Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File:                     grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier:          i6wAoDL3McoVUQAvMXz0qlZFVwZZxMxMgpqXriWCJR4=
Subject key identifier:   6D:E2:68:B0:9D:A2:83:11:51:6B:AA:89:8E:BB:45:52:C9:B6:8C:92
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer:       /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial:       019352AE1DC7B64B08BDC24C948088A36B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number:          0F13
Signing time:             Fri 22 Nov 2024 07:02:42 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:42 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:42 +0000
Files and hashes:         1: XT7pxl0XeqWY4EIu323lqOFyajQ.roa (hash: v6CcO680o+dEuo4/HU23Er/feIYHprbSPNAcD2AkyLc=)
                          2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: dPvdd1aOZsA+LCm9pgmRzc7lgAA982SoOsemquMEHu4=)
                          3: lvFlg-aAF79hiJi2PSFm1pSaFOg.roa (hash: HI3BKkvMRqopWScxbHhP7/ZhjWgti31O2RsotkTEyZA=)
                          4: waKCGtoVxeWXpygKFA2lth_JIUA.roa (hash: kN0aaodTVCQiJ7ou23vzQiwJaRQA6JKZbp5I3Ky8YdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:1d:c7:b6:4b:08:bd:c2:4c:94:80:88:a3:6b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
        Validity
            Not Before: Nov 22 07:02:42 2024 GMT
            Not After : Nov 23 07:02:42 2024 GMT
        Subject: CN=6de268b09da28311516baa898ebb4552c9b68c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:ef:ad:ac:af:48:cb:b0:28:b0:b0:6a:4b:
                    f5:be:38:7d:60:b6:f2:44:28:cb:78:68:86:e4:d2:
                    82:36:01:cc:ca:ec:f6:8b:7b:d5:f3:5c:f5:12:01:
                    63:3f:e3:41:8b:6e:1d:68:25:0e:30:8e:2d:fe:76:
                    5b:33:26:c3:5a:b0:69:0c:f0:45:3a:89:45:3d:f2:
                    17:e6:1b:bd:9d:a5:fb:04:d3:2b:a6:28:11:aa:18:
                    d9:8d:b4:13:f8:bd:cf:d2:3c:ae:b7:e2:d3:cd:19:
                    4a:b0:33:f3:94:41:53:a6:75:df:17:48:dd:ff:1f:
                    ad:e7:d9:d9:0f:dd:4a:81:21:02:40:62:7a:55:5f:
                    51:1b:19:5f:2c:06:0a:a6:4a:3c:7c:53:f4:22:78:
                    35:75:67:fd:d5:8e:26:45:6f:96:09:12:5c:88:78:
                    d4:29:41:cc:e0:41:25:cb:f8:de:fd:9d:c5:68:78:
                    c7:85:cb:15:e1:aa:80:1c:0a:ba:38:59:1c:dc:91:
                    b3:e7:c0:ee:af:df:46:94:4f:23:d6:5a:7a:8c:9f:
                    02:7d:6a:01:d7:cf:cf:b0:86:38:ee:8b:0d:50:56:
                    f0:0a:fa:09:1e:58:ff:12:cd:23:22:14:be:4d:65:
                    a8:6f:9c:ba:15:ce:5d:7f:b5:4c:71:e5:2d:d1:90:
                    9e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E2:68:B0:9D:A2:83:11:51:6B:AA:89:8E:BB:45:52:C9:B6:8C:92
            X509v3 Authority Key Identifier:
                keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:de:b8:a7:3b:cc:90:c5:02:a8:87:8a:1f:34:85:4b:4e:75:
         87:ec:c1:0c:43:c9:82:b7:48:13:3e:df:67:70:ff:63:2d:5e:
         22:71:94:10:56:8b:85:20:9a:62:37:eb:88:70:b3:df:a8:f0:
         03:c7:a8:e9:a3:cc:00:bd:6b:0f:2e:19:cf:23:66:9c:ec:5a:
         c6:5e:3b:1c:27:ae:29:6e:e1:0a:ef:a3:be:66:01:fb:d7:4c:
         ac:7e:ae:2f:8d:46:af:4e:ad:ff:2c:c4:90:f3:4b:82:11:c6:
         6a:4f:dc:f8:13:5c:d5:49:5b:2f:56:d8:40:4c:02:2e:86:6e:
         6a:ce:6e:4d:70:2f:cb:3b:1c:2a:00:cc:19:53:01:60:5c:bd:
         0d:76:bb:d1:43:e1:2b:57:bd:ca:65:06:ab:26:e3:eb:08:5a:
         93:3a:bd:f2:c0:d6:b5:ff:60:22:45:76:c0:6c:d7:cd:6a:de:
         ac:de:54:50:82:79:7e:f8:be:0e:9f:65:68:c0:ce:ef:de:e1:
         36:45:17:75:5d:a4:d6:4a:d6:d9:fc:1a:fc:5a:a2:81:30:f8:
         fe:52:36:84:c8:72:dc:36:2f:06:81:9a:64:1e:93:07:6c:0e:
         3a:89:2f:ba:01:f9:cf:80:77:5b:da:7e:65:ba:59:5a:f8:ee:
         ce:2f:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:39 2024 by rpki-client on console-ams.rpki-client.org