Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          bWsXU21sk/rlfHTQ77T4Hs0IQHfPKVC0C2uw72aFDaQ=
Subject key identifier:   03:8D:99:E1:F3:77:2A:CC:1E:49:79:55:AB:64:1F:37:56:F0:EE:F2
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       018F866C99B1E4131B68F09C737519954A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          032D
Signing time:             Fri 17 May 2024 12:00:15 +0000
Manifest this update:     Fri 17 May 2024 12:00:15 +0000
Manifest next update:     Sat 18 May 2024 12:00:15 +0000
Files and hashes:         1: Al97u5Yz3HBoJ9f40bmHf5eqMjI.roa (hash: ZJAvbVmW0jK+7FDNcl17YlrEZzjhdBwk4ObeHYDWQSU=)
                          2: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: GnaCHD2ryghlNhkNB3h8lOIH2vabDEQv7AAW0DFEbmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:99:b1:e4:13:1b:68:f0:9c:73:75:19:95:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: May 17 12:00:15 2024 GMT
            Not After : May 18 12:00:15 2024 GMT
        Subject: CN=038d99e1f3772acc1e497955ab641f3756f0eef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:01:ca:8e:84:b5:69:d8:04:d9:ca:b9:13:
                    41:b4:00:67:0a:ce:75:16:b6:e6:f4:32:cf:46:18:
                    e7:71:2a:31:a4:69:b2:b7:55:41:7a:f0:6c:6b:28:
                    6f:c2:46:b1:60:06:e1:a3:35:04:ae:5d:90:b2:37:
                    95:99:32:fd:ea:13:ed:a7:4a:9c:ea:9b:58:8e:2a:
                    5f:18:f3:32:e5:e8:33:a3:2e:bc:36:da:9c:c8:d1:
                    a8:bf:a0:c8:de:c8:0a:91:9d:ee:09:f2:0a:26:bd:
                    e7:91:00:fd:39:10:98:f1:1f:7b:f4:94:7b:92:3f:
                    59:15:b1:7e:52:a7:b4:a0:40:a9:df:6d:a5:a2:79:
                    a3:88:d2:b7:ef:6a:6a:d5:a1:33:43:94:b4:fa:c7:
                    58:7d:6c:c8:ee:69:78:da:1f:c1:4d:72:bf:4e:24:
                    e2:87:0d:69:f1:46:ea:58:d6:c6:b8:12:f0:23:6b:
                    a7:48:66:49:db:1c:52:5e:bd:1b:af:e9:63:23:8d:
                    10:b4:c4:f0:2d:6e:91:f7:7f:b6:6a:6f:84:d9:c1:
                    22:b2:bd:b0:40:0e:0b:55:78:21:26:36:fe:4b:b6:
                    50:ba:7d:55:63:4b:be:f8:49:52:b1:12:f6:3e:90:
                    22:7c:51:9e:c5:88:d8:38:ee:7e:6f:69:77:a0:6f:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:99:E1:F3:77:2A:CC:1E:49:79:55:AB:64:1F:37:56:F0:EE:F2
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:09:3e:41:3e:d5:1d:98:ad:d1:9e:dc:a9:76:05:74:9f:52:
         20:ac:1f:03:6e:88:dd:8c:b0:c6:c1:71:86:21:bf:11:f9:f5:
         af:36:5b:29:19:ff:5d:40:de:e8:c8:8e:d4:99:57:6f:e1:21:
         64:a8:b5:59:8b:d3:ad:36:58:a5:c3:e0:a9:4d:90:a5:27:8e:
         0f:9d:57:5d:8b:3d:7d:aa:40:f7:16:1a:5f:d9:99:1b:d2:3b:
         68:7f:cf:a9:82:3f:ca:a4:62:91:84:a2:53:65:45:22:35:74:
         31:ce:38:83:6a:ca:ed:f3:10:13:03:02:a1:cc:2c:60:51:76:
         4c:7a:14:75:51:06:90:ed:43:da:52:82:b0:c9:ad:8c:54:2b:
         99:00:72:f6:08:c9:f4:2a:dd:df:76:8d:a2:dc:ce:59:5b:71:
         8c:93:1f:70:cb:aa:8e:c4:f4:1c:1c:b3:5e:c5:17:1e:a5:42:
         bc:fc:d8:d4:bd:af:74:17:07:c2:db:86:71:9c:f4:ed:f8:19:
         3b:5f:1c:55:36:7c:58:b6:9c:a1:be:6c:0a:54:50:1d:e8:0d:
         b9:cf:f1:e7:ea:62:5d:9b:17:a5:dd:7f:64:0a:3e:0e:ee:8b:
         f8:7e:19:82:96:22:16:dd:98:29:35:d4:3d:51:62:05:6b:3f:
         52:84:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:18 2024 by rpki-client on console-ams.rpki-client.org