Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File:                     3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier:          TwxVSRvfDUrKyrCysdkFSRrSt7dYFU9FuXq2Kb0/1v4=
Subject key identifier:   D4:90:13:F8:6A:5B:90:6B:49:94:AE:F3:E4:02:94:2E:51:0C:93:29
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer:       /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial:       018F441FB597D7D1C58FB10A3267179EF18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number:          0C08
Signing time:             Sat 04 May 2024 15:01:19 +0000
Manifest this update:     Sat 04 May 2024 15:01:19 +0000
Manifest next update:     Sun 05 May 2024 15:01:19 +0000
Files and hashes:         1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: IEGDXHam++pu8URQUuKJyTUVBTSAVOK72O8+Jk/mZi4=)
                          2: Nsj0oiIKC-Tkj7NOBASjpUnxTak.roa (hash: LEcDgsiDskc4uU8d2d2v3oD6GNkitQ8mElipShmr77U=)
                          3: PisH7q2stl7meBlZXFZhrO0OAro.roa (hash: kHeLfOPVVR5+WX3sxPCjQ57NXW/zae15AEynPFIzCvM=)
                          4: mWL4wsbt3j4ARlEOJhppMCJLn5c.roa (hash: x7x3occ4o/erUocFLXHwLCKbtbacRQeYzvcRiIdQTpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:b5:97:d7:d1:c5:8f:b1:0a:32:67:17:9e:f1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
        Validity
            Not Before: May  4 15:01:19 2024 GMT
            Not After : May  5 15:01:19 2024 GMT
        Subject: CN=d49013f86a5b906b4994aef3e402942e510c9329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:33:24:d5:e6:60:1f:b5:bf:3a:a6:0a:2e:
                    b3:f6:b9:1d:aa:7d:0b:c3:7d:db:59:69:60:64:59:
                    03:7a:b8:0e:31:cf:d2:c8:f2:56:e3:34:6d:d4:b8:
                    33:f8:4a:d9:e0:43:21:80:d4:05:04:a6:06:63:48:
                    2f:9c:6d:9a:db:ea:47:bc:cf:6b:72:55:db:33:9e:
                    86:1d:b1:1d:5c:82:f8:9e:c7:0e:75:f7:c4:03:e8:
                    9e:d6:b2:f9:7f:72:1b:73:33:88:0c:da:80:fe:f9:
                    b1:40:f7:a0:34:47:86:d0:3e:be:3d:9b:ca:45:d4:
                    f0:a8:a1:78:a1:13:e4:58:8c:11:7f:bc:3b:03:12:
                    ce:40:01:54:84:04:e2:41:fe:d2:f3:78:be:c1:59:
                    39:26:64:cc:46:d9:21:f9:0a:b1:85:8d:71:45:08:
                    55:ff:f8:22:25:d8:da:9b:61:7e:de:fd:fe:a4:9a:
                    21:51:51:b1:ea:0b:74:ef:04:51:d7:42:49:65:7a:
                    8c:f5:4f:78:9a:56:55:c2:d2:de:18:43:17:b9:5e:
                    67:9b:5a:1e:6a:ba:ff:53:91:71:92:f0:94:13:9f:
                    f1:9f:03:e6:54:73:2f:29:15:22:37:ab:cc:64:f1:
                    60:bc:1f:61:03:28:bc:59:c9:67:f9:c1:84:46:5d:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:90:13:F8:6A:5B:90:6B:49:94:AE:F3:E4:02:94:2E:51:0C:93:29
            X509v3 Authority Key Identifier:
                keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:61:9d:6b:bd:da:bf:10:47:66:ca:44:78:21:e2:f6:72:44:
         0c:dd:db:1c:4b:43:c8:f3:36:a9:7c:6e:e0:83:35:7c:ec:64:
         fc:02:d5:77:41:40:3c:18:d0:77:62:81:49:d0:ef:44:01:87:
         7d:9a:f5:1c:48:d8:27:b8:12:90:8d:f5:74:de:c0:6b:6a:a1:
         b7:5a:56:92:06:1e:25:0e:b8:a2:25:11:65:cc:53:5e:18:4a:
         b6:49:bf:f4:85:61:8d:cb:1d:e1:ac:3e:2c:e4:16:ab:fa:c9:
         1f:57:dd:0b:10:37:26:c2:e3:4d:b7:7c:6c:6a:50:ec:42:94:
         b0:d9:a1:a6:47:55:2d:69:7d:9b:19:04:e3:4b:fb:7c:83:7f:
         0f:e9:27:67:ce:de:7a:f2:7d:8e:40:72:dc:82:53:17:19:ee:
         68:7f:88:f8:1c:1d:93:93:d5:df:12:b7:b6:50:33:c3:1c:c7:
         3d:97:5d:81:7a:e7:29:48:dd:f2:f3:9f:67:d8:45:ba:16:ca:
         41:c2:89:62:c2:ec:0e:75:4a:be:21:38:4c:31:ec:db:16:2e:
         2a:7e:0c:88:71:26:18:79:85:19:07:17:84:69:16:c6:02:8c:
         7c:de:81:0c:47:34:17:12:24:61:9c:7d:3f:a9:8d:67:99:1b:
         6a:27:18:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:37:12 2024 by rpki-client on console-ams.rpki-client.org