Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File:                     iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier:          Snlv1fL1XsgujVKaW4sx7uicee2Z8j5NwRf9cHWnHM4=
Subject key identifier:   57:78:BE:81:FD:C2:A6:2B:9E:E0:DA:EB:EF:6B:72:8A:9F:1B:89:B0
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer:       /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial:       01938B1B2653BED9962645712AA1EE35B482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number:          138D
Signing time:             Tue 03 Dec 2024 06:00:32 +0000
Manifest this update:     Tue 03 Dec 2024 06:00:32 +0000
Manifest next update:     Wed 04 Dec 2024 06:00:32 +0000
Files and hashes:         1: 3BqkB4-euZ50OnldZBn-jZL2K5E.roa (hash: uG2ZtIGP2DoQn0Wkmv1RAVmWrb+vpeU7ij+0WgkQjUY=)
                          2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: kTuP566Gu/Ag01eHxEFmxm8BL7yF1cJGL+vWSnvphlQ=)
                          3: sNcCSqQfi33Q7kAmSHEke_K4MqU.roa (hash: 4ZqUnDzQ07RwDbiFJJHyH7RB9ogM1iCrxA9VkvHctIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:1b:26:53:be:d9:96:26:45:71:2a:a1:ee:35:b4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
        Validity
            Not Before: Dec  3 06:00:32 2024 GMT
            Not After : Dec  4 06:00:32 2024 GMT
        Subject: CN=5778be81fdc2a62b9ee0daebef6b728a9f1b89b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:cf:06:c1:82:79:db:c4:a8:65:7c:c7:4d:
                    3e:3f:14:f9:49:78:4d:bf:dd:57:d6:b9:ec:74:ff:
                    cc:16:57:5d:71:91:de:3f:90:e0:e3:c1:dc:6f:b0:
                    83:98:ae:51:88:56:a6:65:e7:79:a2:6a:d8:33:fb:
                    31:07:29:52:fc:66:4e:0b:e5:78:92:c8:5a:c0:87:
                    09:86:58:9a:06:4c:e1:d4:9f:63:7c:70:72:07:b1:
                    db:43:b9:c8:49:17:87:5c:4c:24:ad:2d:94:d1:1f:
                    c2:57:4a:4e:f8:eb:72:c5:d7:cb:0a:7d:4f:b4:dc:
                    a6:78:1e:0a:8c:12:f9:da:9a:df:00:ee:7f:e7:9b:
                    e4:f4:4e:fa:67:5a:e7:bf:31:c1:49:e7:cf:f8:5a:
                    50:77:d1:5f:99:55:6e:ab:62:1c:ba:5c:65:a6:8b:
                    b4:01:5d:e8:8f:16:54:c8:2a:bc:75:8d:34:8a:63:
                    2e:b6:4d:95:4d:04:56:ec:14:7a:70:f2:b9:7b:81:
                    69:23:38:ac:4a:8f:b4:c0:a0:90:af:56:7d:25:74:
                    f8:4e:1e:62:bd:41:0b:88:78:0a:ae:d3:18:4e:70:
                    4f:6f:e8:00:37:e2:4f:a2:c9:b9:e3:9f:62:33:4a:
                    f5:54:c0:cf:ac:fb:75:fd:8e:d0:00:8e:20:d3:bc:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:BE:81:FD:C2:A6:2B:9E:E0:DA:EB:EF:6B:72:8A:9F:1B:89:B0
            X509v3 Authority Key Identifier:
                keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:26:ec:2c:f3:c0:fc:6e:65:39:e2:a8:1a:1a:f5:88:22:
         f7:ba:12:ef:a9:8d:ef:91:83:81:9e:18:8a:78:ec:a9:f5:da:
         c3:8f:73:f4:20:ca:55:f1:95:10:fb:90:d5:25:45:1c:f4:b9:
         9c:f6:b3:31:c7:46:9b:ef:d2:ed:d7:7d:78:71:76:2a:ee:3d:
         eb:3c:7a:dd:93:cc:42:b2:c0:0d:12:76:16:c1:df:ae:94:07:
         c1:c6:5a:f4:68:17:fb:23:64:23:be:b0:63:ba:41:1b:f1:61:
         7b:69:3d:51:9e:dc:61:e6:07:bc:48:16:f5:3a:19:18:52:8f:
         08:22:10:fb:91:e9:80:62:06:2c:ac:7d:6c:10:fb:a7:ec:f6:
         62:2a:fb:7a:ac:19:6c:fa:66:3c:9b:2d:a4:d2:10:5d:86:6c:
         2d:14:9c:cc:a1:08:6e:cc:d1:6a:29:24:64:46:8b:71:d8:2f:
         5a:52:0a:d1:2e:8f:a2:49:21:7b:59:d6:d5:60:ba:4e:79:62:
         97:2f:0e:fd:c1:ce:af:04:58:0c:a6:40:2b:4c:1a:b2:fb:21:
         e0:80:4b:b0:8d:be:39:79:25:64:e6:5f:56:6d:8a:02:b3:d0:
         c3:80:02:88:cf:15:ef:43:70:3d:30:97:ac:c4:ce:08:e3:81:
         b7:84:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:26:21 2024 by rpki-client on console-ams.rpki-client.org