Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
File:                     ADn3QWhtoR55rnxeSGqikICMsbc.mft (raw, json)
Hash identifier:          qyyHwB0eHYdrjosWAKJ3OISMjlAzSSVxzqN4UqhhVAU=
Subject key identifier:   09:2C:D1:7E:05:5F:A3:1E:DA:1B:C9:D9:ED:79:65:1B:3D:F0:C5:08
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Certificate issuer:       /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial:       018F3B53D9FEF42581659DE03942ECEFFB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
Manifest number:          0DFC
Signing time:             Thu 02 May 2024 22:01:42 +0000
Manifest this update:     Thu 02 May 2024 22:01:42 +0000
Manifest next update:     Fri 03 May 2024 22:01:42 +0000
Files and hashes:         1: ADn3QWhtoR55rnxeSGqikICMsbc.crl (hash: ZVbXwPoIH68+5Tzgkl3sFXJJfT4aRKyW2xZHU0MtaEc=)
                          2: P5sFua-9XSzGYAB59FdFUtOF7x4.roa (hash: /mBzvD6O/nxpli/U1/Aw6hs3100iFP5r0jhybjoklA0=)
                          3: QuaGRP6hjegGxrEifz7JyKFSUwc.roa (hash: Kma1kLh1hMAMt38D1q5P50DS0aP8v17GGizvtbNKvu4=)
                          4: XBCxfjxKR5rvZqj3ChdpOo0q4rw.roa (hash: B41Jwr+a7Sg+gen6fe5DRDpbYEq3T+WrCzO/lfN0naw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:d9:fe:f4:25:81:65:9d:e0:39:42:ec:ef:fb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
        Validity
            Not Before: May  2 22:01:42 2024 GMT
            Not After : May  3 22:01:42 2024 GMT
        Subject: CN=092cd17e055fa31eda1bc9d9ed79651b3df0c508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:84:d6:5b:f8:e0:d4:91:48:0e:9b:ce:8e:
                    31:8c:25:5b:4e:5a:90:25:92:ad:c9:14:7d:3f:e0:
                    fb:51:4d:3a:2d:dc:29:c7:5e:b3:69:f1:82:67:8f:
                    5d:0d:53:99:81:1c:f7:7f:12:04:b1:4b:08:f0:11:
                    70:ad:29:9d:c1:c1:91:5f:7e:c0:80:5a:99:07:d0:
                    0a:84:df:bc:30:6c:b9:60:dc:3b:89:97:73:58:f0:
                    be:69:ca:78:68:d8:42:f8:6b:4e:55:1b:0d:d6:89:
                    55:85:4f:06:ed:05:b0:b0:85:84:37:ca:37:3b:c3:
                    dd:a8:c5:db:0a:1c:74:b8:e5:78:20:43:8c:3c:1b:
                    04:47:62:cf:32:10:d2:95:18:88:19:bb:75:3b:18:
                    b9:af:dc:1b:88:3d:3e:49:bb:b7:99:8d:45:fe:bd:
                    9b:3a:78:f3:57:4f:0c:40:dd:15:06:66:2e:a7:b2:
                    f7:02:99:13:92:6d:4d:c0:f4:09:45:f5:ff:e2:ec:
                    a1:98:21:85:28:5b:2c:97:92:5f:17:f4:ae:36:7a:
                    ea:e9:79:22:9c:29:46:fe:dc:4c:26:ba:9a:4c:79:
                    dd:a3:2a:f1:82:5c:25:61:70:e5:03:ed:36:59:c7:
                    02:cd:f1:c0:11:2d:ff:5b:36:b4:be:62:ca:8c:eb:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:D1:7E:05:5F:A3:1E:DA:1B:C9:D9:ED:79:65:1B:3D:F0:C5:08
            X509v3 Authority Key Identifier:
                keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:3f:1e:fe:35:b3:6f:5a:4d:01:c1:f1:6b:af:fd:2a:9b:
         0c:65:97:7f:ad:38:18:8c:a3:ad:f7:da:83:3a:87:4f:7e:68:
         64:9a:0d:8b:a7:2a:20:69:ba:e8:b0:17:7e:25:a5:51:6e:02:
         43:7d:77:a8:8a:17:ba:04:0f:67:b3:3f:7f:fc:82:53:0d:5e:
         13:49:01:cc:2a:3e:b8:a1:9e:93:df:dc:f3:4b:54:c9:61:de:
         7c:48:cc:b7:27:99:27:06:44:8b:ad:12:d7:d3:a6:d0:61:bd:
         af:a6:92:f3:0e:e0:e3:de:b1:be:aa:20:ec:99:74:ad:c2:b2:
         00:17:71:ab:c2:8a:ef:5b:42:21:8d:b8:2c:5d:a5:1e:8e:e9:
         8e:f1:fc:45:b2:86:c5:90:14:5a:3d:6e:b9:f1:c3:58:fd:ba:
         6f:1a:0c:ef:12:45:c2:c9:94:08:4f:f7:ac:a2:29:6a:df:9c:
         7c:c6:42:29:c6:47:ed:9c:6b:a9:3f:3b:ca:8a:6e:2e:66:be:
         24:48:08:e4:79:c8:98:3a:b5:76:c4:31:6d:35:23:b6:b3:b0:
         f8:22:e8:c2:96:ae:dc:12:a2:26:21:3a:b4:59:4d:b2:5d:aa:
         e0:aa:60:58:99:86:29:06:25:f6:9e:cd:d1:ed:36:aa:3e:e4:
         d2:17:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:18:13 2024 by rpki-client on console-fra.rpki-client.org