Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          ROLoFmgwt6ZzfKoU7nZsoBsgVfHsRqHZHxhFNRnpP1w=
Subject key identifier:   EA:2F:40:26:81:BD:4C:01:A0:8A:CF:0B:FC:58:47:34:42:D2:CD:60
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019233929A60E556B46C6F59B3ACD363DE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          12B1
Signing time:             Fri 27 Sep 2024 13:01:38 +0000
Manifest this update:     Fri 27 Sep 2024 13:01:38 +0000
Manifest next update:     Sat 28 Sep 2024 13:01:38 +0000
Files and hashes:         1: 3RA-TBwiCG2fM1O3_dYbQwJI2L0.roa (hash: qhZfn4kbwoJKpCFRpVxRrbZlxbuZNj7qZhcYT5Ri1Qc=)
                          2: XInv8IbknzJ-ss5SASvN_06R1uo.roa (hash: vJu2UPPyTNaPrKdqsqaOlWtZFh2nn3Bz0/EJjz6BjWE=)
                          3: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: KxdvEAC0vpIZzM/4rsvABc6GbobjQxGih6DI08yZNOQ=)
                          4: umWhjBnVygAHfjm2VwBtRxyPE5k.roa (hash: 1t7Zf1FqCh9m/fa6/pusUD/Ekje8+5TbQi7ETqCMtVw=)
                          5: wed1dI7kmQ6rwffkswXkH2cgAUE.roa (hash: LleW4YyrOFUM4CKY2bjaQDnlIoLZDcQDdpt9EKVPOXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:33:92:9a:60:e5:56:b4:6c:6f:59:b3:ac:d3:63:de:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Sep 27 13:01:38 2024 GMT
            Not After : Sep 28 13:01:38 2024 GMT
        Subject: CN=ea2f402681bd4c01a08acf0bfc58473442d2cd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:6a:08:d0:24:25:d4:45:cf:03:26:b5:e1:
                    48:45:32:61:c0:d2:c8:16:7d:ba:13:eb:93:2f:5d:
                    6b:15:93:42:19:d0:d4:fc:ee:98:52:4c:3a:f9:e3:
                    25:41:ee:2e:45:fd:25:40:e0:ea:eb:21:27:40:96:
                    e0:f7:a2:67:40:14:40:01:30:b0:6c:21:cd:c0:da:
                    5d:01:f3:19:6f:24:f1:bf:a9:cd:d8:47:e4:22:05:
                    d0:71:87:34:d3:fe:a3:ff:1b:af:e8:3c:57:f3:6a:
                    91:db:c6:3f:b3:c5:b6:9b:c3:ed:22:6c:dc:45:07:
                    c7:78:c0:c8:11:c3:72:33:5f:5b:42:a0:73:61:c8:
                    1d:4f:9d:6b:21:51:08:5f:ee:6a:d6:95:ab:70:46:
                    98:cd:ae:d4:ea:1e:99:ac:bb:d8:83:da:c3:8f:62:
                    bd:6c:69:28:89:ac:22:57:d8:74:52:17:50:52:4d:
                    46:f4:3c:c1:1e:87:03:77:32:bf:09:03:5c:6e:04:
                    ed:a6:87:db:a4:7f:bb:e6:e1:d7:6b:00:d7:25:c2:
                    aa:23:65:16:3e:aa:fc:43:e3:da:7c:ff:62:fe:9b:
                    6f:03:4d:53:e8:77:37:15:71:48:61:c1:7f:cd:3c:
                    2d:ed:07:3e:42:46:df:e6:56:1f:50:08:14:fe:f2:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2F:40:26:81:BD:4C:01:A0:8A:CF:0B:FC:58:47:34:42:D2:CD:60
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:83:e1:08:bd:e9:53:89:a6:3e:17:4c:e6:c2:28:db:ee:91:
         0c:8a:e5:1c:6b:fd:56:2a:18:9d:eb:59:ce:41:41:e0:f9:90:
         fe:54:2f:81:33:fd:ca:23:8a:a5:b0:f3:99:55:39:78:5d:e1:
         a9:7e:5d:8b:9e:98:ea:e2:e0:ba:3a:52:b2:15:c7:34:e0:1d:
         92:3d:66:5d:66:c3:63:54:d5:28:63:5d:9e:69:ab:3b:0b:a4:
         cc:e3:ec:a3:a5:4a:81:43:75:c8:5f:e8:72:15:e0:08:90:6c:
         3a:d7:d9:b4:17:4d:2a:7d:ff:8a:f5:35:8b:a7:47:48:8e:d6:
         6e:27:43:a2:8a:2a:4b:85:7d:fb:1e:3e:00:f7:53:4f:61:fd:
         7c:e1:28:25:a5:6f:8a:65:ff:88:eb:59:c6:b9:df:26:ff:d0:
         30:4f:f0:8c:be:82:73:f5:73:f8:6d:6d:6f:fa:7d:09:a3:8a:
         4d:11:03:71:59:9e:ab:68:8c:c5:b6:f1:8c:85:0f:9a:be:f6:
         da:a6:6d:45:a3:31:44:b3:93:cb:9e:81:58:22:b4:71:6e:bd:
         88:b5:29:4c:32:e1:29:d0:78:d4:76:c2:f2:82:b9:c2:ed:ff:
         98:b4:79:22:84:63:b2:8e:f5:9b:f0:aa:31:69:96:5f:10:83:
         d6:bf:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:58:03 2024 by rpki-client on console-ams.rpki-client.org