Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File:                     JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier:          LaXhToTSOywS9MKydi/ijfV9IzzgTUV2Og1rkAVYMvw=
Subject key identifier:   34:BE:B1:0D:82:E2:AD:F1:2A:6E:C4:01:9F:66:C4:5F:9C:27:3E:ED
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer:       /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial:       019352ACECFF3412753B21DBAB9C5759CAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 07:01:24 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:24 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:24 +0000
Files and hashes:         1: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: 1VgdgRNw+tL2JRj5hBtnWnIRXtRRzGPMsSnZsNh45IQ=)
                          2: WcnXDwovy7fb7PcYqhjByfbUgt4.roa (hash: 1zdsf0JcXW0Cn6tHjpo4feHQ7ylVZ+tveZAvPW3w1aQ=)
                          3: wDp0nlix7M8Kst7S3tHs4D_R2i4.roa (hash: l+Gtj5vEk1M5GrGG1HyyFczUPRj3ClNU2QsrZ6fwzgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:ec:ff:34:12:75:3b:21:db:ab:9c:57:59:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
        Validity
            Not Before: Nov 22 07:01:24 2024 GMT
            Not After : Nov 23 07:01:24 2024 GMT
        Subject: CN=34beb10d82e2adf12a6ec4019f66c45f9c273eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:9d:3d:a4:84:a9:6c:e7:6c:05:d9:ef:6c:
                    a2:8d:ba:ad:d0:78:37:71:bb:db:cc:d2:78:ec:1d:
                    ea:b9:ba:6f:01:85:6e:ff:ec:d4:b9:7d:1e:d6:d0:
                    82:b3:ed:27:67:ff:2f:42:37:8c:3a:6b:f6:dc:95:
                    08:56:a0:83:d6:54:fc:3d:4f:9b:cf:12:e7:ba:f4:
                    e9:ae:80:3a:ad:b6:d2:40:f2:23:10:5c:d7:cd:8d:
                    dd:80:ff:12:a0:41:b2:d6:27:39:46:42:aa:e2:52:
                    d7:b5:e3:b3:43:d9:e9:ea:af:2b:f2:35:1a:64:78:
                    34:c6:03:47:02:ee:76:2f:27:d2:32:4f:58:d5:70:
                    94:a6:43:10:e3:90:ab:20:99:59:36:5c:fc:54:6d:
                    fa:b5:da:fd:fd:82:fa:35:0a:e1:80:fe:a9:0b:f2:
                    6c:eb:2b:43:b6:e9:f8:7d:7e:3e:8c:30:cf:f5:5e:
                    ea:68:e9:6f:6e:bd:71:31:e6:93:35:46:3d:d7:3a:
                    1b:1f:92:18:41:28:d7:ea:ae:c2:6d:15:1b:4a:2a:
                    1f:7d:79:ad:65:23:1d:bb:97:7c:f1:83:79:4f:d0:
                    9b:92:f3:cc:1d:47:97:d9:96:a1:73:b7:6c:d7:da:
                    af:a3:22:17:e3:f1:3e:3d:c9:8f:1a:88:a6:24:65:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BE:B1:0D:82:E2:AD:F1:2A:6E:C4:01:9F:66:C4:5F:9C:27:3E:ED
            X509v3 Authority Key Identifier:
                keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:b9:c4:e8:0a:6f:81:a4:ad:c5:ea:9d:6d:75:51:be:1b:
         9c:1e:b4:65:82:cb:48:3a:fd:e8:8d:36:55:ce:84:c7:90:c3:
         04:9d:e6:7e:60:4e:ec:ea:9f:6e:07:67:50:9c:ff:4b:19:0f:
         21:94:62:ac:d6:5b:1e:02:96:2e:16:f0:e4:08:f9:4b:fb:37:
         0c:a0:de:e4:65:7b:c6:d3:3d:94:21:85:21:81:19:3b:4b:36:
         15:18:9e:f3:bd:1b:84:21:cc:06:64:81:c2:ad:1d:bd:10:51:
         1e:21:a8:50:94:6d:4a:fc:da:62:45:d6:19:7d:85:6c:9e:3b:
         04:66:9e:bf:6c:df:03:37:e4:60:3f:3b:9e:b0:35:b8:23:bc:
         50:8b:67:7e:33:02:1a:1b:4d:41:1f:dd:ef:a6:0c:a2:a2:ce:
         91:48:78:49:81:53:4a:84:d4:18:19:07:56:6c:56:58:43:7a:
         c8:f9:66:2b:a0:ec:c0:6d:09:53:c9:e2:aa:ad:e7:91:87:02:
         94:ce:c8:7f:e3:ab:c8:d3:fc:b7:d9:88:f8:41:f5:82:4c:83:
         9f:94:65:11:25:cf:71:70:c9:1d:00:a8:8f:3d:03:5b:1b:8f:
         84:fc:d0:0e:f2:ac:21:2d:7a:2a:67:7f:46:56:2e:fa:44:47:
         12:1a:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:54 2024 by rpki-client on console-fra.rpki-client.org