Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          2/92RGcX310I+8mbnmOL3atKGWSWtW1Wg7OayZYdfEM=
Subject key identifier:   CD:4E:1D:84:96:00:E7:05:69:2F:64:BB:6C:2B:16:33:F8:0F:7C:6A
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       0193549BEC2A57560DA50C812AC55F36C584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          1304
Signing time:             Fri 22 Nov 2024 16:02:04 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:04 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:04 +0000
Files and hashes:         1: 3H6DwdNsZkPF08rp7cbidy8OIMY.roa (hash: Dn/HEMzLwfdLQPZQ9pC6Jl/7ErMajOiEnr7SDzRLeTk=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: cedwN5mcWszM13JzwIPAuclWYYMRa1rq7tcymMwGJ6I=)
                          3: bH7QHxgfVXkNYynYRNLGBW8UKvI.roa (hash: 7H8dqxwHsMwSAZchyvStlp+rBxKaSWauK6KVj//4Geg=)
                          4: j-g4oaQrf8HoLEBtDAq3H6O9_aM.roa (hash: wvYam7dr2/0ZU9xTHH4mCDX7xDfq/N9xfBjIYgx1aWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:ec:2a:57:56:0d:a5:0c:81:2a:c5:5f:36:c5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: Nov 22 16:02:04 2024 GMT
            Not After : Nov 23 16:02:04 2024 GMT
        Subject: CN=cd4e1d849600e705692f64bb6c2b1633f80f7c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:1c:86:38:7e:d9:fe:12:60:76:36:16:e0:
                    b1:62:32:86:b7:52:df:16:b1:8b:3f:55:55:06:13:
                    17:4f:cb:92:ab:b3:c9:11:88:fe:7f:eb:a5:5e:a8:
                    2a:9b:1f:1b:ee:cd:01:df:0c:b2:c1:c0:83:95:65:
                    47:9f:9d:05:d8:68:b2:21:0e:b9:fe:15:b8:41:5e:
                    1c:b1:d2:e5:a4:dc:cc:f8:1d:f8:84:e9:1b:89:69:
                    97:f1:98:fb:00:2f:16:38:90:ec:53:af:1a:5d:d2:
                    7a:86:be:e1:05:94:80:15:20:c2:83:c6:f2:50:4d:
                    9e:af:a4:35:25:9d:e8:0f:14:a1:f5:9d:cc:54:2b:
                    07:87:93:21:78:5b:4b:b3:8d:be:ff:23:bd:1a:2c:
                    fc:eb:56:22:41:a6:d8:e5:84:1a:43:1f:98:42:05:
                    17:30:e2:ff:87:fa:db:11:22:e3:2f:dd:92:a2:bf:
                    57:8b:b0:8f:75:0e:f6:49:7e:c9:40:4d:97:bb:7e:
                    15:d8:5e:1d:29:98:78:59:74:22:2a:f9:dd:45:f9:
                    08:72:73:33:a1:67:a7:4c:7c:b1:61:b0:ea:70:5c:
                    c2:72:6d:3f:07:1b:a0:2c:05:b3:7e:3e:08:55:ce:
                    52:de:df:7a:e3:d9:30:9a:5c:1a:c5:a9:2e:2a:29:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:1D:84:96:00:E7:05:69:2F:64:BB:6C:2B:16:33:F8:0F:7C:6A
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:bc:c5:e1:6a:42:23:66:f1:13:92:3b:fe:99:84:cc:de:
         14:49:aa:21:08:a0:b0:90:44:0d:9a:42:61:9c:8d:22:d0:41:
         02:ad:53:d4:5c:52:a4:b0:1b:c7:ef:ba:5c:60:46:52:0c:60:
         a5:b3:6c:42:83:3d:86:f2:02:d7:42:c6:20:9d:6d:b7:a4:d8:
         fb:ee:76:52:3a:9a:42:9e:1b:57:fa:76:0a:5e:5a:70:8d:78:
         92:a3:ad:3b:4c:26:db:e8:7e:96:f2:7d:bc:4b:f6:d7:d4:5d:
         a2:65:69:6e:b8:ed:32:1d:ea:38:99:eb:82:02:79:d0:83:da:
         30:bb:91:e8:2a:eb:7d:5c:6b:60:c3:78:a2:f8:b5:5e:3f:b3:
         9f:f5:1c:b4:a0:b4:ab:42:e5:6d:60:2c:af:82:a1:5a:56:a0:
         ac:4e:d7:b4:df:75:dd:df:da:de:ae:d2:b8:64:65:f2:47:24:
         b0:3d:70:6e:18:3f:86:ce:99:dc:eb:6d:74:5b:27:72:09:f0:
         ca:49:16:7f:c6:98:21:a4:3b:d7:ad:cf:a8:dd:28:d2:e2:31:
         b2:3d:ee:4a:fd:3f:0b:b1:db:05:51:01:03:45:fa:19:d0:70:
         1b:e3:f5:cd:47:84:8e:a3:71:1d:fd:ea:05:c6:59:50:a3:e0:
         d5:56:ca:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:02 2024 by rpki-client on console-fra.rpki-client.org