Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File:                     RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier:          CeCKXThOwStZeyWd7inh9ZAW4mmV977hhmj8WyAYz9s=
Subject key identifier:   DA:40:84:D7:3E:05:AF:9C:31:6E:29:B1:3D:C8:F8:FB:A9:BE:33:F4
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer:       /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial:       01923813A8BEBB7DEDC89E87BB376523C629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 10:01:05 +0000
Manifest this update:     Sat 28 Sep 2024 10:01:05 +0000
Manifest next update:     Sun 29 Sep 2024 10:01:05 +0000
Files and hashes:         1: ClDcFvfFZsJpfWLbi8FA2h8L3cA.roa (hash: batag3u+T/0kmHLLgyXcLSn64IVlooSb6lcdJ/n6UcQ=)
                          2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: JEIQWe3VbxhEJtbxlU1be9WBCOm6KyQkNGqe1EdItXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:13:a8:be:bb:7d:ed:c8:9e:87:bb:37:65:23:c6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
        Validity
            Not Before: Sep 28 10:01:05 2024 GMT
            Not After : Sep 29 10:01:05 2024 GMT
        Subject: CN=da4084d73e05af9c316e29b13dc8f8fba9be33f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:12:0f:80:7c:f0:a7:ee:ab:87:54:57:46:
                    be:be:78:da:82:23:b5:e4:8c:ff:9b:23:ff:87:2b:
                    94:4e:08:ec:5a:42:6f:f5:29:c6:57:aa:b8:f7:39:
                    2e:14:a6:29:2d:db:da:b4:79:63:f5:43:85:02:d7:
                    58:06:3c:d6:90:2c:22:97:14:88:1f:8d:4c:a3:96:
                    51:ef:12:7b:22:30:4e:b3:3d:c0:30:c6:8f:3d:8f:
                    e4:21:0d:76:0a:40:3f:70:00:89:5d:61:fb:b6:e5:
                    39:59:5f:ba:0e:e8:85:f9:3a:63:8f:e2:8a:a8:66:
                    d0:44:5e:47:2e:88:99:c6:71:ba:c9:21:d9:7a:59:
                    86:f6:ea:c0:bd:7f:f3:f7:f6:2e:cc:5a:28:06:ca:
                    7b:cb:19:a6:c0:a0:c5:27:70:75:54:c3:9a:81:76:
                    8b:0e:57:78:88:c6:df:d0:26:60:1d:7e:4e:35:8b:
                    48:7f:fb:62:ef:3f:69:4e:84:f4:61:88:54:49:b1:
                    56:88:4e:e3:5f:dc:4f:81:e5:87:b1:77:98:33:b4:
                    25:b2:4b:25:d2:85:e8:62:9a:b2:0a:14:7a:47:f5:
                    2a:6b:ab:ac:80:4c:11:b2:7b:ed:40:7f:30:b6:c5:
                    f6:ec:c2:04:8e:1f:c8:fb:a1:28:df:3f:71:97:64:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:40:84:D7:3E:05:AF:9C:31:6E:29:B1:3D:C8:F8:FB:A9:BE:33:F4
            X509v3 Authority Key Identifier:
                keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:12:b8:e3:00:3d:17:33:cb:d1:46:b6:d8:8e:b2:bf:c6:47:
         c7:7a:84:84:6b:60:38:89:14:2e:6f:2c:55:90:a0:77:47:c9:
         91:37:d4:d0:7e:98:0a:55:59:4d:92:60:cd:ba:45:a6:85:7e:
         1d:fc:31:bf:dc:0b:b5:80:5e:15:eb:16:73:a0:65:d9:48:f5:
         90:78:8f:40:3d:bc:89:a8:9e:73:50:36:b8:47:52:8d:ff:04:
         cb:ca:09:a8:a7:06:97:08:dd:20:8c:8f:c5:39:31:51:00:b5:
         4d:70:b0:5d:e4:13:7f:eb:1e:24:01:08:b3:45:ef:02:89:38:
         f5:77:79:17:7b:df:7b:e4:8d:f5:d7:e0:4c:a5:b5:e5:a8:11:
         92:7f:8c:8c:98:10:86:b2:af:40:e6:80:84:ae:24:75:1d:1f:
         b2:d4:29:05:9e:d0:e3:07:13:f7:9c:fe:d1:ba:65:5b:e6:a5:
         50:06:57:31:b2:b4:38:70:08:c1:78:8c:a2:e0:41:af:1b:39:
         eb:62:d6:46:d7:99:ec:1c:aa:7e:40:81:47:17:e9:03:43:a7:
         f0:a5:c1:d8:4a:42:ff:4d:bb:a0:0f:f1:ea:ae:98:4a:ad:77:
         e0:9c:01:21:1c:9f:c6:69:55:8c:82:93:c8:28:3e:71:05:5a:
         45:33:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:42:47 2024 by rpki-client on console-ams.rpki-client.org