Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          n2OsAB4B/XiYu5mHkC9SzrmYx65Cu8y/W4PavccjzwY=
Subject key identifier:   3B:6A:2F:5C:CF:BD:81:44:40:BE:94:A6:F6:DB:46:04:DF:18:DC:0E
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       018F539324481EE610BFD8F2C69755C9E1E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          0AAC
Signing time:             Tue 07 May 2024 15:01:43 +0000
Manifest this update:     Tue 07 May 2024 15:01:43 +0000
Manifest next update:     Wed 08 May 2024 15:01:43 +0000
Files and hashes:         1: 0oB6rGpjA579_EwWTQdqTcoNnjE.roa (hash: 4jPghMG+oCaI/pDHmTM4q/yMKFAkcHNz0LZ8MAQFXig=)
                          2: DKyJwZuMOOa7x9e9Syq7SVsVCt8.roa (hash: KWsFUurjDrOt/CVSmd5Z0M/QyiEtcQrJNJqa+wUd+ec=)
                          3: jLLwumPdBK5tH4p1U1lXVa7aTKg.roa (hash: 0KkdwWQE7I+v0z9RdF7QLuLsU50/ZE4i9ivLcydPr/I=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: wPqEbbtLOzVWk7fwk6oLpse/75dVniuRrj9tniwp8M0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:93:24:48:1e:e6:10:bf:d8:f2:c6:97:55:c9:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: May  7 15:01:43 2024 GMT
            Not After : May  8 15:01:43 2024 GMT
        Subject: CN=3b6a2f5ccfbd814440be94a6f6db4604df18dc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:da:bf:ae:d4:6d:22:ed:01:2e:5d:8c:12:0c:
                    5f:55:6d:eb:c6:d5:61:72:43:54:22:ff:71:1d:1b:
                    fb:e4:01:47:93:33:fa:59:87:0b:b1:00:fb:cf:bc:
                    75:44:50:63:73:c0:a9:48:d3:f8:40:71:9c:55:61:
                    01:f1:5b:ed:c4:f4:3f:f7:51:14:71:7b:1a:7c:fe:
                    d0:3f:ad:ee:d7:3c:3b:40:03:52:67:17:91:ce:ca:
                    55:6e:da:1e:76:26:c2:32:3f:46:b1:8d:b1:09:23:
                    d3:a7:80:a7:f9:a3:12:03:0b:c4:e6:92:fc:10:b6:
                    76:db:11:d2:39:08:a6:8f:1a:16:f6:42:74:7a:74:
                    b4:a3:68:c4:2f:c3:2a:e5:5b:de:33:7a:2e:b7:f1:
                    61:86:22:47:39:a7:c2:1e:55:77:6a:22:0d:0d:9f:
                    3d:ec:95:a1:15:de:86:15:78:58:9c:1f:01:ed:0f:
                    b7:83:6f:02:f5:4c:05:dc:59:be:93:38:e3:34:ec:
                    f1:6e:6f:e5:d9:e3:02:e4:8b:0e:a7:9f:92:40:7f:
                    00:96:6c:69:f0:ee:02:fa:f7:89:e7:2c:4d:c6:b1:
                    9f:00:a5:b0:b0:05:54:21:8a:c6:f5:c9:c6:d1:b5:
                    a0:68:e0:d0:0c:8a:e2:71:e0:04:73:2c:6d:9b:5a:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6A:2F:5C:CF:BD:81:44:40:BE:94:A6:F6:DB:46:04:DF:18:DC:0E
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:72:33:c9:f3:01:4a:5f:44:50:1e:73:7b:5f:a8:85:48:89:
         c0:04:c4:32:36:79:75:a6:a1:b4:23:35:eb:b4:48:5e:fd:d6:
         9d:2c:9a:b9:41:b8:94:b1:91:3b:0a:36:ed:7c:57:f1:3f:41:
         20:67:cf:ae:d8:3c:18:75:93:f7:0c:3e:08:2b:0a:71:ba:95:
         31:42:51:30:18:af:26:8d:8b:c7:58:45:7a:db:b2:c0:68:86:
         f4:aa:70:3c:b1:25:59:7d:02:58:7a:e3:1e:95:57:f6:1a:de:
         8b:38:b9:78:f2:bc:e2:ba:c8:b1:41:c0:05:6f:eb:62:9a:2e:
         61:a6:a5:ec:11:f7:3f:08:72:ba:4c:df:25:a9:9b:19:0f:fc:
         6e:da:5d:1a:8a:ad:2a:2b:02:cc:d8:1e:60:6d:0a:ec:1f:b6:
         39:f8:cb:4f:dc:b0:2c:fe:e2:2b:d3:41:bc:96:e5:66:94:95:
         dc:85:d7:f5:0e:ef:a8:af:cf:b5:37:b5:bf:8f:6a:27:4d:9b:
         fb:12:29:cf:f7:4b:e5:a0:33:d7:c8:73:6e:2f:e0:41:84:a0:
         77:46:02:21:8e:ce:68:61:8f:bf:24:7e:69:a2:0e:7a:44:c0:
         45:b6:91:58:17:6b:50:3d:26:7e:75:78:01:df:4b:c8:d7:f7:
         2a:ec:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:32:28 2024 by rpki-client on console-fra.rpki-client.org