Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File:                     dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier:          34nCF5ECgvKvkb/RoIM/9vaYA9CPOkN9/vfcyeIPc+s=
Subject key identifier:   6D:F3:BF:16:E2:B4:5A:13:B1:28:31:74:C2:82:98:0C:C7:38:73:DF
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer:       /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial:       018F885B10BB6C19A1F5FFBCABDB473AD595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number:          0F37
Signing time:             Fri 17 May 2024 21:00:20 +0000
Manifest this update:     Fri 17 May 2024 21:00:20 +0000
Manifest next update:     Sat 18 May 2024 21:00:20 +0000
Files and hashes:         1: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: dliCo/0+dxHJayQqULGAv764YSrTIGIW6oWjrv4UQVc=)
                          2: va64tOb8kQO7Ri3Z6DH84A2tsZE.roa (hash: rpeoyU3M6EPD1v3iMUNDT341o5bu5Yq1B2GWTV2mYQc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:10:bb:6c:19:a1:f5:ff:bc:ab:db:47:3a:d5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
        Validity
            Not Before: May 17 21:00:20 2024 GMT
            Not After : May 18 21:00:20 2024 GMT
        Subject: CN=6df3bf16e2b45a13b1283174c282980cc73873df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:1b:c0:82:14:23:e3:fa:c8:b7:70:61:a3:
                    26:57:fd:0e:13:50:d4:2c:41:6f:69:83:1d:73:75:
                    7d:26:06:9c:96:52:e1:8f:64:f6:94:b9:cc:7f:d1:
                    b6:94:2a:32:60:dd:5e:37:27:03:03:21:35:ac:8d:
                    34:16:af:b1:bc:f6:d1:69:bd:7a:e0:95:f7:60:84:
                    94:14:46:de:7e:b2:f6:06:bf:ea:d1:89:dc:f2:cc:
                    64:fb:51:c2:bb:40:d1:1b:85:6a:a7:87:84:2b:15:
                    86:9e:5e:79:bc:cb:f4:a6:1e:6a:62:57:37:4c:6a:
                    79:63:f2:f4:99:1f:9b:cb:74:b9:7e:9f:c1:9c:2b:
                    eb:0c:88:4f:24:08:c1:a9:ca:09:03:5a:e4:fa:1c:
                    5d:33:90:af:fb:98:62:3f:91:4c:52:d7:bf:b8:3a:
                    78:af:b0:0c:48:23:60:e9:55:ee:b1:1b:2e:9c:59:
                    4a:f2:b1:15:30:d2:98:0f:58:09:07:05:e8:d1:4a:
                    c1:27:41:80:75:f6:82:0b:65:5a:17:db:83:df:9d:
                    99:66:77:48:4b:b0:d6:70:1e:39:68:f9:4a:70:34:
                    c6:e4:16:0e:49:6c:8a:2f:07:14:94:96:4f:82:d2:
                    fc:8d:52:27:e6:4c:8a:a2:08:83:fa:7c:3c:6d:17:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:BF:16:E2:B4:5A:13:B1:28:31:74:C2:82:98:0C:C7:38:73:DF
            X509v3 Authority Key Identifier:
                keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:df:d8:52:ea:12:57:82:6b:0d:5c:bd:90:24:45:ab:f5:
         29:0f:34:c6:a9:0c:26:c7:fc:77:72:00:ab:4e:1f:4a:5d:06:
         ce:4d:25:55:b0:8d:ea:06:10:ad:68:92:f8:1a:a1:45:88:e3:
         02:3b:18:a2:a4:03:03:cc:ef:6a:60:a2:60:14:8e:02:ca:4b:
         bc:78:ab:96:f2:fb:15:2e:72:1c:6c:cf:11:c5:47:22:e0:77:
         b0:31:34:4b:f1:65:62:88:4d:d2:b4:19:7f:fe:df:9c:b6:eb:
         4a:6b:1f:cb:60:09:95:63:af:21:fe:b6:5e:17:e3:57:70:a6:
         e2:7e:25:87:1f:48:65:c5:3f:6d:c2:58:fe:22:a6:74:0b:ef:
         c0:be:ad:54:e0:ee:52:f5:4e:f8:dd:cc:07:c5:7a:d9:2e:14:
         b0:1c:1f:87:08:3e:05:66:38:80:64:38:06:32:a8:1e:2c:5f:
         86:5a:18:14:c0:7a:50:50:50:1e:99:a7:59:dc:68:fd:23:50:
         93:90:e8:64:33:f6:b4:ec:40:a6:33:46:e2:5e:f6:94:9c:4f:
         a5:6b:11:0c:c9:9d:c4:4e:57:59:46:1b:59:a4:02:ba:0b:58:
         d0:4b:95:f9:f5:f7:79:d2:86:8d:f0:0a:61:32:bc:6e:fc:d7:
         86:ea:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:15 2024 by rpki-client on console-fra.rpki-client.org