Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File:                     3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier:          unqZd/su8vcZpKFUDMWDUJNkr1BNS/KMd+l5woHkcXk=
Subject key identifier:   6F:28:A4:B7:92:F4:87:05:87:23:0C:55:B5:8C:A1:0B:18:A5:08:C3
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer:       /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial:       018F430CE84F9860EC8D7663A66FFC9D8689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number:          10E6
Signing time:             Sat 04 May 2024 10:01:10 +0000
Manifest this update:     Sat 04 May 2024 10:01:10 +0000
Manifest next update:     Sun 05 May 2024 10:01:10 +0000
Files and hashes:         1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: SInEl/mVNi4Y0K8/5L4E6L6m2Ew6kI8lIaMphFsvkzs=)
                          2: MJ9A4qNgp4ZYH54fedBdsQbBD2k.roa (hash: m/H2QjadOQHjH1Tv0uJAmL0oxiYDWBTO/mWHV2SW4Yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0c:e8:4f:98:60:ec:8d:76:63:a6:6f:fc:9d:86:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
        Validity
            Not Before: May  4 10:01:10 2024 GMT
            Not After : May  5 10:01:10 2024 GMT
        Subject: CN=6f28a4b792f4870587230c55b58ca10b18a508c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:b3:9e:f8:b8:b2:2d:d4:c3:56:dc:5f:ec:
                    9c:46:ed:f7:a6:d7:73:2a:7e:03:61:fd:97:6b:5e:
                    1c:cd:61:cd:04:4c:86:9d:5a:66:ed:27:08:63:5e:
                    8a:73:1d:0c:60:9d:59:03:8b:4f:bd:7b:81:7c:58:
                    56:40:b5:f4:0f:a7:3b:ea:8d:eb:b9:d8:e8:45:1a:
                    63:a2:24:49:8c:fa:82:c5:15:c4:80:7f:d2:71:8d:
                    46:07:3d:1a:bb:3a:7a:a2:28:f8:e0:56:93:46:4a:
                    92:ad:64:48:3d:7f:37:b9:78:11:2f:83:13:7f:26:
                    4e:81:e1:83:e5:a3:8c:6d:ad:4d:9b:51:b4:7e:0d:
                    04:5d:ff:dc:31:b7:1a:80:d0:47:e0:17:13:dd:97:
                    91:da:10:03:d7:a8:a0:15:64:3b:a9:77:51:40:58:
                    e8:b3:60:ae:b1:69:e1:44:28:41:44:15:e5:eb:51:
                    d8:97:cc:11:ac:67:35:15:04:8d:34:71:ae:79:65:
                    89:8e:42:68:6b:60:b1:01:89:cc:47:85:10:3a:ca:
                    92:71:a7:78:95:83:39:b7:92:f6:f3:ea:a6:9e:b5:
                    60:49:ce:dd:05:04:b2:95:55:2f:09:fb:10:0d:c5:
                    67:57:b0:f3:17:e2:dc:b6:7d:6c:7a:b4:e4:a1:c4:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:A4:B7:92:F4:87:05:87:23:0C:55:B5:8C:A1:0B:18:A5:08:C3
            X509v3 Authority Key Identifier:
                keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:e9:c1:1e:2d:1b:66:8a:05:ea:c7:f0:2e:cb:ae:6d:78:cc:
         08:a6:c4:a7:c8:ac:d7:c4:12:36:e5:4d:fe:12:a1:7a:44:9a:
         5d:52:77:17:48:80:81:b7:f1:2a:08:97:89:ee:8b:7d:98:21:
         ee:7c:60:ce:f4:3b:c0:3b:58:c7:a0:43:e1:87:4e:32:cf:ec:
         1f:b4:da:0b:6f:d1:82:0e:1f:43:1a:b4:45:9b:4f:ba:2c:e2:
         21:ac:09:8b:88:58:47:33:e8:d0:62:45:65:1e:a9:50:7e:5d:
         0c:39:d3:0f:81:1a:c6:3b:35:ea:d8:ad:a8:31:71:9e:6a:06:
         d8:09:38:17:a5:6b:26:35:28:5d:a5:db:0f:5b:d9:77:f6:77:
         a4:b2:cb:a8:ed:aa:c6:4d:0c:e3:4b:b3:87:5b:97:44:bd:66:
         26:51:da:3e:d6:39:e1:d1:63:0c:13:e0:ad:df:86:14:89:37:
         89:21:d8:14:90:40:0a:05:b3:64:94:87:dc:40:93:9f:d7:ab:
         dc:18:e3:af:4a:96:aa:61:df:e8:c8:37:d3:a9:b6:f2:84:22:
         9d:85:ef:eb:59:73:e7:93:7f:94:ac:c3:c0:16:c3:dc:8f:69:
         79:d5:0f:d4:53:20:0d:98:0f:35:38:32:5e:5a:91:f8:c4:d9:
         0b:f6:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:27:40 2024 by rpki-client on console-ams.rpki-client.org