Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File:                     31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier:          VXG5WIu7t+AQCpQE7IIPKB8deYN4f2DLKpTwVTcRz68=
Subject key identifier:   0B:85:52:68:3B:B4:29:87:2D:16:E8:B5:AA:85:B1:1C:8D:67:A7:8E
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer:       /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial:       018F30CF90013207D0E112672AC19CD44724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number:          114B
Signing time:             Tue 30 Apr 2024 21:01:00 +0000
Manifest this update:     Tue 30 Apr 2024 21:01:00 +0000
Manifest next update:     Wed 01 May 2024 21:01:00 +0000
Files and hashes:         1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: uvnoZYms/PO4mtX5wqx64L0TSjxiGtC0E8UD9F8WG5Q=)
                          2: o5j9_aRXr5MXiFsROTwFuvAMl5I.roa (hash: MGzwtp8PiN9JpVb7DJaY0KA6L/0vTIKes2z0dn8XyU8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 13:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:30:cf:90:01:32:07:d0:e1:12:67:2a:c1:9c:d4:47:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
        Validity
            Not Before: Apr 30 21:01:00 2024 GMT
            Not After : May  1 21:01:00 2024 GMT
        Subject: CN=0b8552683bb429872d16e8b5aa85b11c8d67a78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:e8:e1:f5:a0:ca:8b:5c:48:e4:17:32:3e:
                    47:c2:85:04:5c:f3:68:5c:c5:9e:30:71:93:99:58:
                    55:dd:16:f2:78:bd:8f:c5:ab:d5:a2:38:13:ee:39:
                    c1:16:d1:0c:ee:c2:3f:f4:01:7d:51:4a:b6:3e:68:
                    87:22:86:ef:e3:46:c4:cf:0a:e3:b1:55:a3:43:e3:
                    5f:36:7f:10:1f:d1:41:ea:01:b0:2f:27:7a:9c:dc:
                    4d:54:6d:30:96:d3:3b:51:ac:0e:aa:c2:dd:fc:9b:
                    e3:32:40:c8:69:bb:d8:f1:02:cd:1e:27:ba:1e:a0:
                    53:80:7e:c2:08:ed:2b:49:86:ef:cb:c6:5f:99:54:
                    0e:e8:c5:67:fe:2e:65:9f:1c:39:42:11:bf:58:59:
                    bd:71:6a:f1:f2:0c:d0:8a:7b:8a:0c:b5:f1:1e:92:
                    31:ea:e2:8c:85:b1:47:1b:de:71:4b:35:9d:b5:51:
                    b0:b2:f9:c7:53:6f:f7:d7:06:e0:10:90:a3:5b:b0:
                    a8:b8:1d:f3:a0:c7:48:43:df:de:c1:ff:23:99:3c:
                    71:02:fe:52:19:6c:26:4f:6d:95:57:a3:77:2d:52:
                    9f:42:83:3d:35:1e:dc:38:ef:ee:f9:7b:e2:0d:a3:
                    4f:65:ff:24:f7:6c:68:25:ad:14:9a:41:1b:af:61:
                    6c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:52:68:3B:B4:29:87:2D:16:E8:B5:AA:85:B1:1C:8D:67:A7:8E
            X509v3 Authority Key Identifier:
                keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:21:d3:65:b5:a9:22:fc:e5:36:91:c8:94:f0:43:ad:43:90:
         a5:69:fe:3c:5f:15:ab:a9:46:bc:ec:f2:ff:34:49:a9:07:06:
         27:bb:50:9e:fd:02:f7:09:fa:43:6f:04:1b:c1:a8:e6:75:df:
         7f:4b:3d:7a:b3:5c:22:fb:8d:39:7f:ac:24:2c:24:bc:97:0d:
         f6:67:66:39:7e:83:e0:50:b5:44:c6:39:d8:29:ef:03:a1:3f:
         56:31:e8:38:a7:2b:c9:16:c9:c7:31:f9:5a:4e:53:42:72:e3:
         ad:d8:f5:72:4f:a2:88:42:36:0b:44:cf:9f:d2:89:41:e7:97:
         0d:1d:9a:ff:f8:48:eb:29:a1:c6:8e:25:30:d6:95:69:3e:87:
         d7:f9:a2:97:3b:3b:e0:a1:6c:c1:14:32:12:95:82:d3:0a:f8:
         ec:e2:67:6f:2e:81:6d:cc:05:a4:b3:72:9e:33:ef:08:b6:52:
         d3:d6:67:d8:77:bc:1d:07:c4:b8:c3:68:79:11:9b:1d:4d:4b:
         a4:9a:de:25:8d:36:fa:b5:d4:1b:e1:a3:b1:3d:49:04:34:73:
         a9:e7:04:23:76:94:f5:76:ca:37:7c:fb:68:26:b7:f5:4a:8e:
         08:03:31:48:ae:72:4b:05:4e:91:6b:bb:bd:49:3a:19:b6:a9:
         5c:d8:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:08:44 2024 by rpki-client on console-fra.rpki-client.org