Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File:                     1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier:          lO4KjCYjjNRFBLIzGppU3YxcttaPr/whgGNi6jJ/s00=
Subject key identifier:   B1:34:6A:7E:E5:1B:92:E1:8B:D3:BA:FB:FB:2B:4A:E8:C8:F0:DD:63
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer:       /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial:       019367EAB5CC73A618D6FBA081AB2F0D69EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 10:00:55 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:55 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:55 +0000
Files and hashes:         1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: TXHfOxTOPTHYWtr5pNqtxkpZK4cpmUJdGkmw0f9ARoA=)
                          2: t34KhsLVJfg3ykg9v-4WMqMSjXE.roa (hash: dmvmq0LFpWaE+DzDJHB27zoURld5elKnpVQQT18tPlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:b5:cc:73:a6:18:d6:fb:a0:81:ab:2f:0d:69:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
        Validity
            Not Before: Nov 26 10:00:55 2024 GMT
            Not After : Nov 27 10:00:55 2024 GMT
        Subject: CN=b1346a7ee51b92e18bd3bafbfb2b4ae8c8f0dd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:6b:36:af:9f:9c:ea:8f:ed:97:11:c3:21:
                    b6:f6:13:c1:ca:09:d6:2a:77:9e:18:e5:3b:b3:32:
                    be:18:78:d6:b4:ae:f7:b0:ea:bd:4f:b3:ea:ab:94:
                    a3:3f:09:b5:ec:84:d4:58:a8:10:b7:0d:e7:28:0e:
                    bb:e2:a6:e3:09:14:a1:4d:08:ff:1d:5a:2b:70:fa:
                    91:12:82:f3:b3:48:bc:c9:61:c4:f4:59:05:ba:f6:
                    80:9d:a6:ac:07:72:07:24:e9:62:38:7e:09:ad:a9:
                    62:37:e5:af:bc:55:78:be:50:3b:92:ef:d3:93:47:
                    ea:42:73:7c:d6:a0:d1:9f:2b:a7:ce:14:21:97:ae:
                    a0:cf:67:13:75:ef:e1:8a:66:60:24:74:b6:4c:78:
                    a3:d2:50:f6:d7:ac:54:ea:7a:3c:0e:df:8d:99:6c:
                    0b:47:a7:0d:e0:93:ec:77:44:ac:74:95:df:b4:06:
                    ed:2b:a9:07:b9:09:04:e4:e0:ec:7d:79:70:da:97:
                    ab:1b:b8:17:b9:69:a2:2f:19:cb:0c:6d:25:80:db:
                    59:41:1e:b1:bf:d4:60:6d:43:c6:ed:31:94:94:d5:
                    07:d2:c4:bd:9a:45:6b:d0:9d:37:4c:8b:64:e9:42:
                    23:f7:44:66:48:8c:e8:6c:b2:41:a5:8a:4d:c4:0e:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:34:6A:7E:E5:1B:92:E1:8B:D3:BA:FB:FB:2B:4A:E8:C8:F0:DD:63
            X509v3 Authority Key Identifier:
                keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:a3:83:27:ac:cc:9f:e0:8a:33:59:f3:d7:87:24:e8:03:
         c0:04:b3:5e:01:c4:70:b8:fb:5a:19:81:85:eb:29:be:52:2a:
         35:3c:f4:dc:bc:aa:97:67:cf:f2:76:e7:8f:9c:d7:a9:da:98:
         23:f7:35:cb:e5:0e:1f:51:8f:dd:dc:de:94:4f:0c:d9:83:2e:
         4f:7c:9e:ee:2f:f6:15:3f:95:ba:7d:ce:0e:d9:b2:52:5c:0c:
         8f:80:a3:ca:0a:18:71:88:f3:19:39:1b:85:22:ca:4d:b5:a4:
         14:e4:d2:d7:02:21:41:73:4f:ad:06:3a:18:11:76:38:11:3d:
         8c:fc:4c:2d:bf:59:82:ae:68:86:3e:01:dd:41:b1:e6:08:bd:
         67:d8:bc:79:53:ed:1e:75:5f:44:55:ad:37:ff:3e:5b:fd:0c:
         09:1a:19:bb:f7:22:ef:1e:54:88:58:54:6e:7e:c8:f3:8f:d0:
         f1:0d:05:f7:63:10:f8:92:06:b7:6e:5c:27:ba:e8:69:0a:7e:
         3f:fd:0f:99:3d:da:cd:7c:6b:9e:9f:03:1a:ce:6d:9c:6c:75:
         a9:d6:d4:14:af:c6:e1:69:9c:4c:16:93:2e:39:bb:40:ba:89:
         70:79:d4:90:c1:85:25:5a:5e:d3:0e:67:8f:f0:83:b3:e2:b3:
         8d:0f:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:08 2024 by rpki-client on console-ams.rpki-client.org