Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File:                     ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier:          pjssI6JLleb9PcoUC72iNlMPdtalmrhb+X7Ow3BYnpQ=
Subject key identifier:   A5:4F:20:42:84:98:3E:E5:4A:AD:1C:67:AE:F2:55:F0:9A:5F:68:5C
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer:       /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial:       018F40B0CAF80C994859B13790BD84FEC8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number:          10E5
Signing time:             Fri 03 May 2024 23:01:19 +0000
Manifest this update:     Fri 03 May 2024 23:01:19 +0000
Manifest next update:     Sat 04 May 2024 23:01:19 +0000
Files and hashes:         1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: WbvLrdJnP3U7IELUmj27v3VOUlL/sXg91DXRcQobZ68=)
                          2: pVu_jMklhMOVOp_lxK-8WOWvots.roa (hash: 4EIZA4yy5sOEdsuJ8EfgVAwzuJJUfAJeCJj4KsmC8Jg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b0:ca:f8:0c:99:48:59:b1:37:90:bd:84:fe:c8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
        Validity
            Not Before: May  3 23:01:19 2024 GMT
            Not After : May  4 23:01:19 2024 GMT
        Subject: CN=a54f204284983ee54aad1c67aef255f09a5f685c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:7c:d5:c0:7f:85:86:a3:7b:d4:9b:db:d6:
                    c5:50:d3:6f:b3:27:c4:81:42:db:76:13:63:10:1f:
                    cb:39:50:7d:79:b7:67:b4:40:84:d7:4e:2c:21:de:
                    d3:78:27:b6:b4:f4:a7:a0:5e:db:be:92:6c:7f:cb:
                    c1:44:16:90:35:80:6b:64:bc:45:9a:1c:e8:18:68:
                    0f:57:9a:6f:b9:f3:c4:8a:61:67:e7:e4:60:5d:bb:
                    78:10:31:cc:71:5a:64:e6:33:44:cd:62:c9:c2:00:
                    9a:49:43:80:b8:45:33:ad:77:6c:dc:1a:e0:49:dc:
                    a4:f5:96:df:79:1c:b5:da:41:93:c6:c8:43:cb:2f:
                    f1:15:94:13:82:8c:bc:b3:6a:a6:19:a5:d3:19:ef:
                    e1:ba:dc:5b:99:51:2b:cd:b5:82:4b:6d:55:7f:19:
                    dc:ab:41:94:6b:48:03:d7:d4:ae:4a:c1:c8:3d:42:
                    98:5d:e7:9e:8d:a6:30:3e:57:1d:7f:0e:1f:ae:12:
                    7c:54:39:68:d9:9b:4e:cb:56:75:55:5f:8b:52:ad:
                    08:df:f1:d0:9a:42:f1:e7:3a:9c:48:41:c7:3f:a3:
                    cd:2f:ec:60:6d:d9:99:c7:37:ee:98:aa:6e:66:98:
                    e4:c8:d0:5f:46:b1:a8:7e:a8:cb:41:f7:a1:db:f2:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:20:42:84:98:3E:E5:4A:AD:1C:67:AE:F2:55:F0:9A:5F:68:5C
            X509v3 Authority Key Identifier:
                keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:13:79:6b:ed:97:d6:fb:d4:94:79:81:fb:39:ee:83:07:
         47:5d:01:1a:a7:3e:08:75:14:39:d8:50:a4:23:de:4f:aa:a9:
         ef:fe:d1:85:89:2f:6d:15:4e:06:b3:5a:b1:da:dc:27:ff:74:
         e5:e0:79:17:2e:68:e4:24:25:35:d9:84:4e:db:da:98:43:ae:
         d4:34:bf:fa:a5:41:a2:45:bb:32:2d:ce:39:eb:5d:68:d3:9a:
         a1:5a:0b:08:6d:35:81:d1:4a:be:be:2c:88:98:da:04:f7:81:
         8d:ac:60:4a:c5:6b:92:87:4a:b1:6d:5e:bc:c6:f5:4e:13:6a:
         5b:40:01:b5:27:ad:ce:e0:7f:67:83:13:9c:bd:50:80:b8:d7:
         fb:d7:b7:9d:50:50:59:8d:7f:b9:8a:a5:bc:e5:d2:32:d4:0a:
         f8:b7:83:3b:2a:bb:60:e8:5d:29:72:cc:d6:33:a5:d7:ff:be:
         bd:01:67:6a:f8:2c:97:18:db:0e:a4:77:3b:d8:8b:32:b0:82:
         ae:32:90:07:c7:df:ed:f6:38:c4:05:6c:bb:fa:a1:20:61:d2:
         d3:4c:6c:45:f0:64:44:2e:3f:1b:9e:9f:4f:d9:9c:20:b4:af:
         0f:f8:0a:17:fe:9c:b0:77:40:1f:77:c6:25:3f:24:48:e4:1b:
         3a:47:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:20:30 2024 by rpki-client on console-fra.rpki-client.org