Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File:                     SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier:          0OAPF5eWC4kb5RD7gJ3IesCw6eHtlp/wBDzZo+5DbYQ=
Subject key identifier:   5D:31:76:7E:50:9A:8C:9C:96:6A:E6:32:72:1C:4A:36:85:88:36:A7
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer:       /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial:       019369DAC1C8F60C20EF4BFEDBF6E88B13C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 19:02:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:44 +0000
Files and hashes:         1: I_cAAHUM2tI_MOJLQt7uMjCP4z4.roa (hash: sVtSDoHRW55Zu8lyG47P/ObKbOVNy0TEb7JwLyMF+88=)
                          2: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: HlLgvw6W976gPStmxEHwFyA9bBGDU85Zxn1kuoVXC8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:c1:c8:f6:0c:20:ef:4b:fe:db:f6:e8:8b:13:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
        Validity
            Not Before: Nov 26 19:02:44 2024 GMT
            Not After : Nov 27 19:02:44 2024 GMT
        Subject: CN=5d31767e509a8c9c966ae632721c4a36858836a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4d:c6:12:f5:84:0b:53:2c:21:ab:51:fa:88:
                    c7:f5:85:b3:e8:fb:a6:02:36:87:b9:95:65:76:84:
                    0e:88:5e:b3:8f:21:f1:7b:45:e4:a6:52:53:ab:43:
                    28:da:bc:ba:9c:46:37:59:3d:88:e9:dd:d5:b9:87:
                    c4:f9:84:02:b9:d5:54:15:8e:64:c5:dd:88:5d:a4:
                    63:5d:38:bd:15:bb:5e:bf:33:bb:28:86:62:c2:dc:
                    64:a7:b7:cd:95:2a:f9:98:7c:85:67:6a:84:6c:17:
                    6f:28:39:61:4d:6e:14:a9:0d:95:b4:4c:32:e5:ee:
                    6f:62:74:ac:a6:9f:a4:4b:30:3a:9b:ff:26:d6:39:
                    7a:15:4a:73:4a:45:3b:7d:87:85:77:d5:5a:b4:1f:
                    f2:19:fe:7e:f4:f0:bf:7d:fd:1a:71:97:2b:80:2c:
                    69:3f:26:b8:b5:dc:e5:11:12:4e:27:3e:ed:32:31:
                    72:6e:98:e2:67:7f:7f:5d:3a:e9:4a:af:44:22:16:
                    e8:65:ed:29:1c:13:43:5c:e6:62:b6:80:d9:84:25:
                    47:7e:52:9b:3e:d2:f6:4b:9e:e8:70:ef:eb:03:2b:
                    16:47:96:4f:de:66:fd:0c:f6:b2:89:5d:17:e0:ac:
                    22:86:d9:a0:11:8e:7f:0b:89:5a:7c:92:c0:49:44:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:31:76:7E:50:9A:8C:9C:96:6A:E6:32:72:1C:4A:36:85:88:36:A7
            X509v3 Authority Key Identifier:
                keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5b:61:1b:2b:b8:cd:a2:ee:06:38:04:3e:39:37:4b:33:6c:
         50:a1:27:1f:da:57:99:eb:e4:75:23:90:98:bf:04:e9:7d:40:
         23:a4:3f:a3:ef:51:33:92:1e:46:f4:37:be:29:95:63:02:00:
         d0:35:f6:40:e3:87:28:41:e9:f0:45:ae:4a:ac:7a:d1:a8:e8:
         b1:7d:f8:6d:47:da:97:13:0d:10:94:a8:b9:04:be:53:e8:fa:
         97:f6:a3:45:91:94:04:e4:1d:b4:63:35:6e:f1:90:80:7d:d3:
         7e:62:c7:47:b0:d0:36:6e:48:d3:f0:8c:ad:d5:80:53:83:c8:
         5a:94:d3:3f:88:61:ac:0f:63:1c:a1:a9:4e:bb:b3:de:72:58:
         41:64:5a:8b:1a:52:c8:63:8a:83:d8:9e:63:13:b3:4e:8f:27:
         27:5f:d7:ee:10:32:7f:b2:87:68:3c:60:88:95:04:72:27:18:
         59:22:15:6d:eb:3b:b5:3a:13:0d:fc:aa:b9:61:e2:6c:83:34:
         cf:f9:cd:37:70:09:8e:6d:6f:5e:23:6f:3b:fe:18:96:2c:b9:
         89:b3:6c:22:63:85:c1:bf:75:40:8e:f5:52:52:8e:64:44:e4:
         ce:30:47:95:20:f8:b9:33:5c:cc:7f:51:2f:78:b9:d2:9d:31:
         5a:1d:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:41 2024 by rpki-client on console-fra.rpki-client.org