Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File:                     R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier:          HrtN9E3lgCi6vPXddeLD0LepSU/2xuAG8LcoSFYXwHI=
Subject key identifier:   76:05:FE:FA:9D:16:ED:67:A0:60:72:AD:45:A5:FB:95:1C:32:CD:B2
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer:       /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial:       018F86A3E27DC9E700119ADE763102267294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 13:00:38 +0000
Manifest this update:     Fri 17 May 2024 13:00:38 +0000
Manifest next update:     Sat 18 May 2024 13:00:38 +0000
Files and hashes:         1: OK6c6QaepeNGoOGafZTPA-qwMfk.roa (hash: 6lP8xsrXaWDut+dHBr333teIOV2mx6u5gcvbkyrhI+M=)
                          2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: khm+Y6vcyaZr5jXjUsKDTVwJWZB8gUR9Zcn1bCtvTtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e2:7d:c9:e7:00:11:9a:de:76:31:02:26:72:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
        Validity
            Not Before: May 17 13:00:38 2024 GMT
            Not After : May 18 13:00:38 2024 GMT
        Subject: CN=7605fefa9d16ed67a06072ad45a5fb951c32cdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:ab:c3:94:3c:84:cd:eb:22:ca:de:5f:e8:
                    59:f9:de:1a:f2:9e:18:35:46:69:60:af:f7:40:a3:
                    05:1f:f3:50:c2:65:e2:83:65:f1:b3:13:f3:58:7b:
                    aa:b8:58:ad:9c:23:91:09:98:41:22:ac:06:9e:f2:
                    f6:57:41:1d:27:cc:39:9d:d8:b3:ef:56:79:84:c1:
                    2d:53:93:3b:7d:2c:38:ea:31:61:10:5e:d0:22:d2:
                    3c:0a:9d:29:5b:e4:c9:a8:16:5c:45:5a:07:92:02:
                    e6:20:18:01:a8:46:2a:6c:af:d4:14:67:cc:91:32:
                    c4:c4:4f:22:dd:09:93:be:8c:16:7d:15:4b:81:7c:
                    a4:43:02:45:f5:fd:a9:89:29:27:ba:c0:24:db:b8:
                    49:cd:54:3a:b1:64:fe:e7:aa:89:ab:63:99:d3:07:
                    b9:29:54:00:b0:df:7c:4f:d8:aa:f0:f1:24:d4:65:
                    06:6a:ee:19:d6:10:5f:01:c8:d9:9f:8f:82:30:af:
                    bd:a2:b0:82:d7:77:65:cf:c8:99:b6:f8:6f:0b:09:
                    43:29:70:fd:bf:32:4f:9f:5b:d7:ea:48:04:5f:fc:
                    e8:56:02:7f:b2:88:15:38:86:fe:18:c0:6e:08:dd:
                    f7:d4:d6:fc:13:ac:93:cc:9a:4e:9a:c1:23:a2:6f:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:05:FE:FA:9D:16:ED:67:A0:60:72:AD:45:A5:FB:95:1C:32:CD:B2
            X509v3 Authority Key Identifier:
                keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:2a:d4:07:2f:69:f0:25:a8:1e:09:43:be:1f:ce:21:6e:
         5e:ca:50:62:ed:3f:00:ef:55:6e:aa:09:67:19:5a:ad:17:86:
         cf:05:75:b2:79:aa:bc:ec:1a:46:e0:d6:80:42:38:62:0a:34:
         6f:f5:b5:42:f9:f8:76:5e:91:a6:97:b8:5c:a0:85:4a:d3:a6:
         57:b8:a0:cc:4c:e1:c2:e1:d3:89:43:2a:ae:5f:57:63:ee:be:
         6c:74:c0:a3:be:ef:7a:3e:9d:c4:18:41:7b:a5:ac:0e:b6:13:
         d7:7e:92:ea:ee:01:bf:0e:e0:8b:c8:28:de:9a:87:be:24:60:
         0d:fe:bf:44:88:13:60:40:9c:ff:e1:7b:20:85:fd:a0:0d:99:
         b0:78:d3:74:59:d1:6c:b9:88:a8:fb:88:b1:d8:59:fb:e4:49:
         ed:b0:2e:21:c3:7a:3a:b7:de:46:40:19:6f:7f:e8:5f:55:07:
         56:f0:38:e6:2d:00:f4:8f:42:99:87:cb:b3:7f:0e:50:15:c2:
         0c:3f:87:b5:97:cc:7d:78:b7:08:9d:4e:c8:79:ef:3c:de:03:
         50:c8:e7:51:50:21:55:05:d3:4e:82:5b:c3:5f:c2:30:90:00:
         ce:34:a3:dc:e3:f7:e5:24:e9:6c:21:6b:79:ff:75:d0:7a:f7:
         d6:ee:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:53 2024 by rpki-client on console-ams.rpki-client.org