Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File:                     3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier:          xWiRDOk+ViErCnVNRt0kRSZPbV/DJtAWDaaPflBUYiA=
Subject key identifier:   E4:48:B8:7F:68:4C:96:F0:40:C2:0F:F8:D3:E0:08:56:4F:54:03:E6
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer:       /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial:       018F5138FAEDED4DD975CA9176856E1BDE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number:          115C
Signing time:             Tue 07 May 2024 04:03:59 +0000
Manifest this update:     Tue 07 May 2024 04:03:59 +0000
Manifest next update:     Wed 08 May 2024 04:03:59 +0000
Files and hashes:         1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: A7tebPm2qt9xNuPUdLpmyweYh8LIebSu6sObDhBjgkI=)
                          2: qFml8DUiLOYSpc35VCsPyfgK3G0.roa (hash: tpKPY4d14p0c2/l+5FxC0Rzd4m4G9QxcBpfkzmlm+AY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:fa:ed:ed:4d:d9:75:ca:91:76:85:6e:1b:de:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
        Validity
            Not Before: May  7 04:03:59 2024 GMT
            Not After : May  8 04:03:59 2024 GMT
        Subject: CN=e448b87f684c96f040c20ff8d3e008564f5403e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:a8:8a:11:7a:3f:c6:d7:8d:e7:db:7b:de:
                    3c:13:6c:75:b6:9d:56:34:7e:82:8f:27:07:b0:5a:
                    e8:b7:00:4a:27:7e:be:45:02:dc:3b:46:02:43:7e:
                    0f:0d:31:39:f3:3e:cc:2f:32:aa:25:2d:39:f5:ef:
                    b6:9c:7f:37:a4:c1:e7:ea:68:9c:51:7e:a7:8d:f4:
                    dd:c6:2e:68:2c:f4:1c:7e:1a:2f:12:ee:38:f4:41:
                    1d:30:83:f6:18:41:1e:bf:41:76:1e:6c:b0:09:06:
                    e0:61:7a:00:2c:a3:de:d6:dd:75:40:e6:98:21:f2:
                    7c:be:50:c7:22:86:19:a9:38:73:f3:c1:d0:6d:b6:
                    c8:e6:10:7b:3f:63:41:90:06:b6:aa:78:24:31:64:
                    14:a8:da:67:d7:ae:c2:cb:72:b4:33:18:6b:46:ea:
                    a2:2d:d0:cc:9a:c6:57:3b:8c:2a:9a:d8:e8:87:53:
                    6a:90:29:b3:d7:4c:d2:05:7c:08:b8:75:e2:70:60:
                    bf:e9:8e:18:5d:95:e4:56:78:b5:05:01:0b:21:73:
                    e6:66:46:50:08:f5:75:bb:f8:5c:c2:cc:69:02:9a:
                    83:77:48:1f:35:84:a7:57:91:fc:78:ad:04:f9:40:
                    a8:65:8e:98:46:1e:af:1b:7c:b0:3a:5c:3a:c1:00:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:B8:7F:68:4C:96:F0:40:C2:0F:F8:D3:E0:08:56:4F:54:03:E6
            X509v3 Authority Key Identifier:
                keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:26:98:b8:08:94:79:59:dc:51:0a:23:ac:f2:48:a6:3c:c3:
         6b:3d:2c:a6:3a:f4:6c:05:b8:ab:2f:2a:36:52:12:1c:12:74:
         ae:b9:46:77:90:0e:b4:79:cd:30:f1:4f:da:69:98:ec:5e:fc:
         37:be:7c:a1:71:5d:f2:28:e7:2c:72:aa:5a:e2:b7:a2:1c:3b:
         29:fd:d8:e4:40:f5:19:9c:a2:ee:fb:92:d6:5a:89:ff:4a:ce:
         ee:4a:ed:01:cd:c9:8f:00:2c:c2:df:56:cf:ab:8c:3d:4a:3e:
         45:01:b2:9d:5a:a4:0e:84:5b:31:1d:8e:59:57:ba:e4:ff:8b:
         78:d7:79:cf:01:bb:9e:36:bf:49:50:27:0c:e6:64:17:a7:9b:
         21:d2:e6:99:8d:a9:37:c5:f5:e1:ef:17:06:13:9b:fa:1b:a9:
         75:1f:5c:46:6a:ab:fb:5a:b3:75:51:5c:0a:c9:fb:72:ef:68:
         aa:4f:64:7a:cf:79:39:25:f6:2c:61:8d:06:8f:5d:15:94:a0:
         c1:70:7b:bc:5f:a9:d3:95:97:1d:e9:cf:96:d2:fd:ef:bc:fd:
         48:6b:0e:e9:86:45:2a:aa:0d:a9:26:d0:e4:b1:0d:50:1b:f4:
         71:70:de:1a:37:25:18:fb:1d:09:ed:1a:de:d6:58:d7:bf:15:
         cd:16:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:52:49 2024 by rpki-client on console-fra.rpki-client.org