Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File:                     rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier:          6gJAqujyAMVVA94VQrSRNCFNz7popYZ/uuFoWp4xQO4=
Subject key identifier:   16:B8:01:63:1F:AC:38:DF:3A:F0:CE:CE:A0:A0:63:26:E1:83:86:1D
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer:       /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial:       01923A021F4CF9CC71ED67ABC6356F0EFA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 19:01:10 +0000
Manifest this update:     Sat 28 Sep 2024 19:01:10 +0000
Manifest next update:     Sun 29 Sep 2024 19:01:10 +0000
Files and hashes:         1: 0VYfZFEB26ikOJ9COwbeRi2GgdY.roa (hash: r8yv0ueMSoDoHyQNoR4OyfnU9xE7+atgKXZqF+i3Bus=)
                          2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: RHn8B90qBTohQfAcy41moEbKcx5YHkzVkjmBI0imoO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:02:1f:4c:f9:cc:71:ed:67:ab:c6:35:6f:0e:fa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
        Validity
            Not Before: Sep 28 19:01:10 2024 GMT
            Not After : Sep 29 19:01:10 2024 GMT
        Subject: CN=16b801631fac38df3af0cecea0a06326e183861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:a3:96:10:50:01:e1:ea:94:19:06:76:8e:
                    1a:ea:9c:1e:43:3a:34:4b:71:f0:8f:85:5b:e8:25:
                    90:3d:51:10:f3:de:17:f6:4a:d9:19:1e:0e:92:4a:
                    64:9a:11:0c:26:2f:9e:fa:3c:48:e8:c0:92:a5:36:
                    61:52:11:26:e6:16:ba:5e:74:a4:b4:bc:2d:f7:3f:
                    40:cf:e2:85:81:15:61:43:c5:61:94:eb:a9:d6:51:
                    eb:6f:7d:a2:2c:08:29:fd:21:68:fc:14:ec:1e:1b:
                    91:9c:69:23:af:cf:22:1c:52:d8:88:68:28:19:f1:
                    9c:b4:5f:84:62:39:5e:9b:2a:71:60:91:b6:af:b7:
                    50:40:63:bd:6a:39:09:ec:17:94:be:ea:20:79:f8:
                    f3:a0:11:77:4d:91:55:34:e6:08:a1:80:c0:24:c9:
                    1b:36:68:08:ff:a3:61:ed:d6:f8:e1:25:a5:20:4a:
                    ad:4d:93:f9:03:40:ae:67:bd:44:ff:9b:f3:03:a0:
                    db:f0:21:bb:4c:2b:ca:c4:a2:08:44:52:e3:5a:c4:
                    a0:50:b1:b8:96:8c:af:0b:c8:43:be:9f:2b:32:60:
                    35:e4:de:81:98:4b:93:9c:d3:27:ae:b6:96:ce:1f:
                    5c:6b:4e:91:65:d8:79:40:4d:86:81:10:c0:c5:1d:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B8:01:63:1F:AC:38:DF:3A:F0:CE:CE:A0:A0:63:26:E1:83:86:1D
            X509v3 Authority Key Identifier:
                keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:4c:1a:3d:03:51:35:de:22:bf:be:8a:fb:05:ed:41:fc:
         8f:5d:04:dd:85:fb:a9:48:57:04:6c:c4:98:fa:93:37:b5:61:
         e7:87:e6:8b:3b:19:ff:8c:f7:22:d5:66:b3:0e:bd:ab:40:86:
         59:f3:cb:a2:a8:ac:5e:f0:c7:e7:63:cd:55:c2:86:83:96:e8:
         06:ad:ac:53:25:a3:66:68:bb:d8:d1:ce:76:2f:95:33:d3:5c:
         ae:66:ba:4f:12:ac:c6:4e:5c:18:6a:c0:ce:9b:ec:47:ab:92:
         20:6f:9e:74:a9:9a:d0:7a:75:16:b2:7d:15:ca:6f:e0:08:24:
         9d:5a:91:4b:2e:7c:a1:a4:a1:57:4c:d3:92:ad:62:6b:0d:d6:
         bb:a6:a7:67:45:28:87:0c:95:40:66:0e:c5:fb:b1:5f:0d:c0:
         06:d1:83:e1:8b:2d:84:2d:a0:19:eb:da:a6:d3:dd:e7:38:71:
         09:66:b7:a1:fe:78:13:de:cb:ba:ec:68:54:0f:dc:36:f9:97:
         a4:03:59:5b:c9:80:a0:9c:64:b7:33:b7:7c:88:ee:f8:c4:63:
         65:b1:4f:ee:8c:0b:8e:9c:58:d8:c8:c9:7f:ea:86:2d:14:c5:
         c1:79:0f:fe:7e:01:0e:c0:fc:0e:ca:02:5a:a7:79:6b:e3:29:
         b2:f9:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:04:47 2024 by rpki-client on console-ams.rpki-client.org