Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File:                     nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier:          mXQg6ngIohuibWTTuw3K0nF5mqkLWJt+hcK9+2pvD4A=
Subject key identifier:   40:EC:90:81:7C:47:A8:C8:40:E3:38:04:81:25:12:1D:1F:ED:76:E8
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer:       /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial:       0193568A6584C389DF0B016695ADBD2B44C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number:          0862
Signing time:             Sat 23 Nov 2024 01:02:10 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:10 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:10 +0000
Files and hashes:         1: R_KxB2Z07D3Lxp4aSo7eqsDwQ_g.roa (hash: 4tU2ou12JSfTAhelVCgGPV4Ee7/k70e8DYdPF5QRNGg=)
                          2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: 1aTu9j7xiDcINL9HTsC8tLaCgCGUBR5VeWLwuuIOb/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:65:84:c3:89:df:0b:01:66:95:ad:bd:2b:44:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
        Validity
            Not Before: Nov 23 01:02:10 2024 GMT
            Not After : Nov 24 01:02:10 2024 GMT
        Subject: CN=40ec90817c47a8c840e338048125121d1fed76e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:85:4a:d2:fe:f2:c6:e8:13:a4:16:97:72:
                    b3:c6:00:09:3f:95:35:a8:ec:ed:e0:4b:68:18:a0:
                    e0:52:4a:a6:b5:b9:b2:94:e5:56:b8:07:8a:d4:97:
                    f4:a8:df:80:29:da:8b:2c:84:9b:15:70:c8:66:46:
                    c6:62:76:a1:c6:fc:e2:3b:e6:e6:6d:ae:8c:a3:7e:
                    14:d5:1a:bb:c2:1b:40:52:45:27:5e:05:aa:36:71:
                    dd:11:12:2a:2c:4a:52:1b:e6:0c:f4:04:6e:5e:fa:
                    14:46:35:8f:ad:bf:8b:8d:4f:80:b8:d3:3f:c7:4c:
                    49:e5:72:38:cd:15:34:4c:53:2e:f7:f0:03:73:59:
                    d5:8c:d1:0e:a7:f1:d6:e3:5f:32:1c:9d:be:cd:96:
                    a4:6d:32:bf:5c:9a:32:b8:a4:5d:75:08:7e:76:d5:
                    1c:f9:1e:0f:47:b8:98:ac:35:04:e8:82:e8:c6:b8:
                    2f:f9:1a:62:0e:d0:1d:3a:80:7a:8a:b7:ac:4c:9c:
                    a3:61:ad:b2:b4:4d:bb:f8:25:ee:1f:64:34:1a:9b:
                    4d:ff:66:be:f3:42:7d:21:24:43:53:e6:80:01:c7:
                    26:06:d9:0b:cb:3e:3f:19:2e:0d:c1:b7:34:0d:44:
                    11:93:13:75:82:67:77:3b:b8:50:98:23:62:63:b8:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EC:90:81:7C:47:A8:C8:40:E3:38:04:81:25:12:1D:1F:ED:76:E8
            X509v3 Authority Key Identifier:
                keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:03:5c:5a:db:37:b7:ff:0f:46:b9:d6:68:bf:e2:cb:b1:80:
         bc:67:95:ce:e7:52:3c:19:cb:b4:6d:b6:a1:fd:29:be:b7:0f:
         03:13:f5:34:ff:a1:50:fe:7f:f6:b4:05:0e:24:27:2e:06:28:
         44:30:f7:03:01:97:eb:67:2b:06:f5:20:09:44:15:27:b8:f5:
         0a:9a:29:1e:ce:22:ad:d0:01:f2:a7:64:88:c8:7f:ef:77:01:
         4c:cb:97:34:5f:4d:b3:a4:b0:4c:87:65:fe:52:81:78:3c:f6:
         f9:f5:91:92:9b:eb:a3:ea:66:2f:b9:dc:ed:79:f4:81:2c:a8:
         83:51:4d:ed:ed:d2:e3:38:da:26:61:c8:f0:ae:b3:67:52:ab:
         48:fe:64:e5:ee:9f:b3:7c:a4:68:a8:0f:91:92:4a:f0:ba:28:
         67:cf:50:81:2a:b0:c7:b5:12:e2:f6:53:ca:8c:a5:83:67:42:
         41:b3:df:61:40:8d:77:7f:4a:c0:ab:f6:51:4a:fa:f4:7a:ea:
         4b:23:b6:b5:d8:c2:24:dd:df:9a:9f:16:b2:2f:83:51:b3:65:
         85:f0:24:5a:d6:33:f7:02:95:a8:0d:f6:c1:9f:57:13:2f:21:
         cf:97:6d:03:87:fd:00:e9:5b:bd:ce:f1:b9:b4:fd:ef:5c:11:
         d6:ec:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:39 2024 by rpki-client on console-fra.rpki-client.org