Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
File:                     3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft (raw, json)
Hash identifier:          LSrtajdsoOGfuse8dNGHAolLbjP0VKP7tPD5YFJT0Mw=
Subject key identifier:   63:77:CC:4A:97:4F:DC:A5:9E:AB:AC:C3:53:39:18:D9:37:E5:08:62
Authority key identifier: DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA
Certificate issuer:       /CN=dd6e9afc93183338022c7d8f186af71973aef5ba
Certificate serial:       018F43B4A2EAC421DAAE70B44ED21E7EF215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
Manifest number:          0BB2
Signing time:             Sat 04 May 2024 13:04:22 +0000
Manifest this update:     Sat 04 May 2024 13:04:22 +0000
Manifest next update:     Sun 05 May 2024 13:04:22 +0000
Files and hashes:         1: 3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl (hash: BDH8YZEKjNjEfeEfExSgMiIHSSz+idX6MtUumquXXJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:a2:ea:c4:21:da:ae:70:b4:4e:d2:1e:7e:f2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e9afc93183338022c7d8f186af71973aef5ba
        Validity
            Not Before: May  4 13:04:22 2024 GMT
            Not After : May  5 13:04:22 2024 GMT
        Subject: CN=6377cc4a974fdca59eabacc3533918d937e50862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:ef:ed:26:2d:af:0a:36:8b:a0:e4:e1:0d:
                    e1:c7:82:ca:f6:d3:af:45:c6:a9:3e:10:e9:8d:19:
                    ce:f6:04:53:7e:a0:4c:dd:cd:90:1a:c7:53:e1:9c:
                    60:17:a8:86:cd:d0:41:82:53:f5:d1:e8:03:6f:ba:
                    cf:16:47:60:3c:2c:fa:5a:04:5c:d0:83:e1:ef:92:
                    85:9b:76:2b:60:36:fc:d8:92:be:ed:51:99:d1:67:
                    26:34:42:b2:ec:b3:5e:96:95:00:ce:cd:23:18:67:
                    62:30:a7:30:05:47:7b:cc:0d:29:45:30:d0:90:1a:
                    40:7c:2a:e7:cb:5d:aa:3e:71:41:5e:71:73:ca:9f:
                    c7:30:1a:56:7a:dd:7a:dd:94:41:e1:4a:14:7c:6a:
                    e4:e0:bc:20:ac:80:9a:d7:c4:8c:6a:75:5d:9c:da:
                    99:6f:cf:37:aa:19:61:0e:d9:94:17:ac:68:b9:2b:
                    d6:de:be:b8:82:34:86:5f:25:9b:89:ab:6e:bd:fc:
                    37:56:6a:57:0a:af:13:c2:13:2d:23:f6:76:10:c6:
                    76:5f:39:c8:aa:eb:22:f2:c8:35:c4:bf:c1:bf:34:
                    90:fa:8c:f1:50:38:c0:5e:a8:c6:0a:9b:b3:2b:fe:
                    cd:18:56:26:cd:2e:5b:b8:95:00:31:82:37:9f:b7:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:77:CC:4A:97:4F:DC:A5:9E:AB:AC:C3:53:39:18:D9:37:E5:08:62
            X509v3 Authority Key Identifier:
                keyid:DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:bb:57:9c:f6:d3:b3:b0:5f:7c:d7:60:7e:06:af:db:b5:a8:
         cd:28:41:24:30:33:96:50:df:19:f0:53:d5:f0:c2:95:a2:45:
         b6:7d:0e:e5:cd:06:54:1c:96:b5:e5:71:30:d9:da:d0:d6:5b:
         70:f4:44:84:95:d0:d1:20:e2:c7:47:28:0b:09:22:30:93:1e:
         3b:2e:cd:87:9c:55:5a:c6:d7:f9:c6:67:0c:4e:8d:9a:d1:34:
         ea:ca:e4:75:e0:e7:d6:de:0c:3c:30:10:a1:fe:15:ae:67:07:
         27:5b:32:42:e2:8a:2b:7f:68:e7:2b:d3:3e:3c:9b:27:72:d1:
         22:07:b1:7c:25:14:07:c1:99:0b:22:a4:d8:2b:9d:80:c9:31:
         36:c5:90:60:6c:ca:72:9b:65:09:90:26:e5:85:8e:68:70:86:
         7f:dd:fe:63:0f:69:cc:40:0b:59:0b:d3:b3:ff:e2:b1:a1:ef:
         7d:91:79:7a:1f:b0:b5:3e:97:99:91:16:7c:67:62:92:09:5a:
         7c:e9:e7:7e:0a:51:46:61:f9:6d:c6:62:13:fd:df:fa:fb:58:
         76:85:d9:4d:83:af:f0:b3:ff:d7:34:51:9f:66:40:b8:ef:9d:
         bf:2d:be:91:c4:6c:c5:01:c1:92:41:63:91:24:b4:fc:45:46:
         eb:43:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:56:18 2024 by rpki-client on console-fra.rpki-client.org