Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File:                     3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier:          +Cznt7zGJZ3rKpYQRIfoFHVhrPiAX6E/8zK8uLoSBHE=
Subject key identifier:   25:6B:CF:89:6C:9F:3F:08:BA:A7:EE:0F:51:F4:FD:6C:A9:2A:AC:86
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer:       /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial:       018F46E991D6693CD6F67B8B44A5718F5357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 04:01:03 +0000
Manifest this update:     Sun 05 May 2024 04:01:03 +0000
Manifest next update:     Mon 06 May 2024 04:01:03 +0000
Files and hashes:         1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: V6ds+BRg47oiP40fFuAK2zkK7aVtN6yDk8myQzLYbiw=)
                          2: rxhcZOLbdZUxFqgAOk557E2CIKk.roa (hash: 9yNwpQwii/xKlQmk+xbc66Aa8krZDRk0EHJawZzo9vI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:e9:91:d6:69:3c:d6:f6:7b:8b:44:a5:71:8f:53:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
        Validity
            Not Before: May  5 04:01:03 2024 GMT
            Not After : May  6 04:01:03 2024 GMT
        Subject: CN=256bcf896c9f3f08baa7ee0f51f4fd6ca92aac86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:dd:77:ac:d4:fd:bf:9d:07:8d:e3:1a:30:
                    c5:43:df:eb:d2:c6:4a:61:d1:ac:38:c5:8e:46:d6:
                    a5:d8:44:d2:46:66:e9:a7:be:13:29:08:40:2b:44:
                    c4:0d:d2:16:34:f0:f3:a5:6b:ef:22:39:d6:36:ff:
                    5e:18:f0:dc:2b:cb:ea:2c:60:6c:d1:af:2d:18:2a:
                    d2:41:28:ef:73:c0:5c:82:5c:0f:97:76:9b:21:86:
                    23:0d:3f:cf:9b:bf:aa:5f:23:8a:8b:09:6c:fc:95:
                    c5:00:8c:3b:48:a4:19:e4:aa:3a:09:6b:af:2d:b2:
                    db:6f:50:cd:0d:23:b8:d8:54:45:c3:72:31:c4:69:
                    7e:8d:32:9a:bd:c2:b2:b4:4e:a6:21:72:58:58:27:
                    91:07:cc:87:fd:bb:b1:15:ff:3b:54:43:dd:36:e2:
                    15:e2:b5:02:a7:d8:47:fa:93:9d:fb:79:e6:b3:3b:
                    6c:07:44:80:68:56:45:a4:1c:c8:f6:ce:69:bd:c9:
                    7a:87:0f:2e:26:e6:dd:69:9e:8d:98:50:10:3f:c5:
                    81:5e:ca:81:5a:11:88:98:e5:3d:71:a0:cd:d9:a4:
                    f0:5f:85:8f:0e:bf:65:a9:f2:78:1c:7d:88:6d:ad:
                    4f:f4:00:f5:6a:e2:4f:bd:ca:5a:34:e4:f6:e1:a6:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:CF:89:6C:9F:3F:08:BA:A7:EE:0F:51:F4:FD:6C:A9:2A:AC:86
            X509v3 Authority Key Identifier:
                keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d4:62:5d:eb:1c:77:24:3c:d9:1b:c3:42:b0:53:6b:b8:ed:
         7f:9a:34:a7:8b:22:91:80:fe:fe:b1:b5:a7:69:71:00:db:a6:
         1f:0b:a1:76:f1:33:9b:13:70:75:22:72:90:c8:5b:4e:fb:d7:
         cd:58:47:1b:9c:12:e8:48:74:b8:57:b0:43:e5:96:81:75:61:
         e8:f4:0c:b7:b2:60:e5:4b:f0:1b:f1:2f:51:64:ee:4a:28:1c:
         86:bd:0d:f9:79:20:1f:91:6a:47:b5:98:f0:37:9c:60:cc:1e:
         0d:e5:a6:91:34:b6:cd:53:bd:95:4c:d8:b5:01:c3:a7:9e:cd:
         2c:2a:d7:22:d3:a8:a8:b8:e1:fa:ab:67:18:cc:b0:60:e1:6b:
         71:a9:26:67:ed:81:3e:0d:97:06:11:e2:1e:a7:0b:96:42:8a:
         88:77:9c:e0:cb:f5:09:4d:58:ea:a2:6f:15:4a:06:f6:2e:88:
         63:31:54:50:ba:7e:9f:b8:9f:d3:67:97:7b:c2:5b:93:a1:ce:
         8b:b9:5c:22:85:d5:13:c2:dc:cd:e8:5e:0a:b5:db:b2:b1:88:
         f9:56:93:b0:74:0b:52:6e:41:50:3e:04:f2:34:aa:19:58:9c:
         5d:ed:43:4d:18:24:ae:6b:a6:78:3b:f7:6d:67:9f:a4:54:61:
         07:dc:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:20:49 2024 by rpki-client on console-fra.rpki-client.org