Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          +kotCyOJUXDcCrRx52F79t0xbjQ+lTFzc3Jwwts9xWA=
Subject key identifier:   9E:B5:6B:2B:67:8A:C5:0D:30:2F:EC:1D:02:EE:98:9D:79:DC:BA:80
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       0193576499BFD841AEBDC922DF9E55675FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          1341
Signing time:             Sat 23 Nov 2024 05:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:30 +0000
Files and hashes:         1: BQNe-0iRLM-SGKzI3eTxnPJwAzM.roa (hash: zRnSfbLHDV2kK1s0FW7gq52xtpqTNc6DIGTLUzNLBJQ=)
                          2: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: ZZeIY8g4DViGFR3cxxJKpErYd9g+/m7ZPhByTt+8TuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:99:bf:d8:41:ae:bd:c9:22:df:9e:55:67:5f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Nov 23 05:00:30 2024 GMT
            Not After : Nov 24 05:00:30 2024 GMT
        Subject: CN=9eb56b2b678ac50d302fec1d02ee989d79dcba80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:36:91:d7:05:1c:48:48:70:22:9c:76:ae:
                    50:d4:ae:51:3d:a1:a9:4f:33:7f:23:29:c0:ff:ca:
                    20:bb:05:d5:e3:ed:76:22:10:60:dd:42:74:f9:dc:
                    6d:d6:69:b5:5a:e6:25:23:d1:6a:41:a6:96:a4:2e:
                    75:63:b2:19:23:55:81:ab:fa:32:0f:e7:b0:26:a6:
                    59:15:16:b6:43:82:6c:5c:1b:7e:9c:cf:c6:3d:b5:
                    fe:89:39:37:91:6c:2d:f3:8b:65:1f:8e:71:b1:88:
                    db:ae:ad:b4:57:5f:ce:a2:a3:1b:c0:ff:bf:3d:d9:
                    fd:6b:cb:e3:62:b2:56:c3:07:f3:05:84:56:40:f4:
                    fd:78:86:06:87:a7:0e:7f:32:76:34:b2:8f:03:d2:
                    93:9e:22:1b:d7:a1:2c:99:c1:cc:b6:a0:8c:96:1c:
                    24:56:91:81:36:92:c5:6e:ac:98:93:f0:88:92:04:
                    e2:b0:7a:47:6b:00:e7:dc:99:7b:94:d7:56:79:2a:
                    82:a2:46:39:7e:cc:5f:59:94:b7:11:98:03:c8:e3:
                    c6:f0:39:a8:85:9a:1b:c0:f6:16:30:f7:5f:25:51:
                    4e:9e:57:c9:32:ef:3c:c0:49:bf:45:e2:da:bf:24:
                    72:77:46:e0:00:a0:e9:84:73:33:d6:06:6e:fa:58:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B5:6B:2B:67:8A:C5:0D:30:2F:EC:1D:02:EE:98:9D:79:DC:BA:80
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:8d:33:8e:4a:71:be:e9:12:d6:8f:b0:d2:98:f3:83:d4:
         62:57:cc:6e:b9:c3:ff:2c:4b:ce:fb:76:e4:93:39:73:ec:07:
         81:71:4d:f2:fe:6d:be:da:a4:f0:da:bb:7e:ee:4b:6e:fb:86:
         7c:24:72:63:58:16:6c:93:40:2c:fd:f4:50:dc:b3:5e:84:86:
         40:76:db:be:db:24:bf:e1:50:09:69:11:4d:32:80:40:51:32:
         16:de:eb:6f:2c:29:24:61:c3:ca:6c:b5:d2:1e:61:d8:63:1d:
         18:c6:f8:87:1c:e6:09:4a:3a:a8:d3:5b:d2:46:45:2d:f7:e2:
         3b:92:e4:b4:af:37:e1:b6:3c:63:a6:ac:72:e0:55:48:31:98:
         04:ad:be:8e:a3:90:df:8c:85:93:6e:55:1f:af:66:42:55:d0:
         11:46:2a:60:6e:20:f9:7e:a3:f3:af:2e:36:83:cb:ff:61:6f:
         79:00:f9:6a:c8:2b:b4:a1:b0:eb:02:16:47:5b:f9:3b:e6:e8:
         45:ed:a6:5e:15:e1:55:89:4f:75:7d:36:cf:84:04:48:c5:a5:
         11:9b:8f:c4:88:da:55:37:97:6a:42:ef:b4:48:58:df:11:32:
         2e:8b:de:a8:ab:a9:66:c8:ba:c7:77:30:9d:3f:fd:08:6c:0d:
         2c:91:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:53 2024 by rpki-client on console-ams.rpki-client.org