Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File:                     r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier:          19KCw4QqP8TnpBq5fssi/GdtZjS23J+HsS5ygOaQtOo=
Subject key identifier:   F8:73:2F:1C:6C:88:CD:B4:9E:73:36:3B:D8:08:F8:50:3A:08:AF:06
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer:       /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial:       01936C356C3CEE60FD0D7C660CE71AA147F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number:          1379
Signing time:             Wed 27 Nov 2024 06:01:00 +0000
Manifest this update:     Wed 27 Nov 2024 06:01:00 +0000
Manifest next update:     Thu 28 Nov 2024 06:01:00 +0000
Files and hashes:         1: OartbE9Fd3H2KjvVePbWL31Vu6I.roa (hash: 1mFl+Ydv8fKaCTKvg6Y/Lfvqitkdj+7b1xqc4S9lJb8=)
                          2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: baRhWOPdrSnoOMdepdt3Kn3O7a2vYROifY1ccx8l0os=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:35:6c:3c:ee:60:fd:0d:7c:66:0c:e7:1a:a1:47:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
        Validity
            Not Before: Nov 27 06:01:00 2024 GMT
            Not After : Nov 28 06:01:00 2024 GMT
        Subject: CN=f8732f1c6c88cdb49e73363bd808f8503a08af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:1f:86:08:d3:4f:3b:20:87:52:22:d1:62:
                    d2:08:1d:3b:c8:51:6c:53:15:aa:fb:7e:06:3f:99:
                    8a:49:dd:d6:03:2f:a8:f2:c9:58:2c:fa:7e:7d:09:
                    f8:38:ad:bf:bb:5b:de:b3:b2:ce:65:a8:ef:79:f8:
                    9c:9e:72:14:35:38:10:fb:69:7d:00:bc:be:72:b8:
                    e5:14:c3:85:c2:38:96:63:39:01:58:ed:07:65:ee:
                    ef:01:7e:b4:d2:65:24:f5:6c:8a:42:4f:cf:43:58:
                    d1:bf:19:97:10:90:83:f3:aa:97:89:c2:b1:83:47:
                    71:03:72:09:0f:75:45:86:05:51:c2:5c:89:54:9e:
                    03:7d:86:54:39:52:ff:ce:04:aa:85:16:37:e0:9d:
                    7e:cb:1c:45:fb:2b:11:eb:43:63:a9:e6:f0:8f:69:
                    75:5b:71:9f:c9:d3:89:eb:ea:74:15:7a:bf:81:e0:
                    f8:34:32:ba:90:ae:1a:06:d8:46:e7:51:d7:60:2f:
                    26:68:74:5b:5c:a4:34:41:c4:64:5b:0d:48:06:6b:
                    94:f3:25:ff:11:58:b5:8c:83:c0:ba:4f:3d:e1:2b:
                    2b:1a:d3:af:1c:b2:8a:63:72:65:98:93:07:bb:bc:
                    23:ca:57:5c:1e:8a:a3:5f:1f:7f:49:af:37:ed:70:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:73:2F:1C:6C:88:CD:B4:9E:73:36:3B:D8:08:F8:50:3A:08:AF:06
            X509v3 Authority Key Identifier:
                keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:13:28:70:cd:9a:a0:a9:3b:4b:e2:64:c4:d9:9b:43:30:b1:
         22:ed:1c:59:c6:7d:93:3f:4f:95:de:bd:43:dc:d3:9e:8b:b5:
         84:3a:69:6a:3f:70:94:c6:2e:51:ba:4a:56:65:ae:c3:e7:72:
         17:e3:45:de:2b:a4:e6:90:44:72:67:d0:4f:ea:aa:f7:74:47:
         23:02:88:c8:7b:d7:29:23:9e:b5:3c:92:26:f3:58:72:35:7e:
         05:20:cd:7e:ee:84:a7:dc:1b:25:7e:20:5a:7a:b7:6d:69:a5:
         d1:5a:6f:5c:c0:8c:b2:d5:1d:c5:40:b8:8c:61:1f:04:e7:0e:
         69:18:b3:a3:aa:6a:c6:95:7a:57:81:00:82:f5:c9:51:c7:04:
         09:d1:50:da:87:22:8a:b1:78:8a:bd:62:87:8a:a1:ee:a5:56:
         8d:fb:64:4d:d9:da:de:14:47:65:71:3a:fb:9d:ba:41:c1:a3:
         d0:c2:0a:59:12:ee:d3:e4:d0:bd:c5:2f:f5:95:97:b9:39:27:
         8b:44:bc:6a:3b:c5:8f:3f:ab:13:ad:07:88:c0:45:a0:75:77:
         55:58:28:78:15:1b:8f:3d:ac:fd:98:24:c8:28:0a:75:e7:9e:
         1c:7c:1a:d1:28:6e:06:33:02:c7:a7:8b:2c:15:4b:55:ef:25:
         6d:9a:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:45:04 2024 by rpki-client on console-ams.rpki-client.org