Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File:                     3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier:          xKUFE6uGFZ3pvqcylElbS5BSvUCF2YqXYpRBGeIagik=
Subject key identifier:   BB:34:E1:B4:41:36:35:E9:89:94:28:5F:EA:A5:97:88:8D:F6:46:0E
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer:       /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial:       018F32F4FC23E51A90777932900554F6168D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number:          0C8C
Signing time:             Wed 01 May 2024 07:01:07 +0000
Manifest this update:     Wed 01 May 2024 07:01:07 +0000
Manifest next update:     Thu 02 May 2024 07:01:07 +0000
Files and hashes:         1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: kn2qu9jmAkM+cMnP4GDyg6w37m9pbleGZy0nX5d0qPM=)
                          2: HXSHBJElYHomnXckdEeEm7-axT4.roa (hash: MzYLS0aqJHW5ugSgfJDNCAYht/rqwv+iYj07jwtX87U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:f4:fc:23:e5:1a:90:77:79:32:90:05:54:f6:16:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
        Validity
            Not Before: May  1 07:01:07 2024 GMT
            Not After : May  2 07:01:07 2024 GMT
        Subject: CN=bb34e1b4413635e98994285feaa597888df6460e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:72:d5:46:3d:d4:e2:e5:54:58:5a:52:52:
                    f7:dd:ca:62:b7:d3:e2:86:fd:bd:c4:4f:2e:e0:39:
                    65:79:6b:72:f5:0a:bc:d6:29:b4:7e:97:58:02:a5:
                    90:c5:6b:1b:cb:69:3a:52:07:2e:1a:a8:76:e4:59:
                    4f:d6:b0:e9:42:c3:36:4d:3b:b3:34:1a:03:46:61:
                    74:47:d6:17:37:df:0e:ba:1d:66:19:31:1f:00:1a:
                    d7:61:b7:f8:db:90:20:ee:8c:50:25:d6:c8:27:b5:
                    6c:48:a1:7e:19:0d:70:41:93:b1:25:3b:9b:cc:f1:
                    b3:49:ed:97:2e:f5:3c:b6:a0:a1:eb:2d:cf:ab:bb:
                    49:fc:12:ad:f3:7c:2d:e9:39:00:11:79:5e:0b:24:
                    d2:58:bd:08:2a:cc:de:5d:96:c5:08:d8:5c:68:d8:
                    84:1d:8d:c1:d8:29:76:39:b3:f2:18:02:8d:78:86:
                    a2:72:4f:3c:f6:80:d2:34:20:8c:bc:97:34:b8:09:
                    93:42:4a:f0:76:88:4a:77:8d:52:61:b7:bc:73:8b:
                    85:85:3b:d4:eb:74:f3:3b:b2:7b:f6:56:70:e8:b5:
                    5d:04:3e:c1:7d:0a:5a:f2:1a:c0:9a:57:81:04:89:
                    10:b9:16:55:34:f3:5a:aa:00:70:98:9a:69:bb:03:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:34:E1:B4:41:36:35:E9:89:94:28:5F:EA:A5:97:88:8D:F6:46:0E
            X509v3 Authority Key Identifier:
                keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:67:e7:04:ab:80:fe:24:24:27:7d:13:18:4f:d6:52:86:f6:
         f4:c3:ff:8b:d8:41:e9:49:09:da:b0:d9:f6:9d:66:9c:09:3f:
         d2:ca:19:6c:02:01:0a:54:fd:3e:68:36:a5:78:c0:7d:84:70:
         0b:4b:2d:e6:b9:0d:a4:57:ed:1e:45:59:de:9b:94:88:f7:d2:
         8d:19:80:3d:f8:a6:3c:cd:4e:3f:6a:a3:bb:41:0a:14:dd:d1:
         f4:d6:38:e0:3c:79:f3:89:f3:3c:61:f2:d8:66:0a:26:7c:b1:
         16:1c:e0:74:3a:24:bc:78:c5:10:db:a5:0c:03:fc:3b:97:3f:
         96:9e:43:ab:d9:6f:51:a9:e8:a8:5a:9f:41:fc:ee:93:5b:13:
         3d:f3:1e:e8:e7:df:a6:c5:9d:19:94:96:8b:dd:84:07:a6:bd:
         2a:c5:a3:e4:6d:df:47:a0:cb:4c:33:9d:fa:e3:c5:2d:8b:15:
         e1:eb:32:de:c4:de:5f:34:1d:40:8b:85:20:a3:56:50:e6:25:
         02:47:4b:ef:a7:7b:ec:bf:cf:97:79:28:84:7b:35:37:aa:e7:
         32:97:3a:a6:27:d7:c8:cc:53:69:aa:3d:ef:3d:31:bb:94:9c:
         e6:4e:4f:76:f2:4e:ae:25:ba:f9:69:ef:95:53:e1:06:a8:87:
         5a:60:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:17:27 2024 by rpki-client on console-ams.rpki-client.org