Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File:                     M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier:          /zPdJTadt5gxf0X1LtW52nBPE9HIJN3dOn3zoW3uEyk=
Subject key identifier:   AD:15:B7:D0:E0:81:92:D6:EE:E8:FA:97:3A:8D:FF:54:26:39:6D:DE
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer:       /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial:       0193553F875FA769D81441973DDE41362313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 19:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:46 +0000
Files and hashes:         1: CcXyKrLKh_ZQZCSRzb3WH-q9pxo.roa (hash: fcU7jODB5y6k+oAovMZ6xMTAOaQ3NM6G5kcqZdQntAA=)
                          2: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: H181zi37MfwrErkxolyogLSoF9gS9+/5Sdhi21kcFkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:87:5f:a7:69:d8:14:41:97:3d:de:41:36:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
        Validity
            Not Before: Nov 22 19:00:46 2024 GMT
            Not After : Nov 23 19:00:46 2024 GMT
        Subject: CN=ad15b7d0e08192d6eee8fa973a8dff5426396dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:7c:9c:dc:d7:71:d0:8b:47:92:5f:04:fd:
                    13:9e:6b:67:d9:8b:63:76:8e:a7:06:c3:91:be:e3:
                    39:a3:8f:fd:33:09:aa:2e:c4:4a:4d:74:0c:f9:f4:
                    51:aa:59:c7:0a:e0:46:ad:66:52:da:d1:59:09:3e:
                    ec:ea:e6:5f:53:54:2a:2b:38:1e:6e:67:e5:38:6a:
                    a9:68:87:ac:c8:d2:a1:e0:c7:b9:8a:91:37:d5:ef:
                    df:a8:e4:c1:b1:d8:ff:5f:f2:02:05:1a:02:8c:8d:
                    ba:77:be:39:c2:4b:02:e9:78:b3:19:97:a6:25:41:
                    bc:27:3c:65:0e:e5:3d:f7:00:dd:18:a1:68:a5:8d:
                    db:a0:9d:25:f2:31:52:95:96:18:54:ee:01:a7:1a:
                    03:14:9e:5b:ef:f0:40:6a:e2:87:48:fe:b3:89:e4:
                    1a:c6:b3:65:ff:0e:8b:74:93:d9:b8:49:8a:69:a4:
                    46:81:4e:62:5a:d7:e2:88:68:0c:b9:dd:51:bc:3a:
                    79:ab:02:bd:6e:ad:08:e4:91:01:31:31:01:45:ad:
                    86:a1:b2:56:4b:b4:75:e4:30:d7:31:4a:86:23:34:
                    1c:7d:55:fc:76:53:2b:e3:55:3d:78:5b:a1:fa:96:
                    7b:db:d3:ff:c6:05:91:93:b0:bd:12:a6:9a:36:31:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:B7:D0:E0:81:92:D6:EE:E8:FA:97:3A:8D:FF:54:26:39:6D:DE
            X509v3 Authority Key Identifier:
                keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:35:0f:37:d5:75:96:76:81:70:0d:33:ae:4f:61:23:0f:43:
         b9:a4:8b:52:57:9c:96:b0:8a:9a:35:3f:b7:97:11:f9:22:c3:
         16:b2:fc:e0:14:0d:be:dd:e8:87:10:f7:a0:4b:f7:1a:04:11:
         97:d8:cd:30:e5:a6:23:5b:0c:8f:20:15:c2:03:47:68:fc:6c:
         fa:53:9e:02:06:63:5e:aa:35:1d:07:1a:69:f9:d9:e4:a2:27:
         05:08:cb:af:66:60:0a:dc:b2:1c:a9:2f:21:07:e6:1f:0f:3f:
         6d:a6:88:a3:51:43:87:c9:1a:04:d1:3b:d0:06:5b:1e:0f:36:
         9e:ef:e5:dc:6e:ce:91:09:cc:6b:83:bb:cb:d5:02:12:42:6b:
         f3:74:d7:6c:b5:d6:bf:e1:8d:77:3d:26:85:5e:b9:1d:a9:ea:
         21:0a:ba:0d:54:42:f8:50:77:df:6f:03:b9:7b:5f:25:dd:1d:
         c2:fb:10:93:58:15:ee:11:b4:74:4c:de:fd:25:e7:7c:b0:e5:
         7a:e7:d9:23:df:b6:d1:f7:9e:ea:b4:5b:06:47:6f:f7:39:a9:
         2c:43:ac:71:20:e2:3f:6f:8e:6c:c9:0e:26:75:1a:f7:30:b1:
         59:08:65:94:18:63:3e:89:65:e9:02:c9:14:ec:4e:e5:10:42:
         b6:ae:2d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:45 2024 by rpki-client on console-fra.rpki-client.org