Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File:                     3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier:          zwxKtTabdQcDb8urpaDcvx87u/bpCJ8et9Jj8LZXJFY=
Subject key identifier:   59:2B:02:EA:FA:8A:C9:64:26:53:21:76:B7:13:EE:17:41:0E:86:93
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer:       /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial:       0194060EC7CCC5C4B16359133B160644518F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number:          0D0B
Signing time:             Fri 27 Dec 2024 03:00:19 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:19 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:19 +0000
Files and hashes:         1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: 68vujVXYVrj/zdBKoCgzVog+pSCwwMEQZCNl4ZctEYc=)
                          2: 7FmbgIyEcnNlCtI0e4dQoxcE6gM.roa (hash: bY0ACuZfN1E9zSxlVVfi47hMrlYVLdbmPVj7nq30shk=)
                          3: Xto4bhqEOn3XYPJKm92NLNMUHKQ.roa (hash: eUoekhFFgFrVT/tCJA5/rdc6QeyayeBT1A0knWoUgWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0e:c7:cc:c5:c4:b1:63:59:13:3b:16:06:44:51:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
        Validity
            Not Before: Dec 27 03:00:19 2024 GMT
            Not After : Dec 28 03:00:19 2024 GMT
        Subject: CN=592b02eafa8ac96426532176b713ee17410e8693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:98:6c:da:b7:cd:2c:b1:bf:3d:d9:8e:6f:
                    a7:dd:f9:68:d3:bc:7d:5f:68:36:9e:db:26:68:42:
                    c2:c9:82:65:9f:49:ac:b7:c2:79:0e:b9:5d:af:bf:
                    62:97:30:d5:0d:24:94:48:38:9c:91:e1:b4:23:59:
                    72:e9:eb:71:f2:35:7b:b9:f8:0b:6c:17:41:f2:63:
                    1e:af:38:30:9c:25:7d:bb:90:43:79:27:e6:ae:1d:
                    1d:0a:ab:02:d0:26:36:95:57:86:e2:89:14:a3:1a:
                    01:b5:ba:68:b8:a6:92:57:ca:6c:96:33:32:87:bc:
                    0a:e5:4a:9d:ab:0a:40:95:1c:c4:ca:00:e5:ac:f8:
                    3d:33:8b:a8:ef:29:3a:a1:dc:75:89:91:e7:fc:d9:
                    af:65:41:15:37:19:cc:02:b5:b0:41:47:e3:f9:1c:
                    2d:3c:8f:e9:d7:cf:66:07:de:1f:26:ac:08:81:55:
                    61:15:37:df:7a:8c:88:cb:66:3c:a3:17:4a:5b:09:
                    de:33:5a:45:da:43:4f:35:11:d4:c7:a9:31:bd:a0:
                    43:a0:f3:83:dd:90:ad:01:37:2b:d8:84:9d:e0:9d:
                    28:42:7c:3e:50:f7:e7:1d:36:da:d2:91:dd:e0:5d:
                    56:3e:59:5f:56:12:d3:5d:8f:3c:5d:d3:5f:5a:2d:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2B:02:EA:FA:8A:C9:64:26:53:21:76:B7:13:EE:17:41:0E:86:93
            X509v3 Authority Key Identifier:
                keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:0c:3d:76:db:63:e0:46:5b:1a:7e:39:89:92:3a:08:20:
         2e:61:ec:4f:7c:ec:b9:08:f4:40:53:9c:da:f3:9a:86:e7:ff:
         6d:3b:a5:0e:b4:7c:55:e5:ae:43:fc:c2:50:80:7b:ce:98:6b:
         05:e4:ca:60:c0:58:14:e6:a7:83:0d:44:f8:38:c0:36:4e:10:
         fb:d8:a8:8e:1d:e1:86:64:6f:75:06:da:8b:1f:7b:9c:9e:2a:
         0f:40:ea:63:0b:aa:ae:64:99:8a:6a:53:9e:1c:32:6d:19:68:
         66:46:8c:16:1b:c3:e4:5c:92:97:b2:61:74:e3:c7:87:6c:54:
         df:51:2a:d0:63:f4:9b:9d:3e:eb:30:eb:a1:0b:45:67:a0:d3:
         5b:d8:c3:0a:67:c5:9f:31:ce:4c:0b:71:91:10:cf:d3:dd:69:
         11:4e:dd:72:95:d4:b7:5a:db:62:bb:39:ea:d6:3d:3b:f0:0a:
         76:8b:9e:be:ca:7c:3c:0a:46:49:0f:c3:c0:91:1b:99:f4:b8:
         79:37:15:4c:37:59:86:25:71:b6:18:09:e0:31:61:af:91:86:
         98:c6:68:20:02:d0:be:6b:1b:fa:40:be:e2:63:bd:78:7d:fe:
         ab:cc:b7:12:ae:dd:03:8a:75:0f:b3:e9:ed:02:7d:7b:f4:f3:
         62:d6:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:00 2024 by rpki-client on console-fra.rpki-client.org