Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          Sdvk5qxFlbxtFLOk30gA5WxA82H2Co+LVdorEW3srMI=
Subject key identifier:   E2:97:D0:AE:FF:53:A0:3B:04:82:33:9F:0E:EA:95:10:7D:B1:0E:FA
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       019354D162DE3B1A3C9F00E8D22403321E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          04
Signing time:             Fri 22 Nov 2024 17:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:28 +0000
Files and hashes:         1: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: BtwU7FAhssGkf8fpJy9sLWAQYQjjuuD6Q67n09i6cxY=)
                          2: gM6NWVLYEGEkNvuAunx5Tq2hq0g.roa (hash: SH0FkK9u7kJGN/7iWbpq2AHdgOARD1LrK6BfbCPyTlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:62:de:3b:1a:3c:9f:00:e8:d2:24:03:32:1e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Nov 22 17:00:28 2024 GMT
            Not After : Nov 23 17:00:28 2024 GMT
        Subject: CN=e297d0aeff53a03b0482339f0eea95107db10efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:79:4c:61:a5:94:5c:b0:c2:a4:10:08:ca:
                    cb:91:eb:78:05:4f:59:10:f6:46:67:1e:6d:86:6f:
                    65:11:fd:df:12:ec:85:b5:12:8f:ff:0e:52:b8:ec:
                    b5:72:9f:9b:40:b0:dc:81:e7:0b:ad:ce:d0:04:e7:
                    9a:5d:d9:2e:38:16:22:96:8e:c0:f7:b2:92:4c:9e:
                    7c:9a:b5:59:c4:08:ce:72:93:ec:01:a2:41:65:b3:
                    1b:dc:fa:e2:32:82:7f:e8:b4:a3:34:0d:71:c5:b5:
                    1b:3c:a3:01:07:44:49:cf:f5:56:47:8b:0e:9d:56:
                    c6:39:e4:bb:ba:6b:75:70:57:c7:59:f5:3d:73:44:
                    16:9b:3e:ee:64:1c:de:3e:17:bd:e0:ef:d1:73:76:
                    7e:93:1e:74:9a:d1:b1:9f:f4:07:a6:f5:70:27:11:
                    4d:af:fb:08:bf:68:22:20:4f:70:00:33:f7:b0:d9:
                    19:87:73:b0:99:9f:5a:91:1e:fe:50:67:3d:94:34:
                    a5:2f:1e:19:aa:ef:8b:c6:a6:e3:83:38:2a:95:48:
                    bf:8e:84:be:7a:26:d3:f9:3b:72:72:d8:50:86:e8:
                    ca:a6:38:93:aa:a9:4f:4c:e5:eb:64:92:5d:58:8b:
                    5f:9c:8c:2e:e9:65:55:d2:58:81:b3:4e:cf:4a:29:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:97:D0:AE:FF:53:A0:3B:04:82:33:9F:0E:EA:95:10:7D:B1:0E:FA
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:27:17:3a:d7:5c:0a:0c:9f:c6:c3:bf:26:3a:7c:d7:fb:0c:
         44:d0:ae:7d:15:12:49:19:e3:f1:c2:c5:ae:5f:d0:cf:af:1a:
         ca:4d:19:72:6a:3f:7a:13:21:99:6c:97:fb:f0:b5:05:f7:62:
         a9:f6:43:24:b6:07:45:fb:2e:58:1c:c1:2a:5f:16:42:09:54:
         c5:88:04:d9:5d:7f:71:c0:d3:c7:58:57:42:16:8e:10:13:30:
         fe:65:90:19:35:b7:36:6a:72:a0:82:ce:9e:10:1d:df:1a:6b:
         97:b0:10:8e:d3:72:ff:7a:e3:10:cd:30:5f:50:80:47:d0:df:
         1a:8d:2c:4b:7a:f4:81:34:52:49:2c:8c:b9:e7:e0:6a:d9:7e:
         a9:f9:2c:de:32:35:82:21:34:38:2d:89:38:80:ee:67:0a:85:
         fc:13:96:98:9e:ff:dd:fa:c1:23:61:b3:ec:d8:cb:97:95:a6:
         cb:9b:dd:c4:b8:db:56:6b:8b:70:5c:27:d1:2e:93:53:bc:9b:
         e5:b6:44:82:9e:78:0c:fb:47:56:2d:71:bc:cf:af:1e:09:ff:
         84:99:83:0f:71:f1:93:5d:15:41:02:1f:d4:fb:10:b0:0f:73:
         a8:2b:52:39:34:59:16:43:08:a5:21:b8:e8:7e:4e:7f:0c:27:
         27:97:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:47 2024 by rpki-client on console-fra.rpki-client.org