Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File:                     icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier:          EDh065riszgyWrcLGZXnNn4PQURi5g9oaa4ICB3ab+I=
Subject key identifier:   8D:A1:A2:FD:DD:61:05:A0:54:DC:72:B0:5C:CD:CC:B0:55:3D:EB:4A
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer:       /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial:       0193572DB454A6D74A21440354EF9FE98618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number:          077E
Signing time:             Sat 23 Nov 2024 04:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:33 +0000
Files and hashes:         1: eUgxX1oDd9WM1EXt1juOiiVjsxo.roa (hash: CBaA4r3eJB9eVYsx+2EzpxmY6AAsU4eeePX3x0Q6U5M=)
                          2: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: +COj7EpDI9l35+mHpO6zUsA2G0ULbvUity+l0Mcn/o4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:b4:54:a6:d7:4a:21:44:03:54:ef:9f:e9:86:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
        Validity
            Not Before: Nov 23 04:00:33 2024 GMT
            Not After : Nov 24 04:00:33 2024 GMT
        Subject: CN=8da1a2fddd6105a054dc72b05ccdccb0553deb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:fc:de:6a:42:56:c0:34:cd:f2:db:c6:79:
                    65:05:70:65:fb:ae:fa:90:a5:84:30:5d:a2:37:cc:
                    32:f8:fd:2b:d8:47:0a:c4:90:fc:9f:fe:c6:b6:54:
                    de:a0:bb:24:be:d7:cd:2e:ef:ae:84:e6:28:73:00:
                    ed:fd:5e:c3:9e:61:3f:9d:66:5c:80:b0:e3:5b:b4:
                    de:1e:ac:c8:31:2b:12:c4:c2:4a:7d:a2:f5:23:b5:
                    03:98:ab:20:4e:c0:7b:dc:fe:5e:40:96:c4:3a:7d:
                    05:7a:01:45:f2:92:b0:f6:9d:c5:55:51:ee:4f:0e:
                    c4:60:6f:38:d5:55:aa:21:bc:66:f9:c4:f9:67:26:
                    20:a0:1f:a9:ea:fb:23:d1:f0:1d:6a:5e:db:9a:03:
                    26:07:f6:dd:68:7b:cb:b8:ea:ea:58:82:92:2d:ac:
                    86:71:f8:12:6e:81:d5:cb:20:55:2c:5b:61:aa:c8:
                    5a:df:c9:c2:c3:3f:5a:48:71:91:f0:0b:9d:bf:0d:
                    d7:44:d8:4d:ab:d2:3b:26:f4:87:59:b7:12:f9:d1:
                    88:94:d7:38:25:c8:16:ef:7e:7c:75:b0:15:01:3e:
                    a7:24:b4:a2:cf:eb:91:c6:3a:f3:11:84:70:f5:f9:
                    97:8a:3e:cc:3b:ce:cc:90:bb:3b:5d:89:7d:70:90:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A1:A2:FD:DD:61:05:A0:54:DC:72:B0:5C:CD:CC:B0:55:3D:EB:4A
            X509v3 Authority Key Identifier:
                keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:05:43:47:24:09:ac:35:08:9d:74:96:5c:cf:7e:6c:cb:
         f3:5c:9c:8d:a6:44:de:81:9d:cd:9f:54:0b:4f:01:d7:17:76:
         ca:17:b5:ed:3f:96:1e:e9:c5:05:cc:75:84:99:21:d3:f0:6f:
         7c:8d:d0:33:bb:f3:16:40:5f:db:2c:0f:bf:81:2a:a7:32:c8:
         31:4c:5a:98:5b:a0:d1:c2:56:b9:fd:a5:13:1a:0b:1b:d5:46:
         63:ab:ab:bc:79:cb:30:b6:9a:a8:d7:83:0c:5c:35:35:6e:03:
         6f:81:61:16:ed:35:59:fb:63:ff:da:23:ee:4b:8e:ee:e1:7f:
         b5:93:48:88:03:f8:d5:f0:c0:59:ff:b8:d7:b8:df:cd:6e:19:
         82:02:17:eb:04:e2:ab:1e:96:97:28:56:66:5b:f6:13:2a:e0:
         38:1a:d1:71:8d:b8:37:52:f7:c8:a9:79:78:4a:f6:6f:50:dd:
         e5:13:52:5a:5f:6e:d6:48:eb:df:86:0c:2c:cb:b9:f6:64:23:
         5f:a5:86:fa:19:91:dd:2f:34:79:ea:4f:52:df:78:c2:3b:32:
         12:f7:c0:4b:d2:80:fa:01:c4:f5:98:35:31:7e:a5:f6:91:a3:
         d6:a3:3b:da:3e:3e:e9:cf:49:66:e4:fb:be:3a:8e:5b:cb:22:
         92:63:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:30 2024 by rpki-client on console-ams.rpki-client.org