Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File:                     03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier:          YXk0XWOuWZWIcwuaCBg1wwe1iW+M0dg9WbZ/gdJQ09M=
Subject key identifier:   2C:37:8F:97:03:ED:CB:D3:18:51:8C:A4:83:7C:AD:64:C0:2C:17:38
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer:       /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial:       01936A46A5A390E27F238D458203D734783A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number:          0725
Signing time:             Tue 26 Nov 2024 21:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:34 +0000
Files and hashes:         1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: OQ17WZOgY7v7q0/pm6PjYxBJgeCIr7guQMLg3bG5nUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:a5:a3:90:e2:7f:23:8d:45:82:03:d7:34:78:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
        Validity
            Not Before: Nov 26 21:00:34 2024 GMT
            Not After : Nov 27 21:00:34 2024 GMT
        Subject: CN=2c378f9703edcbd318518ca4837cad64c02c1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:ab:13:a9:33:b0:93:b7:b8:ad:04:57:24:
                    e8:8c:54:dc:9f:f3:10:f7:03:24:29:10:64:2f:c3:
                    09:b3:b6:a1:0e:0b:a7:d9:18:b1:13:ff:a9:e8:27:
                    75:7b:41:3b:9c:58:fb:25:63:9c:1b:ff:63:6c:6b:
                    81:31:0a:ce:8c:44:98:32:1e:f8:f8:94:b4:34:75:
                    fd:3e:e2:7c:4a:a2:30:0c:53:ec:b9:92:8f:a0:76:
                    be:55:5b:c3:fd:50:ad:0b:fa:21:fa:7b:f9:5f:83:
                    a6:1e:30:ba:b8:0f:d5:ee:e4:d4:35:4b:d6:c3:1f:
                    26:76:65:b4:c8:02:a8:a5:bf:e0:86:34:00:e1:37:
                    78:0a:97:69:49:4f:0a:08:41:b4:a4:92:49:f1:8a:
                    df:af:ec:ca:fb:83:16:24:a1:1e:4b:6d:e3:f2:d5:
                    26:71:11:a6:37:c9:8c:83:2f:f2:a8:0b:34:38:33:
                    83:71:a3:f3:7d:43:ca:82:a1:7f:0e:44:30:87:8d:
                    2e:2a:44:fe:97:0b:df:38:65:8f:dd:41:08:60:50:
                    fe:10:69:b1:a2:89:fc:ad:bc:4e:8f:97:ac:c6:60:
                    20:ac:a4:02:bb:76:8d:22:f9:09:9e:db:1b:9b:c1:
                    4d:55:d0:80:92:c0:1d:72:a1:f0:4a:81:6e:42:5d:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:37:8F:97:03:ED:CB:D3:18:51:8C:A4:83:7C:AD:64:C0:2C:17:38
            X509v3 Authority Key Identifier:
                keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:45:88:19:62:55:0b:41:2e:d4:e1:a3:6c:18:08:e7:d0:
         18:f4:bc:cd:09:d4:00:51:41:11:af:18:57:83:eb:74:ac:6e:
         9b:a5:3f:ee:37:06:7f:fd:1d:fb:83:51:fc:a4:0c:32:1c:4c:
         1d:c2:f7:e1:b6:a3:e0:8d:de:f1:35:f0:c6:e2:1c:e3:99:76:
         e9:6e:91:56:a5:cd:4c:b4:79:bb:b8:d6:7a:34:06:94:c3:06:
         0e:f3:d6:8d:7d:00:9c:50:ea:4a:6d:1a:15:83:8e:fd:a8:24:
         d2:01:7b:73:9c:54:48:1a:e4:f3:3b:5e:75:de:cb:1a:c1:1b:
         bc:f0:44:74:32:cf:e5:1c:e0:42:26:e5:21:5d:b8:be:1b:b6:
         c2:76:86:74:a8:3e:c0:7e:31:a4:8f:bd:8b:eb:67:0f:e6:66:
         ef:a2:43:80:85:32:97:c2:94:08:10:e9:12:ac:c7:c2:07:a8:
         48:d0:8c:8e:ab:17:58:11:11:cb:b9:8b:40:c9:14:ff:4a:ac:
         cd:cf:4b:c9:f5:5f:0b:99:3f:a9:40:a8:9d:a4:29:e5:16:a5:
         c4:e8:81:03:77:7d:9a:de:0e:98:11:51:b6:99:d4:ad:9e:78:
         35:87:d5:d6:81:8b:5f:fd:db:38:3c:00:8b:45:52:b8:81:82:
         f7:43:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:51 2024 by rpki-client on console-fra.rpki-client.org