Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          sue8OHeowsqqhlzHL3aSgXJLgwhaJWsLXr1+Q08ojfw=
Subject key identifier:   C5:5C:C5:E7:A0:12:36:C4:BE:FB:1F:63:25:6D:0B:A0:BD:FF:86:21
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       018F2012C49BC6B3BD9CEBDE98F3EE6A343B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          1146
Signing time:             Sat 27 Apr 2024 15:00:51 +0000
Manifest this update:     Sat 27 Apr 2024 15:00:51 +0000
Manifest next update:     Sun 28 Apr 2024 15:00:51 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: mtiqfe+vD+3nrBA1fTzASYiPjFBdUEOui2xaK8Kmu+Q=)
                          2: CyempUs9G7crlKgEXGYkqL8B8wE.roa (hash: VrZnY0CvalO1rmNCe7+yc0tWyM+fD+ePoUBAvdy5Pvo=)
                          3: D8RtogzfsB_kP_gRk_gvTPM_aNk.roa (hash: UM6ufl/pzfW+mbY+58k2eg+dPIl66tHtZoY6C4PYT1M=)
                          4: NNjFOpBLRVEUX5OxHj__hE1Blwc.roa (hash: lHB1qkl5V12j5mwvNZLCnlEnmIOQHK42fB9f+fxa53o=)
                          5: YR4Mykm5WAmBOPtUiAJR9aA2ZP4.roa (hash: YauZjfnwU9X9l8XsstNAOs4CW/zhQvCYDGwtTLdiwro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:12:c4:9b:c6:b3:bd:9c:eb:de:98:f3:ee:6a:34:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Apr 27 15:00:51 2024 GMT
            Not After : Apr 28 15:00:51 2024 GMT
        Subject: CN=c55cc5e7a01236c4befb1f63256d0ba0bdff8621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:1c:df:9f:f8:9b:a7:ab:93:51:1e:eb:78:
                    72:fb:86:55:04:a1:70:96:b9:02:8f:9f:1e:5b:53:
                    8e:10:5e:0a:57:94:ee:2d:c6:3b:fb:a1:f7:fa:f9:
                    a3:87:da:12:06:c6:a1:3a:45:6b:9c:5f:52:b3:af:
                    16:c4:dd:da:a6:51:04:4d:3f:81:4f:56:4f:51:21:
                    4d:25:08:76:bf:9f:bb:70:d3:28:bc:0a:37:45:fe:
                    11:30:4e:5c:9a:17:67:02:42:37:cb:2d:e2:7f:da:
                    51:0f:6b:f3:04:bd:de:41:ac:c9:51:10:2b:fa:43:
                    67:5a:23:67:30:88:46:db:66:a5:81:43:a4:26:4a:
                    a5:c5:ed:b5:27:39:34:4c:fa:56:4a:f4:bf:71:c0:
                    c5:43:3b:4a:a8:3e:65:19:92:da:b9:b2:31:ac:5d:
                    6b:7c:63:32:97:4e:6d:07:ef:18:38:84:97:6f:53:
                    74:af:11:5b:f4:88:a7:89:df:71:de:c0:f8:28:b8:
                    f4:e3:96:e1:ee:c0:36:4a:a3:ea:24:40:e6:45:14:
                    06:58:47:a8:75:0e:f7:22:20:71:15:dd:6f:b7:33:
                    e6:ea:1e:e6:45:ee:07:3e:9f:43:dd:70:31:ae:d9:
                    73:20:8d:ed:05:6a:7c:42:34:b4:8e:b0:77:47:8c:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:C5:E7:A0:12:36:C4:BE:FB:1F:63:25:6D:0B:A0:BD:FF:86:21
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:12:84:a7:cf:9b:f6:b2:1c:37:6d:90:52:cb:90:06:8c:14:
         9b:12:6c:a7:31:52:b1:d8:9c:e3:01:a0:5b:f7:71:78:d5:04:
         09:bb:d4:eb:70:e1:63:7f:a7:9a:5c:78:5b:ac:23:03:c9:a2:
         73:a6:1d:37:c4:48:75:bc:88:14:ed:3d:a6:b9:af:eb:83:ab:
         47:ab:f9:b8:ef:2a:a3:bd:5c:52:9a:7e:21:4d:48:2b:8e:81:
         3a:86:b4:d9:3e:89:b1:9a:e2:98:95:8e:e6:72:77:a0:27:3c:
         8d:61:7d:8d:30:44:6b:4f:39:a8:67:6a:ad:f7:aa:8d:f3:ac:
         1c:6b:3c:e8:42:93:41:7d:88:7c:cf:e2:22:7a:16:32:01:9c:
         e7:59:39:ca:0e:58:21:71:57:d9:ef:e5:64:e7:2c:94:30:66:
         70:a8:33:63:04:37:56:c6:d2:cf:93:c1:68:32:cd:2c:16:ef:
         e1:9d:3e:6e:71:e7:09:f4:da:4e:e2:a3:75:67:e7:3c:48:74:
         c9:a9:38:48:56:98:68:c1:71:c5:d4:fb:6c:5a:f0:4d:8b:32:
         c0:8d:23:33:e8:33:3f:b0:a8:95:65:79:a3:78:dc:0f:7f:ac:
         14:8b:3c:73:da:52:97:31:7c:94:49:1a:b5:83:8c:5d:37:f4:
         c3:e9:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:54:04 2024 by rpki-client on console-ams.rpki-client.org