Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          BIgloXqBbJZrajb4HeRGv1WHuMxXOPJrZtEmIYQj47A=
Subject key identifier:   A7:82:37:F1:4C:A9:79:BD:4F:8E:61:BF:74:A1:A6:C2:0B:F4:A2:9E
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       0193568AE0ABC590D6587B15C7F6FA9A0034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          07BE
Signing time:             Sat 23 Nov 2024 01:02:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:42 +0000
Files and hashes:         1: 2AtAeT6b0EREVWAz4TyDqgda270.roa (hash: Q/7eaOka/Ws0Q/uF7WZdfce00cpXZCjid8J3VVDnCqA=)
                          2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: Hm2PPcXxHsTfTdZuvhrhGWPYMQJuJ310kwh/fybtq6E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:e0:ab:c5:90:d6:58:7b:15:c7:f6:fa:9a:00:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Nov 23 01:02:42 2024 GMT
            Not After : Nov 24 01:02:42 2024 GMT
        Subject: CN=a78237f14ca979bd4f8e61bf74a1a6c20bf4a29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:c5:42:91:a0:7a:90:e6:93:0e:eb:73:32:
                    e7:fe:80:c2:37:a7:b7:f9:29:46:00:6a:d6:45:f2:
                    86:86:7a:26:d6:80:80:5a:e3:2f:d7:24:3c:4e:61:
                    f6:fb:07:8b:ef:97:36:54:9d:11:89:a2:74:c7:f6:
                    95:08:bd:0a:c3:79:b0:59:74:11:ff:84:86:f9:bc:
                    ef:a8:ee:3e:72:c1:51:db:f5:61:08:c9:5e:b8:28:
                    a1:b8:9d:6b:cb:5f:2f:e1:c3:d8:f8:dc:63:53:ce:
                    fd:2b:8d:7c:ea:a0:c7:5e:07:4b:46:7e:f8:ac:a6:
                    e2:e0:56:b7:a7:8c:b3:4b:77:35:78:db:20:7a:a7:
                    89:01:91:ad:41:fb:da:ed:1a:9f:4a:fa:bf:f5:8e:
                    fc:5c:c7:46:ee:f2:85:7d:41:8f:fb:93:51:de:85:
                    e4:09:79:dd:fc:d4:ae:fb:d0:71:7b:01:15:1c:b0:
                    66:9a:fd:c5:7c:b3:e2:55:34:1a:5d:67:c0:d0:9e:
                    38:a9:6b:a0:0c:b1:4e:71:43:d0:23:fa:0d:e6:7c:
                    14:78:e4:e0:71:c1:6e:76:dd:7d:0c:06:e2:0b:0a:
                    a6:95:43:dc:0d:11:cc:d7:4d:2f:60:e8:e1:65:46:
                    7a:5d:eb:8e:43:ac:3d:48:5d:dd:67:41:b2:f6:e1:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:82:37:F1:4C:A9:79:BD:4F:8E:61:BF:74:A1:A6:C2:0B:F4:A2:9E
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:b1:19:1d:10:7a:fa:ae:55:07:d6:49:41:b1:75:db:f3:
         bb:e0:1b:4b:c3:36:65:b4:59:e9:6f:36:9c:8d:29:17:3b:01:
         b1:b4:a6:ae:16:73:4a:7a:a9:ec:8a:d6:15:f0:af:a3:8c:76:
         67:59:ef:e4:1a:91:56:a0:e7:2e:88:15:4c:ba:91:e2:01:c5:
         77:3f:a8:1a:b8:52:e7:5d:c4:11:35:40:b9:b1:62:78:1f:ee:
         2e:3a:b7:04:26:bd:a5:fc:3d:d3:e9:47:6e:ae:77:f1:d1:48:
         06:08:89:f9:a3:c2:d9:f5:7e:21:09:56:e3:45:f1:1f:46:7a:
         7c:85:4f:b6:b5:65:ff:97:89:a6:e3:26:4b:30:0c:5b:8f:b0:
         95:70:c5:87:4e:b8:23:9c:14:5c:17:90:ee:0a:0a:37:64:c5:
         98:d4:00:7a:82:85:c7:bf:cf:1a:c2:40:a7:07:7a:37:c3:67:
         4b:a5:42:b0:b8:3d:d5:98:75:68:6b:08:3d:bb:db:6e:98:c7:
         d4:c2:74:d2:e1:73:90:02:00:c0:91:d7:6b:b2:e4:ba:7d:4c:
         df:5d:d4:c0:fc:1c:92:7a:13:67:8b:41:aa:c3:e5:e6:90:21:
         a6:cf:43:67:71:ac:48:2b:36:1b:9c:26:15:47:48:9b:ac:e4:
         7e:b0:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:32 2024 by rpki-client on console-ams.rpki-client.org