Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          mKNwZW3fLIt2w1sL3M9BTYtk50dCwYF3H8o78kFaC+Q=
Subject key identifier:   2F:BD:25:6F:88:AA:E1:30:C7:75:07:22:31:86:4B:C1:5F:BC:36:41
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       0193568B1083C752FBECDBF9780449625158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          12B8
Signing time:             Sat 23 Nov 2024 01:02:54 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:54 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:54 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: RqUqEJQFzxq6PcjF3pszpptryDuvM7W1PjGst6p4D/I=)
                          2: e3m47PYjE60ySeSwtu-Y3UwnR3o.roa (hash: MemXFXawwwNRcvoCXzJP6PQri7ttHN0vxrZhEOYjJQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:10:83:c7:52:fb:ec:db:f9:78:04:49:62:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Nov 23 01:02:54 2024 GMT
            Not After : Nov 24 01:02:54 2024 GMT
        Subject: CN=2fbd256f88aae130c775072231864bc15fbc3641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:2b:f7:7f:8c:59:2a:c9:65:7d:94:93:35:
                    66:a7:c9:dd:cf:e6:10:76:13:2e:93:8b:e2:c8:5f:
                    aa:c6:6a:85:f1:6a:74:5c:1d:85:68:06:6b:38:fb:
                    9d:0d:16:77:5a:e0:d4:d4:f2:87:1b:f9:a6:cf:ef:
                    89:fe:98:fd:91:ab:7a:67:15:08:c0:72:45:09:3e:
                    98:b9:84:91:83:d4:1c:1c:20:06:7c:96:28:9d:5e:
                    4d:d4:07:6a:9e:c7:d0:9d:a6:f8:7e:7f:77:76:82:
                    11:fd:72:8f:54:86:f5:6c:12:c6:99:5a:a6:82:34:
                    d1:e8:45:4b:84:26:fd:ee:45:ed:81:83:23:ac:8b:
                    31:1b:96:5a:9f:36:1c:6f:3b:54:fe:8d:39:79:32:
                    29:81:fa:3c:66:0c:7d:86:b0:8a:5e:59:87:13:82:
                    3c:f9:c8:0b:80:68:c1:c7:58:c5:86:0f:c3:17:3f:
                    03:64:be:a2:2b:00:3d:ca:0a:88:b1:b5:ea:dc:36:
                    fe:a0:6b:1a:88:33:7a:f2:bb:37:22:03:8b:7a:70:
                    3c:47:0e:46:fb:c2:39:a6:48:74:36:3c:1e:1f:97:
                    b8:46:bb:0d:57:66:58:05:f3:2d:47:02:f7:61:c7:
                    4a:a6:72:c2:c6:e9:66:f9:ee:c5:7d:36:2f:2b:36:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BD:25:6F:88:AA:E1:30:C7:75:07:22:31:86:4B:C1:5F:BC:36:41
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:81:f2:cc:1c:4c:1d:73:6e:d3:64:2d:90:b7:d6:2c:06:
         2f:0a:97:c4:a4:11:6d:24:f0:d7:0f:d9:0e:ec:06:b8:d4:5f:
         41:63:4e:17:f3:75:9a:bb:4a:c4:2b:22:37:78:a3:ba:e2:5b:
         cd:d2:28:18:f2:69:5d:f6:12:81:92:2c:d0:81:c4:41:e8:71:
         71:9c:3a:f2:c3:44:69:5b:b5:28:62:f6:2c:53:cf:58:90:ff:
         e8:6d:0a:2e:5d:81:b3:b8:43:3a:43:aa:0b:86:19:54:53:5d:
         09:c0:ca:65:7b:a8:ad:c1:51:35:b1:2e:77:59:09:a0:96:d3:
         ea:0e:be:f8:3f:2e:b5:34:b1:c0:a2:67:6d:34:42:c1:f5:c5:
         40:1a:01:fc:14:65:8e:84:24:a8:1a:7e:8e:c1:a9:90:91:d2:
         98:d1:7e:ae:19:18:e1:81:0c:2c:31:da:41:82:51:e3:e4:95:
         cc:bf:a8:c0:b2:46:44:b4:6d:25:fe:bd:07:e6:ae:f3:49:1e:
         1a:02:ec:69:2d:f6:36:ce:a1:67:71:89:17:98:56:fd:b6:a9:
         e0:2d:56:85:3b:dd:be:12:6e:6e:7b:8e:2c:04:80:fc:41:ea:
         10:f6:c2:9e:e8:ad:18:d7:91:7a:5c:d1:e1:8a:b4:b1:0a:5a:
         20:d9:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:16 2024 by rpki-client on console-fra.rpki-client.org