Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          qO3sI9IvzJKZvCE+aWljsZpHopBYvCH1OIqTBaKvgL8=
Subject key identifier:   59:9C:57:8B:A1:F0:55:01:2E:BF:5D:82:DE:F4:D8:17:2E:4C:43:44
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       0193523E05742D6B1808F4DAD86F06F73092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          137C
Signing time:             Fri 22 Nov 2024 05:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:16 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: w8gayee3kXA/qasiewV+uTgIgkDh9Loyg00GUrtquTo=)
                          2: Q4PlefsqmXWqy5gnAYkw40HhENM.roa (hash: 6tK0YkOLEby5pL4YKwgq5GvyZ87BoABxTyu7qzz9cmk=)
                          3: _ebRMxmH5KizFz1IETPGn1v9aOU.roa (hash: LZZ3BN5oEiVwLRT5urIQRWtTLJAAkgzjM7hHJN41ECE=)
                          4: bDlaisZZqEONqIoG66KQZ_6AuAg.roa (hash: jmvMane+tLP6srFEw72zQ7c/FykGBHMXf50HR4a7daw=)
                          5: j7IGzzvM2EBcSP-J9hPVJKA5XBQ.roa (hash: 8rd3LgO814XLlnk0GEZiU0her0DnjcwO3+3F5uwEEu4=)
                          6: nx7cFKeTbr8gXZKTN4tUct3gmOY.roa (hash: mpvfbcDq8nZOsQCVh1gJuQhIDXO81JTJWxSj1bruTK8=)
                          7: r53OJMPJwDE3ZT7D0PQdKPUA0gY.roa (hash: cPwAraFEz9eoRgWeB4UshDGYJfd2OBTsslpfNN5iceE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:05:74:2d:6b:18:08:f4:da:d8:6f:06:f7:30:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Nov 22 05:00:16 2024 GMT
            Not After : Nov 23 05:00:16 2024 GMT
        Subject: CN=599c578ba1f055012ebf5d82def4d8172e4c4344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:44:78:31:f8:03:6c:0b:e4:71:fa:2f:10:
                    2d:60:b3:20:35:36:65:69:55:c2:7a:93:3a:17:08:
                    68:59:79:01:69:b0:d4:2f:5a:f8:42:8d:fd:43:0c:
                    49:8b:9c:93:6e:44:3f:34:32:07:af:54:47:c7:28:
                    ed:67:c8:e0:52:3b:ef:fa:34:9a:5d:37:6b:51:70:
                    c0:1c:18:96:9c:78:fc:c0:15:fd:5f:35:d8:f0:a1:
                    6a:3a:a5:72:e5:e5:94:7f:b7:08:ea:4b:75:51:80:
                    4c:89:48:c3:cf:4f:8a:2a:08:5e:7c:55:cf:60:85:
                    7b:49:10:9f:00:84:bb:b8:da:1f:d2:92:b6:43:71:
                    f4:83:07:49:7b:87:76:78:b9:f4:c1:b3:c8:86:03:
                    7a:af:b5:85:7c:ac:39:4c:82:88:06:bc:49:dc:1f:
                    bc:0a:a7:d0:97:29:12:70:5c:38:b3:bf:6d:32:e5:
                    e3:f3:4c:02:70:c7:56:62:5f:09:85:86:63:7a:49:
                    89:c9:5d:c9:50:de:06:36:45:22:fb:ba:09:65:71:
                    51:cc:f2:80:cc:9f:b2:5b:cb:c5:b8:19:97:f0:5b:
                    e1:a8:65:30:49:00:d6:8f:84:f7:dc:44:4b:d6:8b:
                    d9:06:89:24:bd:65:66:af:0c:c9:e9:9a:f2:a6:34:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:57:8B:A1:F0:55:01:2E:BF:5D:82:DE:F4:D8:17:2E:4C:43:44
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:b9:ff:fd:2e:16:dd:a1:88:7a:13:c0:08:73:ec:e7:db:
         fd:74:77:b3:c2:db:4a:43:ec:c1:1c:5f:00:55:01:8e:51:73:
         b1:61:4c:97:88:bf:02:e5:e6:d7:ae:fe:26:d5:08:e9:42:89:
         74:54:ac:e3:49:94:a2:61:aa:03:83:1a:e2:da:be:05:a0:45:
         1d:71:31:50:33:74:18:f2:04:95:29:06:5d:b3:44:f9:04:a0:
         01:a1:a2:c8:46:a1:d8:2f:c9:f8:7f:14:df:28:d0:30:6c:68:
         5d:a1:c6:3f:20:56:db:98:dc:f2:5d:12:26:c8:bb:92:ec:d8:
         62:bd:d6:08:13:57:5a:18:ec:f8:b9:3e:fa:a4:a8:b7:75:7e:
         dc:54:68:18:29:c1:47:63:eb:19:4a:f7:68:2e:54:9c:af:fb:
         67:4f:01:99:c7:cc:79:90:f1:41:96:c2:b8:dd:8a:85:74:ac:
         89:0b:1f:e4:f0:99:8a:62:c1:84:f7:fe:15:dd:58:da:c2:32:
         e5:1c:63:f3:4d:49:a1:02:39:9b:1e:38:c1:ce:5c:3d:f3:43:
         ac:3a:4a:3e:32:0a:35:ae:4d:aa:f2:36:77:54:49:9b:56:53:
         5a:0d:8c:3b:88:eb:66:4c:ea:25:32:cf:f6:e2:5a:4f:60:13:
         a0:30:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:30 2024 by rpki-client on console-fra.rpki-client.org