Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File:                     mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier:          jCeyn8zzxAZEL44m8iuMecjDkuyb2Y5vRnTnv8XZ/mQ=
Subject key identifier:   25:51:25:3A:61:78:C9:54:A5:F9:8C:32:31:2B:A3:94:B6:91:7E:71
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer:       /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial:       01935508815417ACAD7EFEA3D12D2EFF4661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number:          1304
Signing time:             Fri 22 Nov 2024 18:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:40 +0000
Files and hashes:         1: lnnH4X1ZrGwPNnvTUd0ZYBX8J0w.roa (hash: VWDtmHEQQ1Hc5ciMRNbCJPVttQLT8LvyNT8hbDDW2VM=)
                          2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: r3jDJHTKwHH5qiM+JucDgjlgA9zmL9qO3bo3Y/zY7PU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:81:54:17:ac:ad:7e:fe:a3:d1:2d:2e:ff:46:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
        Validity
            Not Before: Nov 22 18:00:40 2024 GMT
            Not After : Nov 23 18:00:40 2024 GMT
        Subject: CN=2551253a6178c954a5f98c32312ba394b6917e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:ea:59:41:81:a8:35:86:a0:38:f7:e5:82:
                    4f:b4:b7:c3:5f:ac:da:6c:dd:fd:2c:ba:18:fe:4f:
                    0b:dd:d5:81:ad:c7:26:97:6c:d4:b6:8c:0f:b7:9f:
                    65:0b:4a:93:92:51:df:ef:1d:00:a2:ea:57:66:f8:
                    57:c3:77:e8:f1:5a:32:87:4f:a7:27:b8:79:23:2c:
                    39:8f:dc:cc:de:df:fb:c3:a7:35:69:8a:3a:a9:5c:
                    25:24:49:11:ff:e0:6a:14:12:da:bb:dd:73:e9:72:
                    22:87:a0:03:2a:d8:25:9e:5a:c8:2e:e8:15:72:0e:
                    60:17:70:74:a3:0d:ce:35:7e:2a:47:a0:79:d4:93:
                    76:be:c3:6d:9d:ff:20:ee:81:24:73:63:7f:df:35:
                    6a:b2:f7:3d:10:2b:3d:5b:02:b2:56:da:a5:2d:ee:
                    f0:49:a6:e2:c6:99:b2:cf:b5:db:4e:74:4f:58:63:
                    25:5c:26:a8:c5:d0:9a:b2:73:c8:35:d8:75:8c:76:
                    26:a8:c7:9f:2c:4d:c3:08:46:52:38:80:83:f4:60:
                    11:95:a2:82:dd:e6:a6:1b:5a:cf:a5:68:48:5e:ea:
                    bb:8d:2d:f8:bd:9e:de:46:db:5f:26:20:df:34:66:
                    e0:5a:96:62:fd:fe:8e:31:03:44:be:cf:4e:7b:62:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:25:3A:61:78:C9:54:A5:F9:8C:32:31:2B:A3:94:B6:91:7E:71
            X509v3 Authority Key Identifier:
                keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:51:25:1e:e3:65:9b:5f:33:50:c7:04:b7:50:87:9b:de:b2:
         aa:34:03:89:c7:a0:ff:f9:3c:2e:bc:83:72:81:e5:41:8f:fd:
         45:65:23:88:b3:e2:55:c4:8a:dc:67:b3:c0:ac:86:e7:2d:8e:
         b1:1d:b4:0f:d4:4a:c0:ff:68:4f:e2:fb:a9:22:2f:8d:b5:52:
         06:66:49:2c:1f:09:a3:f7:ed:71:60:3a:5e:9e:a9:54:43:1a:
         72:69:05:4f:aa:22:da:d8:f6:93:6e:6a:6d:81:24:d5:f1:79:
         70:c0:d1:6d:81:a5:7d:20:36:c4:95:ec:64:94:6e:cf:40:07:
         26:18:3e:c6:c7:9f:ed:05:79:3c:e2:de:45:81:1b:d9:80:ec:
         38:10:b9:6a:b2:6f:a4:da:08:d6:d3:b7:82:90:8d:d8:20:aa:
         84:86:52:55:b4:d3:51:de:ee:bb:7a:d0:8c:5e:10:fe:c7:0a:
         cf:b9:6e:44:aa:b4:7a:4f:ee:20:50:d7:71:b5:2a:9a:d0:de:
         8d:5d:91:61:9b:93:7e:53:df:7b:f5:0d:5d:56:11:46:cc:09:
         01:b2:b5:bb:2e:01:d2:ec:25:81:8d:5e:d1:71:e6:42:75:b9:
         a2:be:7b:34:89:9d:6a:42:6c:4b:2d:8e:a2:53:9c:a8:1e:47:
         19:a2:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:55 2024 by rpki-client on console-fra.rpki-client.org