Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          Fs3kney6REk/CqZYs/Jgp/i7vl20dePu5KWmKz4o+ek=
Subject key identifier:   09:0E:06:64:A8:4D:9B:E9:F0:1E:C6:79:F0:B1:E4:09:A5:3B:EC:88
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       018F8823F334328E9D093B7955840E9364BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          01F0
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: F2YNuPRrTXE/VusrpgSUg5szZiOxvQAw0xzqgQE+Qe4=)
                          2: RkhJ3n2h0nJIWlzUM7_t-qIo7Q4.roa (hash: KmCTVD5UBt7KfQaE8+YkUbkuISe+2RJNU8pPPRIfPv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f3:34:32:8e:9d:09:3b:79:55:84:0e:93:64:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=090e0664a84d9be9f01ec679f0b1e409a53bec88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:f5:02:33:0e:ca:2c:98:36:23:bf:d5:5b:
                    4f:55:3a:a8:62:6f:7d:1d:60:17:3f:ff:30:4e:52:
                    a7:e0:a5:bf:af:ca:14:37:36:f4:09:27:fc:f9:fd:
                    bb:c7:7d:f6:d7:bb:5e:75:82:7f:28:10:dc:04:7c:
                    90:7c:45:cb:72:22:44:65:96:fb:cc:ba:df:36:31:
                    4f:6d:01:b1:24:31:3e:f2:ca:eb:f6:09:81:84:27:
                    fd:a7:e0:09:85:b7:b7:91:e9:55:08:03:b3:f1:4b:
                    1b:3d:b4:62:59:e2:3b:46:a0:78:ef:67:56:aa:8d:
                    a9:16:24:ab:19:79:9a:80:6c:7b:09:27:f5:17:c6:
                    93:0f:e9:67:66:b9:1d:c2:02:0a:30:e2:92:a5:08:
                    f9:12:c2:9c:cd:7b:88:8c:19:2e:b8:c6:4e:14:9e:
                    2d:30:31:05:da:a2:60:18:5d:7f:73:4b:b9:98:2c:
                    3d:bc:03:0b:40:c8:0d:f3:11:1a:9f:a1:b9:cc:27:
                    b4:d2:91:a4:96:48:31:4e:d2:f0:a9:78:78:2b:71:
                    62:f0:58:e4:29:96:63:a0:1f:22:c6:92:15:97:6c:
                    fb:8e:9a:48:be:a2:d3:89:ee:2b:63:33:92:d5:23:
                    b8:18:4b:e8:fb:a3:69:22:77:36:9b:85:95:bd:74:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0E:06:64:A8:4D:9B:E9:F0:1E:C6:79:F0:B1:E4:09:A5:3B:EC:88
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:17:81:38:0c:13:4a:2d:93:e8:ab:85:56:7b:bc:65:ad:
         86:f8:82:42:16:ae:47:99:7e:e6:1a:98:94:70:21:3e:b0:b6:
         f7:3b:cf:76:6e:a3:e7:e7:74:83:02:af:8e:d5:ef:06:2b:c0:
         9d:73:17:44:ba:35:01:75:3d:92:7b:ed:95:1b:64:98:51:23:
         bd:39:ee:79:0a:52:f4:b4:aa:b8:86:95:9a:57:6d:2e:87:95:
         ed:64:f8:85:bd:5e:e9:64:8f:64:d2:07:f1:9f:33:26:c7:79:
         b1:9c:b8:7a:8d:6c:88:cb:2e:8f:59:08:9b:12:4c:cb:f5:73:
         98:89:ca:69:e4:9c:9f:02:4d:30:e3:a1:2f:a6:04:87:43:a0:
         80:09:5e:cb:1b:59:e1:ad:71:8e:27:ec:04:5b:91:25:ff:ad:
         39:e4:a6:b4:90:d6:b5:90:1a:aa:82:3f:ee:2b:37:7c:02:5e:
         1a:a6:2e:aa:44:51:45:53:a1:bb:6a:30:45:e0:38:3e:39:16:
         17:bd:dc:ba:7e:1d:fb:95:37:2b:22:8a:5a:2c:4f:0e:53:4d:
         22:29:9b:ee:7d:4d:2b:7a:b7:f8:84:54:60:0c:df:0e:bc:bb:
         a7:a4:a4:d3:0d:7a:c6:70:6b:a6:3c:dc:c9:d7:d8:15:09:df:
         3c:49:8c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:41:23 2024 by rpki-client on console-fra.rpki-client.org