Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File:                     dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier:          V93QbWMpH2qlTg3/Cj+kwfLuhfk9f4VygPaFy/c7M8M=
Subject key identifier:   7F:52:E8:20:26:CC:69:5A:1E:35:1C:7D:AC:3B:9B:B1:F2:F4:12:68
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       019352AD1455A7CFF5644BF3F8D46DA4D2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 07:01:34 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:34 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:34 +0000
Files and hashes:         1: 6BNxWFWyiuFGZF7kihZnRq-4N-0.roa (hash: oJcPrrjHNSFe5dpsDoDLvtdnbjGHbKs7zQNMYyxiRTw=)
                          2: DOfMqXQ35r6v-OEi3WKLLOptQPg.roa (hash: 0voUcs2/9l4q99oS0600tIBEO7OeeiCfTPM1ZJxYIXs=)
                          3: F1Bbyx8xEfEM4eu1iYVgbAFCcV4.roa (hash: 4eoAZC3iQ/cWmmWnwJcptsIFqNDrngcH0+Rf/JsVSeo=)
                          4: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: YlOpSW07h3wHqfGfWIr7zMpdtbg1A5PjVM4prCc8d6Q=)
                          5: gOhU81vXwMtIy2Cn944qwBLQDsI.roa (hash: 3XsQOGjwY63cp9h38kqCpBmkzHTGbu9emOkVBJS3B4k=)
                          6: pHk3bXeFJ6vf0i8riIe1WcLoY4E.roa (hash: PF8bcaYaROdjW3oGzFqTckOkmccdrfUyv6oLH/vPDdw=)
                          7: sJJV0S0xUCDSpZjUD1OwpG9lfSY.roa (hash: zBfqduQQBK5KclxxwSFaQDnJ9K4S3O2PZPoPr7OCtbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:14:55:a7:cf:f5:64:4b:f3:f8:d4:6d:a4:d2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Nov 22 07:01:34 2024 GMT
            Not After : Nov 23 07:01:34 2024 GMT
        Subject: CN=7f52e82026cc695a1e351c7dac3b9bb1f2f41268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:26:73:fa:40:16:56:2c:cb:d0:72:70:f5:
                    98:d1:cc:c6:17:9b:6e:98:7a:ae:e2:8a:e4:83:fb:
                    aa:0d:2b:1b:9e:37:7a:c5:9f:65:36:c5:e6:8a:f5:
                    00:d5:07:91:03:50:7d:0a:29:25:bc:8c:11:9d:8c:
                    6d:88:d9:e1:63:d0:45:fd:1e:19:62:72:c7:8b:27:
                    8b:59:dc:7e:b0:53:5a:c5:65:83:54:22:d5:5c:d5:
                    9b:c5:ec:32:30:82:a0:03:1c:f0:b7:39:d3:e9:86:
                    7e:bb:7a:81:72:aa:cb:15:b6:48:bf:69:e8:87:67:
                    31:f3:f3:c5:2c:26:ae:9e:25:c6:ee:98:33:65:23:
                    d4:07:f8:32:4f:b7:3d:57:e8:11:23:4f:e0:9f:3b:
                    7c:ac:84:fb:62:1b:d5:97:28:e3:29:bb:b9:26:89:
                    93:1b:6e:09:ac:ed:12:9c:cb:27:b4:9a:88:61:f2:
                    79:37:d6:41:77:14:5d:69:68:7d:81:f8:8f:0b:9d:
                    ce:f2:0f:12:c6:17:e6:94:92:00:77:8f:32:ec:59:
                    a3:01:dc:ad:f2:a6:00:a6:22:73:f9:82:61:f0:de:
                    46:6b:c5:52:0a:8f:bc:bf:c7:e8:82:8b:7e:29:c3:
                    d0:3f:2c:b7:e5:fe:b8:8d:77:bb:1b:df:de:c3:10:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:52:E8:20:26:CC:69:5A:1E:35:1C:7D:AC:3B:9B:B1:F2:F4:12:68
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:27:a1:41:cb:d9:8f:2f:46:d3:27:81:d9:70:fe:97:05:32:
         93:fa:1c:35:46:6e:e2:dd:ea:44:35:68:dd:7c:2c:7b:49:b0:
         9d:f2:c3:5c:14:ca:6d:d6:16:15:b6:23:95:ed:61:a7:e7:d9:
         2f:ab:4c:79:e9:15:41:e6:7c:3e:b1:10:eb:cb:1d:67:a7:89:
         b3:53:b7:25:ad:4f:08:88:a7:3e:3d:fe:f4:d3:99:33:25:10:
         4a:0d:ff:11:9b:2b:cd:46:39:53:41:6a:15:87:4f:4a:7c:f5:
         34:08:64:3d:3c:e6:c3:6c:c1:d9:2a:ff:fe:ca:74:94:4b:93:
         3f:15:27:3f:0c:71:ae:24:55:71:f7:59:76:2d:3b:a4:44:76:
         2c:bd:35:d8:6f:33:2d:84:c8:7c:8e:e2:99:d1:83:12:63:d2:
         c3:83:67:df:4b:a1:b1:72:31:1c:7a:19:d3:03:2c:b1:67:4a:
         ae:80:23:1d:a3:5c:56:ad:cd:dc:4c:af:31:ed:2f:5c:93:a3:
         bd:28:a7:de:a4:fc:ae:e5:16:52:dd:31:0a:58:95:75:0c:f2:
         73:82:e0:8e:f5:6a:e3:16:e2:e4:ba:cd:77:54:ae:cd:5c:5b:
         d8:7c:68:c0:95:b4:c0:2c:a6:d2:a8:1f:de:e7:a5:d7:6b:9e:
         3f:1d:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:57 2024 by rpki-client on console-fra.rpki-client.org