Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          9l4BTbLsb77HAz/wLSt1/E7/wxUss532Gsxe0eLctug=
Subject key identifier:   E3:96:9F:C2:42:3E:58:E0:12:4B:5E:C5:E9:2B:8F:9A:E7:22:AA:6F
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       018F381CAD79274895F80BFBE82C1AB9C95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          0E9B
Signing time:             Thu 02 May 2024 07:02:34 +0000
Manifest this update:     Thu 02 May 2024 07:02:34 +0000
Manifest next update:     Fri 03 May 2024 07:02:34 +0000
Files and hashes:         1: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: 4JrkKcd106qHpgZYYYjDiwAHrM2OYqsB0YOWRbY13fs=)
                          2: L89QI2tLX7Dcv88b4y8T9VgeMC4.roa (hash: 8LQfbgkoOXBYjwVv3Rn9O97EBV9Nd3rinl1SLeFmtiQ=)
                          3: WNLOS95A11G_MgTn9hjPe2hFNqc.roa (hash: aUqYeJWG2HAts87QDuxPvy3sgBgWWm69OK3NDZNrt3k=)
                          4: ZB8poDHsgXcIZT1fwB-zLFeVhL0.roa (hash: l7aViy8WvahA5iZMOfZ94sIP20XP8wwwRuvl2K2Bq2g=)
                          5: bo82_6jnrICB9ITbjwq9lY_dfuM.roa (hash: ff8mLc4A6pGMkJm2IIiBnnKd3U5qOVqFFC1Pn5KQH4Q=)
                          6: qXZwtAvq7eydd5mduV9jE30kTNo.roa (hash: bT1kmCgIhklit3nhponFMMJdgEPc/bvPTN5LmpD/vaU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:ad:79:27:48:95:f8:0b:fb:e8:2c:1a:b9:c9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: May  2 07:02:34 2024 GMT
            Not After : May  3 07:02:34 2024 GMT
        Subject: CN=e3969fc2423e58e0124b5ec5e92b8f9ae722aa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:9a:ad:18:a1:ee:21:b3:83:1c:8e:e4:20:
                    7e:7e:27:84:ac:19:f0:1b:34:db:75:9b:fd:13:e0:
                    75:02:36:84:e3:3e:37:26:e1:52:e5:66:4a:34:9c:
                    5a:0d:b1:89:dd:b9:73:27:7b:c2:a0:73:41:3f:e6:
                    1b:0c:7d:97:dd:59:ae:a2:88:96:c8:79:97:65:e3:
                    ec:c0:c1:5b:c2:ba:cf:a7:a2:f0:ae:cc:5d:2c:ed:
                    d4:3f:d8:47:ea:42:8c:5b:e6:8c:27:20:61:ce:54:
                    2c:05:16:d1:80:b8:1a:e1:53:06:b5:4a:44:a5:a8:
                    fc:82:66:6d:df:11:e4:70:7a:3d:d7:dd:e7:39:24:
                    6d:5a:b8:d2:ed:03:fa:0e:2a:08:92:47:b3:53:37:
                    c0:a4:79:39:98:9c:00:33:cc:e2:0c:11:7f:4c:f5:
                    a5:a4:a2:19:48:59:6d:66:9e:cb:0c:04:6f:0c:2e:
                    e2:d6:22:cf:de:b9:a6:4b:d9:36:96:02:c8:88:42:
                    0b:0f:c1:52:94:7f:5f:96:d8:8b:22:c3:01:d1:4e:
                    e6:a9:cc:49:c5:55:73:b0:8f:24:8e:73:04:f4:34:
                    a1:b2:95:e7:59:65:3b:83:a3:e9:99:34:b5:42:5b:
                    a8:62:c0:5c:1a:e0:c0:b6:03:c6:69:d2:b1:d7:e3:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:96:9F:C2:42:3E:58:E0:12:4B:5E:C5:E9:2B:8F:9A:E7:22:AA:6F
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:9e:a3:81:ed:3b:0c:61:76:4f:a9:73:6f:d3:5d:e7:79:
         1e:01:32:79:0d:e8:4b:23:10:ef:26:4c:bd:41:be:1f:2f:1e:
         c6:2f:42:fd:4d:bf:56:15:9a:b4:2d:db:98:ba:e5:25:5a:d6:
         99:ac:16:c7:18:57:b3:02:fd:fd:73:c5:1b:1f:0a:6c:1e:ba:
         71:3f:25:08:1b:92:cd:fb:3f:ff:70:6a:de:26:a0:db:3a:c1:
         0f:5f:cf:4e:eb:28:c4:41:28:08:9f:cc:b0:89:ee:70:2c:2f:
         1c:e2:c9:0f:9b:cb:f7:a2:5e:92:16:ed:09:40:48:ed:f5:5b:
         0f:03:9f:ac:e8:e2:ad:2a:79:a9:ed:d9:5f:27:6d:71:83:3a:
         49:1a:3f:d9:48:a1:8c:92:dd:b4:21:6f:fc:31:ff:43:80:6b:
         b2:ae:2d:3a:f1:1a:cd:15:06:ba:a4:f4:f8:03:ce:e4:aa:42:
         b7:33:25:51:c4:47:52:5d:0a:a1:68:c5:20:6c:5d:9c:20:c5:
         81:63:34:a8:49:8c:05:f4:85:75:13:da:fa:17:9a:7b:76:45:
         01:2a:4f:96:26:2d:fb:6e:27:88:c1:ca:99:a0:bd:6b:c6:95:
         fc:f0:42:e6:ed:be:a2:23:88:55:52:19:49:c7:4b:40:46:15:
         84:51:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:55:06 2024 by rpki-client on console-ams.rpki-client.org