Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File:                     riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier:          /IVurJLiXVRQsQjG5Ls7RRmwvkedJqg6tpF+07LxzgY=
Subject key identifier:   43:3C:EB:9F:56:2F:B7:85:FD:A9:F5:70:86:25:39:5B:4B:CB:26:CB
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer:       /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial:       018F874AE171EBC25A347ADB505CF901E999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number:          097B
Signing time:             Fri 17 May 2024 16:03:02 +0000
Manifest this update:     Fri 17 May 2024 16:03:02 +0000
Manifest next update:     Sat 18 May 2024 16:03:02 +0000
Files and hashes:         1: k3Mas3kkhqS9arKKXobONXwy4M4.roa (hash: KC3Moe3X9WhqQF4UEYsLrIHkzBFbqL3hZNnc4NLRMcw=)
                          2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: cyOolUzqLaF7Uei4g9ygW65XL76qkhvMKNQghRqSS40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e1:71:eb:c2:5a:34:7a:db:50:5c:f9:01:e9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
        Validity
            Not Before: May 17 16:03:02 2024 GMT
            Not After : May 18 16:03:02 2024 GMT
        Subject: CN=433ceb9f562fb785fda9f5708625395b4bcb26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:11:69:4e:89:26:83:c7:78:19:d8:64:07:
                    a8:b8:1f:cb:fa:4e:56:e9:42:12:24:8d:f8:fd:fa:
                    4e:9b:cc:6a:18:ce:aa:de:95:a8:5b:3f:35:14:80:
                    3a:92:d3:37:15:f9:3f:ff:90:aa:9f:57:b5:a4:48:
                    64:d1:48:36:d4:69:ef:c4:33:b0:0b:63:f4:40:95:
                    3f:fc:d1:e1:11:dd:d1:fb:56:c3:8c:c9:8c:44:6e:
                    76:37:ba:c5:65:b4:85:dc:81:b7:d1:33:fb:d6:98:
                    3a:9a:82:55:f1:06:85:64:4d:6a:3d:8c:2c:df:e6:
                    2e:c9:a9:1b:7f:98:d6:3c:a7:b1:b3:da:f1:49:61:
                    be:68:31:11:e1:74:d8:9f:2c:60:db:9f:a2:28:0a:
                    f4:40:95:49:52:7c:1c:8c:dd:23:79:83:81:05:d6:
                    08:ef:4d:9f:a4:c8:6f:3a:17:bf:a1:bb:5c:ef:18:
                    2c:25:52:d1:5f:35:36:74:2d:14:80:55:d7:d9:54:
                    de:9a:86:76:b7:b6:ab:f2:03:e6:de:62:5e:d6:27:
                    e3:58:b7:93:2e:99:71:f4:87:b0:f6:74:bc:24:07:
                    a6:40:c6:89:79:e7:02:fa:e7:c0:97:bc:17:f4:94:
                    c1:5e:e5:fa:e9:43:dc:88:27:a5:2e:39:40:38:c4:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3C:EB:9F:56:2F:B7:85:FD:A9:F5:70:86:25:39:5B:4B:CB:26:CB
            X509v3 Authority Key Identifier:
                keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:83:5d:29:52:73:c0:fa:5b:89:1c:3f:a6:60:9d:67:c6:d3:
         01:2c:2f:40:ab:6d:51:e7:41:1e:c4:03:b2:63:75:ac:ca:79:
         88:04:f6:72:f5:27:30:f4:05:f7:d7:f9:bb:98:7e:72:45:c1:
         08:f1:05:db:1a:8d:f7:e4:ef:7a:fe:51:ac:b4:69:6c:00:a8:
         39:4c:ae:cb:59:d3:12:d0:3d:d7:49:ed:c7:b6:bf:bf:69:a9:
         18:d2:8c:5e:5d:52:02:83:c2:e4:ad:89:06:84:10:7d:be:17:
         c5:7e:9f:0b:67:a0:8e:b2:a1:44:e5:81:67:fc:ef:96:ed:75:
         6d:2a:63:8d:b8:d9:44:7d:88:73:67:bb:c9:71:1a:e5:89:a1:
         46:7d:07:3a:7c:cb:00:e0:20:59:64:35:62:3a:cc:db:1e:36:
         c9:a6:c0:4b:87:53:a5:48:67:05:ba:f1:e3:f4:8a:0c:30:8e:
         4f:80:e2:5c:c5:82:63:a2:e1:9f:df:2c:62:2b:22:13:46:d4:
         30:f5:bd:77:42:67:9e:90:1d:17:21:ea:d4:1e:59:34:10:38:
         ab:63:b4:f4:c1:44:6a:a9:95:e9:0e:fa:62:d1:c8:c9:e2:c1:
         0e:dd:75:d6:dc:79:61:3f:90:14:5a:6b:a7:7a:01:b0:e8:df:
         b4:e2:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:46 2024 by rpki-client on console-fra.rpki-client.org