43:63:a4:b5:52:
         17:76:66:9c:17:1a:27:2d:62:a2:ce:63:bf:ae:1f:a8:b5:1e:
         31:d1:b3:d3:f6:07:3b:e6:db:4f:11:60:94:36:95:87:c1:ec:
         2f:52:5b:f9:4b:56:5a:2c:26:04:c6:e9:26:23:19:59:0f:10:
         e6:f2:23:9c:e1:f7:74:1d:76:6e:ce:6a:d7:05:73:a2:e8:18:
         0d:ba:38:01:a3:33:f2:e1:c3:60:28:ed:70:35:bc:c3:1e:e5:
         56:5b:53:e4:62:2d:d7:08:3b:58:9a:17:29:22:af:e5:a3:a5:
         38:2e:ee:06:92:20:88:e8:7b:ac:9b:94:0a:2b:fe:e5:a0:39:
         a6:5b:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:44 2024 by rpki-client on console-fra.rpki-client.org