Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          0HarjcyaT1WDc3v/oairVlpPDpUs6tJ5QVcpO7Z6spo=
Subject key identifier:   69:44:25:F9:E8:C9:DC:A7:2B:F7:FB:A2:1F:A1:20:8D:F8:91:9D:3D
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       019355E45B596207F0FBCA3A2B856BEA9704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          0101
Signing time:             Fri 22 Nov 2024 22:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:49 +0000
Files and hashes:         1: 8lMzDbqdQwM7xBJ2zHzJLuyHBSA.roa (hash: X6E5ceN4oGs8oykGzSHXzs3vCEmCIRm4T8FL0LCBxfE=)
                          2: HufB5FU1zY61RsGbuaIU_E6oY6o.roa (hash: 50VzaYpgxiREuRQGzL0DS6Ylm9tNZqf1rjKkhbU/OPk=)
                          3: Ij0njqk33184S3YZPsGZATyJ-9U.roa (hash: QPZsef/iNir3j9mlo9VaywKZzSOWhkSiEG2elWhq4rM=)
                          4: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: 7z7xaioe7/PXhWdmvy/MZGdfS2XKBbN22dDG0zb/rrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:5b:59:62:07:f0:fb:ca:3a:2b:85:6b:ea:97:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: Nov 22 22:00:49 2024 GMT
            Not After : Nov 23 22:00:49 2024 GMT
        Subject: CN=694425f9e8c9dca72bf7fba21fa1208df8919d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:96:51:85:10:1f:13:bd:30:83:28:19:41:
                    44:91:ed:3d:df:c8:0f:2e:4e:29:a2:22:69:77:8a:
                    61:6a:09:f3:fa:c1:7c:1c:09:29:49:0e:dd:37:2c:
                    2b:86:59:54:35:d2:63:68:ed:a3:6e:2f:41:24:f9:
                    dd:d3:a7:c2:54:49:a1:e3:70:c6:af:22:08:6e:59:
                    f3:01:61:4b:cf:83:93:97:03:08:bf:c8:3b:8c:97:
                    5c:b0:76:0e:05:ef:86:43:a5:f8:9b:f6:f5:84:2d:
                    e4:a0:6f:c0:52:e6:5e:9d:38:74:f3:69:4f:04:48:
                    8a:df:31:da:78:5c:78:4f:1a:71:27:0c:1a:c8:18:
                    f9:b8:f5:8c:ba:c5:c7:54:fd:2c:6d:74:3f:18:87:
                    0e:90:f4:5d:92:9f:a6:4b:0e:ff:a1:ec:9b:2f:9f:
                    1a:07:58:0a:5b:15:d4:15:50:e2:db:fb:1b:e5:53:
                    7e:d2:79:54:ec:ec:49:7e:f3:c2:50:e3:c4:e8:fd:
                    43:b1:fa:6d:70:02:c1:46:c1:0d:45:f3:42:e9:3a:
                    c2:c0:0a:e5:9a:d5:c6:b9:17:d6:6e:8f:2a:c8:24:
                    31:1a:2f:65:c0:0b:d9:37:63:85:19:92:38:04:02:
                    fe:fa:63:f1:8a:9c:42:3a:fe:62:70:16:c9:fb:21:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:44:25:F9:E8:C9:DC:A7:2B:F7:FB:A2:1F:A1:20:8D:F8:91:9D:3D
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:30:eb:64:7c:d9:a2:bc:f9:6a:e6:fe:81:d9:6a:61:23:3c:
         f9:f3:92:53:be:bf:4a:82:0e:64:1b:ae:ba:6c:dd:04:49:90:
         c8:7b:cb:92:0e:f4:e1:14:e9:13:29:fd:a7:89:0c:56:7b:c7:
         f0:a7:bd:09:c2:4c:3b:18:a9:48:f5:51:d2:4f:76:a7:89:b0:
         52:9c:0a:73:a5:52:fd:d5:f0:52:8f:d8:3f:6a:a7:8d:12:37:
         72:95:0e:5a:a2:7f:4c:ff:6e:6a:02:6e:96:d1:dc:e7:03:14:
         bb:e5:01:25:41:d6:20:f4:65:0b:e3:f6:51:f4:f6:c0:9e:92:
         30:ca:6c:ac:e0:2e:e6:93:3f:f0:0f:38:ee:8b:13:9a:f5:bb:
         b1:0c:f5:cd:28:bc:2f:ee:e9:47:55:2c:b5:cc:85:2e:5b:7a:
         30:cd:c1:d6:b0:81:9f:2e:23:12:90:22:e0:cf:71:ff:c7:1d:
         4b:69:fd:8a:d3:c2:c1:50:0b:51:af:e4:2e:33:d8:d6:0b:3a:
         48:4f:3f:87:8c:e2:5c:7f:ac:a7:09:3f:2b:af:2a:cb:0e:89:
         00:58:49:21:2b:06:07:30:99:7e:47:7a:ca:ca:63:77:70:de:
         25:45:91:82:44:f1:e6:0a:fc:1c:a8:3b:49:d0:1a:02:20:cb:
         8d:39:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:29 2024 by rpki-client on console-ams.rpki-client.org