Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
File:                     1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft (raw, json)
Hash identifier:          /UFmvgga3MiVfWF2hIH4bWFK1zu779J0m5Y5HvJNDbs=
Subject key identifier:   3C:86:8B:A8:B5:5A:1E:4E:26:04:99:68:12:39:EA:B4:42:AA:85:AF
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Certificate issuer:       /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial:       018F4AC6EB276C5DC73933B8F9844CB19319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
Manifest number:          0BF3
Signing time:             Sun 05 May 2024 22:01:41 +0000
Manifest this update:     Sun 05 May 2024 22:01:41 +0000
Manifest next update:     Mon 06 May 2024 22:01:41 +0000
Files and hashes:         1: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl (hash: 2pUxd+IjIg9OdP5SSkz0+X0N9ai8Hc+pyix5Q7qo/CE=)
                          2: fmaciLkJLVEBa10LRvx0B4Wwwy0.roa (hash: youzf/u4o+m08L6yPdE3Rc4jRDkEFWb1ZUY5IgHDw9w=)
                          3: wrUHLlFAc83Kq7nZsPwNwR6eaMo.roa (hash: TkpymnTR1s0ASbEd3HSHqK+TSuL1E5Aa+atGg1aE0FI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:eb:27:6c:5d:c7:39:33:b8:f9:84:4c:b1:93:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf814df8575986dd904a98687583c138768a114
        Validity
            Not Before: May  5 22:01:41 2024 GMT
            Not After : May  6 22:01:41 2024 GMT
        Subject: CN=3c868ba8b55a1e4e260499681239eab442aa85af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:d9:a8:86:43:c2:43:39:f1:7a:00:e6:69:
                    fc:a5:07:c6:99:92:f5:f3:13:f8:d5:15:69:1f:fe:
                    53:56:bf:49:06:b5:de:cd:d8:e9:31:13:9f:ab:9b:
                    7f:a9:b8:af:30:5e:f5:5f:36:d0:f2:91:53:b4:b0:
                    e2:61:ac:1b:d8:d6:07:15:5d:6d:c0:94:7c:21:b8:
                    86:d7:e5:fa:07:24:2f:66:75:56:ba:39:fa:86:3a:
                    09:c4:07:9e:55:f7:f9:af:13:0d:2e:7d:3d:30:01:
                    82:7c:ef:ff:55:de:f2:63:65:c3:a0:4d:8a:49:d5:
                    ce:1c:d8:f0:e0:32:2e:5c:db:f8:41:3c:f2:da:34:
                    3e:87:c8:bb:c4:8f:fa:a0:a0:f2:cb:12:34:70:94:
                    65:2a:24:87:70:e0:6c:58:bb:bf:ca:00:a9:f5:22:
                    43:86:ed:89:15:00:44:c9:25:ae:52:e6:90:63:c0:
                    8b:eb:77:15:b7:8c:e1:b1:ec:98:2c:22:d8:70:dd:
                    0e:e0:72:04:a4:cb:f9:b0:8f:97:80:eb:1c:c0:54:
                    30:ff:69:04:6a:71:5f:d3:3b:42:6c:ba:4a:4c:1d:
                    2b:7a:83:81:63:0a:f5:78:9b:7d:f3:16:e3:5b:d0:
                    54:e1:f7:d4:48:88:b5:64:3b:2c:3e:23:7f:0f:c4:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:86:8B:A8:B5:5A:1E:4E:26:04:99:68:12:39:EA:B4:42:AA:85:AF
            X509v3 Authority Key Identifier:
                keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:06:4a:df:33:f4:f6:07:c7:35:5a:19:e2:ff:65:14:f1:
         99:43:2b:f4:0d:00:74:d4:40:11:5a:e3:07:06:ae:46:aa:24:
         2c:cc:18:8d:9f:dc:6d:4b:4b:98:d3:c0:1b:fd:0e:6a:dc:70:
         fa:c3:8a:ad:36:6a:7c:7f:25:b6:27:72:42:80:3f:7d:83:96:
         e0:46:69:c2:85:19:ee:9d:7a:f5:b2:99:45:70:04:26:bb:81:
         e6:ff:e7:f4:90:77:f3:fa:4f:ec:4f:4d:4a:c3:c4:4b:b4:cc:
         43:52:ab:29:5d:45:71:86:32:72:4c:91:61:5e:81:de:a5:eb:
         4a:02:d5:59:79:d8:74:90:74:46:f9:9f:6b:73:a5:86:81:ad:
         44:5c:67:6a:f1:88:36:8d:4c:c6:6c:1c:55:d2:d2:55:5a:1c:
         e3:a5:10:ac:13:31:48:b7:99:44:fe:6e:bf:c4:7a:fe:bd:84:
         e9:1b:5d:8b:6a:28:48:f7:e1:f7:1b:17:cb:d6:ae:21:6f:4f:
         12:3c:f2:a6:49:02:0e:80:59:f3:65:cd:85:3a:34:6d:0a:f2:
         3c:91:88:be:5f:67:ee:59:be:b2:5f:ac:7b:ff:20:b5:4e:7a:
         20:66:8e:41:8d:f8:85:36:51:2b:ec:da:8a:b8:5b:5e:5e:08:
         36:8c:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:45:19 2024 by rpki-client on console-ams.rpki-client.org