Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File:                     szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier:          g25csySlZH7sTCOgDK59MXWSEU4fl5INEmYenl1BuxM=
Subject key identifier:   E6:7F:BA:1D:ED:22:24:F9:F9:AA:CB:B0:2F:AC:46:05:34:6D:C0:F6
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer:       /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial:       01936858203C7EE36640212C2A347A302E6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number:          0E77
Signing time:             Tue 26 Nov 2024 12:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 12:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 12:00:26 +0000
Files and hashes:         1: 8MfZ80s9lVSXl_wOG0ks7ccbqVk.roa (hash: oD0Cyqed+CYgNER2PRAuKOWU+IG3acP1Eni8xWOvuRE=)
                          2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: MlrXw8ZPhRqqtzlzwWjoPXbgeS/U62PuNUwHJrOVO9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:58:20:3c:7e:e3:66:40:21:2c:2a:34:7a:30:2e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
        Validity
            Not Before: Nov 26 12:00:26 2024 GMT
            Not After : Nov 27 12:00:26 2024 GMT
        Subject: CN=e67fba1ded2224f9f9aacbb02fac4605346dc0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:8f:0b:2c:72:58:60:d7:7a:41:f8:58:8c:
                    ff:54:9b:b2:00:c3:a7:08:b0:22:c9:20:cf:fc:5c:
                    bc:a9:b6:03:d8:10:af:95:77:e9:c9:96:86:d1:e6:
                    14:94:e4:bd:f4:6b:d1:bb:2c:18:7a:b4:24:e5:4f:
                    27:ef:ba:bb:f8:54:87:64:05:cf:47:4e:6d:af:f7:
                    6d:4a:ce:1e:ce:11:cb:92:0e:07:5d:c4:e0:af:33:
                    28:9f:68:37:77:36:19:46:ae:84:44:75:df:94:57:
                    fb:ce:db:a8:d4:9c:61:c6:21:5e:87:99:c2:f3:51:
                    de:d5:c3:bb:8f:77:85:a3:5c:85:52:dc:a9:2c:31:
                    e0:97:3b:c5:9b:02:cb:a8:70:d0:21:fd:c3:e5:14:
                    24:00:c9:41:cc:a7:3c:c5:d6:db:65:9d:d3:2f:30:
                    40:80:42:02:08:9f:8c:0f:59:f8:ec:7c:81:4f:b0:
                    d5:92:3a:fa:59:c4:c2:28:7c:32:af:7c:ee:c9:03:
                    f4:8c:41:74:22:ee:c8:de:8a:e8:2a:d6:b6:86:f8:
                    ec:c2:ef:f6:b9:0b:3e:e2:e4:0d:3c:4b:30:4c:1c:
                    3a:96:f5:05:3d:73:ad:00:98:c8:af:e8:85:32:f0:
                    a7:c5:34:fd:79:6b:a0:e7:d7:cb:35:4e:3f:08:83:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7F:BA:1D:ED:22:24:F9:F9:AA:CB:B0:2F:AC:46:05:34:6D:C0:F6
            X509v3 Authority Key Identifier:
                keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:c1:f1:9a:04:f9:2e:50:c3:7d:85:72:dd:12:91:42:8c:
         31:77:9b:93:f0:45:f2:84:d9:39:d3:dd:29:04:87:92:68:49:
         72:c5:72:69:66:94:2b:af:94:50:d0:83:fe:18:90:80:51:6a:
         6b:99:db:7e:71:2f:fd:16:bb:47:ea:be:76:f3:ed:33:04:b1:
         f8:ac:a5:d8:7c:ff:d9:7d:17:e6:47:37:c8:de:dc:7c:b9:95:
         36:00:43:f2:79:dd:6b:8d:4d:e3:b2:e0:8e:8c:49:1d:41:53:
         89:63:7f:7c:d6:9c:21:af:f6:15:fd:d1:05:f4:71:2c:7f:86:
         b8:49:6f:88:96:4f:98:46:06:44:12:98:c9:7a:bc:c2:d0:c9:
         69:f9:63:2d:40:52:f6:e8:3c:1b:39:cf:d9:68:de:c9:c1:d7:
         ef:78:a4:67:6a:72:36:8c:e5:b6:da:b2:de:ed:81:94:00:23:
         c0:0e:06:e2:21:4d:19:1a:05:cb:cd:cc:d5:33:d2:c1:2d:0a:
         85:90:bb:f9:b9:08:ce:1a:b6:d9:88:f4:71:5d:a2:57:5b:5f:
         7a:a0:80:09:c8:9f:a9:d4:f2:bb:dd:36:d3:ec:c4:17:fc:01:
         76:5a:9c:4e:22:ab:48:6c:cc:c9:e9:78:7f:3b:64:e7:f7:4f:
         f6:f2:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:35 2024 by rpki-client on console-fra.rpki-client.org