Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          tvnqRdqn/UXjQN/hODqxcU+f5+LDz7+xAbElPA+z6x8=
Subject key identifier:   A2:3E:3D:86:77:9A:91:AB:28:6E:39:4F:F0:00:0D:05:BB:4D:E0:13
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       019355762EA9D941008EDC314B74F5F74E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 20:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:28 +0000
Files and hashes:         1: G97efQ-ckU_Z0Vv_HY4vwODDV4M.roa (hash: kzkI4aYyBEhQioB02GRf7W2S9rIyhCHbgeSV9eEX3d8=)
                          2: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: p0lJDpGb0PFH92TzBoq0wkGv2MoRQWhhtToPsHF3S2k=)
                          3: y4YGXlLbKMxWX_I-s3PHiiBa83g.roa (hash: k8UAtg7OwL2EmZOZE4yAvkxcemRYvPyGbvPGtJBBWCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:2e:a9:d9:41:00:8e:dc:31:4b:74:f5:f7:4e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Nov 22 20:00:28 2024 GMT
            Not After : Nov 23 20:00:28 2024 GMT
        Subject: CN=a23e3d86779a91ab286e394ff0000d05bb4de013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:7e:95:be:5a:33:43:4d:48:9a:78:d3:48:
                    68:95:6a:64:0d:04:aa:c0:dc:6a:a9:01:8c:07:48:
                    03:64:f8:e4:2b:98:e8:51:4c:e9:14:ea:81:ea:43:
                    ed:f2:bd:37:a1:4b:83:92:e1:8b:6a:ed:e6:35:a3:
                    48:d9:8e:64:3e:8d:4d:37:09:7e:89:5f:47:77:5e:
                    d4:1a:30:1e:d8:a1:80:07:77:71:14:28:ee:43:ad:
                    46:e8:ee:ce:78:b8:ba:c0:89:cc:cb:2f:71:ac:a6:
                    d6:f1:34:2c:6c:2b:49:09:be:51:ee:1a:bf:18:77:
                    73:04:14:4a:fc:68:f7:e2:f2:9a:ba:3e:96:c6:bb:
                    44:b4:39:38:c8:56:56:cb:1b:ce:00:53:88:c4:2e:
                    42:24:f0:0d:bd:79:23:ee:bb:74:71:b2:5d:60:5f:
                    14:13:66:aa:03:9e:c8:25:70:43:e7:5c:32:62:b7:
                    25:e0:8b:6c:94:49:e5:7b:e4:5a:f7:6a:71:7d:56:
                    5b:76:72:a2:82:0d:16:6c:d1:3d:01:cf:ab:51:d1:
                    4a:7c:cc:be:9d:08:8e:94:8e:fc:32:24:40:9a:7a:
                    e3:6d:f0:e5:f5:a5:dc:13:02:b5:70:96:e0:95:d6:
                    42:2f:00:02:af:e2:39:70:18:21:fa:10:e4:23:21:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3E:3D:86:77:9A:91:AB:28:6E:39:4F:F0:00:0D:05:BB:4D:E0:13
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:b7:bd:fb:ee:55:eb:e2:c4:52:e9:bf:4d:3a:cf:21:50:
         63:1d:02:4e:03:d2:bb:94:b5:ee:aa:02:c2:4b:9c:d1:ae:0b:
         62:46:ff:a2:b9:58:35:44:55:e9:d6:bd:c3:89:45:c7:a6:20:
         5b:2c:c5:f6:f1:10:d4:22:4f:3e:43:93:04:6c:35:d6:b9:48:
         98:4b:a5:5c:83:dd:5e:cb:d6:ce:74:3b:d0:22:2c:3a:99:14:
         b1:83:fa:41:14:7b:94:af:3c:14:46:12:4b:c1:74:6c:3e:de:
         c3:c1:52:b9:1a:f3:c7:5c:cf:60:b6:ad:09:0a:1c:6f:65:48:
         ad:9d:b8:9b:37:a7:a7:9b:cf:25:29:d1:d8:ec:2a:a1:cd:12:
         00:2e:36:1d:35:8d:2e:a8:c5:f8:5f:ca:86:63:f7:52:c7:ac:
         81:61:a3:b5:23:e6:21:dc:47:7c:7f:e7:e0:9f:ef:c5:d5:aa:
         1d:f9:4f:a8:1b:45:56:77:64:25:64:a5:12:22:33:26:8c:ad:
         e9:6a:25:fc:3c:33:26:5e:3a:52:b5:2a:8e:95:71:1f:d9:0b:
         94:20:dd:3b:49:67:27:52:ca:c1:32:97:23:a1:14:fe:af:43:
         16:72:5e:09:9a:e0:5f:60:e3:68:ad:27:ee:d0:39:d2:87:53:
         12:75:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:10 2024 by rpki-client on console-fra.rpki-client.org