Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File:                     3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier:          DImLxt9eRWT9WZjN8tmvF56ZjuTVRVnpuMvLAuDZ5Gw=
Subject key identifier:   4B:94:9B:7B:92:F5:A0:F6:FE:27:4D:8F:09:B8:49:78:42:A1:36:01
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer:       /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial:       018F4079AEA25F40C6B18562020450CC1519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number:          0A69
Signing time:             Fri 03 May 2024 22:01:07 +0000
Manifest this update:     Fri 03 May 2024 22:01:07 +0000
Manifest next update:     Sat 04 May 2024 22:01:07 +0000
Files and hashes:         1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: QyG2Q98Rdr/lpbZGGa3E9Y1fitfOaQBa4F2rkZCFQF4=)
                          2: Qbbgrcs6_70vAos7Kn2XjgmhhW0.roa (hash: u/xC4ZNNbPkeNaw/PwUsFeeYYHizJLUZS9CvRGT96uY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:79:ae:a2:5f:40:c6:b1:85:62:02:04:50:cc:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
        Validity
            Not Before: May  3 22:01:07 2024 GMT
            Not After : May  4 22:01:07 2024 GMT
        Subject: CN=4b949b7b92f5a0f6fe274d8f09b8497842a13601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:a0:41:7b:3d:6f:58:f9:d2:b9:dc:63:63:
                    95:c6:86:54:2a:c4:a7:db:e2:3f:50:30:01:81:61:
                    ff:8a:7f:05:9e:8d:67:dc:83:26:96:3c:af:1b:4f:
                    c5:9c:14:bc:70:f6:11:2e:02:f6:82:e2:3c:5a:84:
                    06:2f:04:95:56:b3:bd:0c:6c:69:86:55:d4:17:e8:
                    c0:05:a0:42:f2:46:f2:b7:c0:a8:2e:18:52:00:2b:
                    7a:00:f4:3b:a2:63:08:e6:05:1a:6f:31:ca:a5:a0:
                    65:35:42:55:e1:f7:a2:34:2e:fb:74:46:be:c8:a6:
                    b7:94:27:66:ad:6b:f1:05:1a:69:7d:36:8a:a8:0e:
                    aa:e0:86:14:df:b1:5c:81:21:fa:d5:bb:ba:d4:2e:
                    56:df:c5:da:35:2d:a5:8d:8a:96:8c:e6:e2:a0:f1:
                    80:7a:eb:de:f2:56:f7:29:bb:2a:78:c3:be:95:9d:
                    10:77:62:92:61:44:15:e0:11:0e:e6:1a:8c:26:d5:
                    fd:d6:88:ba:c6:29:55:17:2c:d5:60:b7:de:c9:9f:
                    46:d0:06:3b:23:28:c3:fb:c3:ab:4d:7b:de:52:8c:
                    94:9a:2e:7f:a7:22:59:44:7b:40:00:9e:3c:9a:03:
                    ea:be:dd:ea:92:eb:03:2a:6f:5e:a7:ef:01:d0:01:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:94:9B:7B:92:F5:A0:F6:FE:27:4D:8F:09:B8:49:78:42:A1:36:01
            X509v3 Authority Key Identifier:
                keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:9e:a3:00:de:1d:31:72:c4:27:71:07:c2:7f:68:55:ab:
         e9:18:7b:81:9b:e8:20:77:c2:43:de:75:2e:f9:ad:dd:a2:06:
         22:01:b4:00:6a:c4:b3:c6:37:08:eb:64:ba:40:b8:c0:64:ca:
         01:e8:ce:ac:f8:28:52:dc:0c:51:49:8c:f5:78:dc:f6:af:6b:
         2d:ae:a4:e9:c4:12:18:ef:e9:84:4e:e6:ac:76:64:ef:6e:cf:
         7a:c9:8a:94:40:0d:1d:7e:db:42:99:1e:ef:9a:d9:05:37:44:
         82:d1:a2:a6:4f:24:d0:9f:02:89:17:9e:93:d7:a9:41:09:ac:
         57:b7:c4:a0:20:3f:df:eb:80:a0:6c:2d:15:8b:78:82:3a:65:
         fc:33:6d:5c:10:95:02:04:cb:59:27:b4:a7:d5:08:4f:69:dc:
         f2:e1:32:89:78:83:4e:cd:0b:a3:73:92:92:66:f4:63:53:46:
         5c:e1:b5:6e:1c:3d:17:28:00:fd:f6:7a:9c:3d:f9:a9:df:bb:
         8e:59:eb:3b:1d:28:6b:a9:4c:68:eb:dd:9a:b1:73:d3:d0:a8:
         95:88:f3:99:d4:72:7f:8c:71:b9:f8:51:be:9c:09:68:6a:70:
         23:03:ff:db:78:11:6e:80:db:4a:fb:ce:bd:4f:c4:38:24:11:
         52:2f:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:40:35 2024 by rpki-client on console-fra.rpki-client.org