Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          CNK9MsAAVUCw926W8FA4P3sK/Y4BhEwyMiwl8audz6g=
Subject key identifier:   8D:2B:B5:AC:C8:75:96:1D:23:9C:B2:92:02:53:AC:B1:CE:D0:64:66
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       01935576A559E2BB7CB6B4F5FC221C21C205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 20:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:59 +0000
Files and hashes:         1: EvAR1ZaN0u0UxVoN8xCsGnHv544.roa (hash: Eo3Lhr1LDAeenpWh+EiUloKD5RRgUgTxfLoVK5/uagc=)
                          2: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: JEKf/0wdPlcNKIr5mp7BDhGXNsvn4baa+4m6D09KSpQ=)
                          3: uOnjrtiWRyXrVynoQUA4voG9xjU.roa (hash: duL6Byz/19quzcetXyVUHVEN2bi8hDa6Jm1dbuPbaNM=)
                          4: xoi5yuyGFE1ZCG4v_X1EbWswa2E.roa (hash: y6vnhbb4CtlsBRFZ8d+NcVFcWg8F2F4HGMcKewShWe8=)
                          5: ywL5ORbyPmPvGZ2n4Lyod0S4Kjc.roa (hash: pR5TdG5XN3SszlT0OTUuijGoZwESXw4bnQ5SWA8Q3JY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:a5:59:e2:bb:7c:b6:b4:f5:fc:22:1c:21:c2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Nov 22 20:00:59 2024 GMT
            Not After : Nov 23 20:00:59 2024 GMT
        Subject: CN=8d2bb5acc875961d239cb2920253acb1ced06466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:e5:c6:2d:b3:ad:50:f5:5a:3d:3a:55:0f:
                    03:7f:14:97:bc:6c:85:e7:90:f6:44:84:41:33:e8:
                    44:f3:4e:6e:4d:ea:58:3a:34:85:80:05:c1:40:8b:
                    07:88:a8:aa:5f:ec:1f:9c:69:7a:05:e9:3b:99:b9:
                    c0:66:07:f2:87:bd:ed:14:ac:0e:39:83:5f:7e:92:
                    16:43:c8:29:1c:c0:be:69:80:f4:cc:a7:7c:ba:8a:
                    f7:26:06:e1:a8:25:f7:07:a7:37:c1:51:e7:74:d6:
                    40:26:e9:8e:65:7e:af:4c:fe:03:c6:90:97:62:65:
                    fa:4d:e2:e2:ab:3f:0c:23:03:da:b1:6d:60:01:a3:
                    b1:e6:62:f2:19:b7:59:e7:4e:82:22:87:cf:d4:76:
                    79:00:56:b8:b1:60:05:17:e5:18:88:12:ad:8d:9d:
                    f1:ac:c9:28:82:6d:aa:72:35:58:80:d1:c9:7a:e2:
                    56:f6:09:b3:6b:1d:30:a9:81:98:ba:5c:2b:52:8f:
                    24:40:c8:15:0c:97:44:d3:8c:77:89:cb:87:2b:f5:
                    ae:21:2e:a0:2a:7c:26:66:ec:d4:04:32:dd:08:51:
                    ec:01:dd:6d:5f:d2:fc:c2:c3:c4:9e:c3:2f:10:99:
                    28:7b:92:4b:9a:0e:ce:17:2e:99:e7:cd:fd:00:71:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2B:B5:AC:C8:75:96:1D:23:9C:B2:92:02:53:AC:B1:CE:D0:64:66
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:44:73:83:c8:2f:15:48:41:85:52:b3:28:7b:ec:72:87:
         67:74:26:c1:b7:12:4d:09:db:4e:b2:72:5f:e7:c9:15:a1:65:
         15:44:f6:96:8a:56:96:f5:51:66:39:b1:78:35:69:b6:54:63:
         4a:4b:b8:64:10:ab:f5:b7:e2:b1:75:8c:1c:28:40:f8:cd:4a:
         d1:d6:6e:9d:8c:fc:fc:70:47:ee:f1:26:2f:c7:a8:15:67:57:
         7e:e7:e7:e0:35:7c:bc:8b:32:aa:fc:c9:26:ca:06:b4:a9:bc:
         1f:a6:40:9c:65:f4:a9:62:19:3d:45:4d:92:10:1a:86:d9:71:
         b6:9a:2e:c7:14:3e:79:c3:1c:8e:30:52:ba:59:3b:da:fb:3f:
         e1:cf:46:31:cf:d2:be:25:2d:b9:4f:dc:af:61:21:93:f5:65:
         42:d2:47:55:04:5e:8d:b1:67:36:3d:35:d5:99:f7:7b:36:89:
         41:f4:93:cd:7b:4c:d8:3a:6b:41:b9:31:ab:96:5f:dc:28:40:
         e2:37:21:3c:e2:c7:1b:33:e2:3a:f5:d3:18:58:41:ec:4a:5c:
         80:39:12:21:94:18:2c:65:0a:be:5c:f4:e0:b5:53:15:9b:bc:
         95:ea:27:41:59:35:0c:6b:56:5e:e4:14:d9:c9:cb:1b:a4:ca:
         46:ef:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:55:31 2024 by rpki-client on console-ams.rpki-client.org