Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File:                     4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier:          076nHnU7I8+dNi3tM8wnTyGjXKKkrh5vEEy8HJ2TKsE=
Subject key identifier:   59:53:BE:7D:EE:3E:77:30:B9:02:85:41:7A:E2:A1:C3:C0:5F:55:96
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer:       /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial:       0193568A4839FC96863F83C4F0DC9B6AC3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:02:02 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:02 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:02 +0000
Files and hashes:         1: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: MEEtcROfUrhYO4y199UPbEbXh3hlKcBolLrrLv3WGJ4=)
                          2: qUZiMdNyOk76_ip9B7WN-KNms3g.roa (hash: Ke040Y08DoVAtO3WShasGL4c7hmYiVrL20wNA3KlWUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:48:39:fc:96:86:3f:83:c4:f0:dc:9b:6a:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
        Validity
            Not Before: Nov 23 01:02:02 2024 GMT
            Not After : Nov 24 01:02:02 2024 GMT
        Subject: CN=5953be7dee3e7730b90285417ae2a1c3c05f5596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:1e:a0:08:09:8f:df:99:29:64:51:1b:ad:
                    27:aa:19:11:79:b3:6e:2b:49:f8:84:f1:be:8c:50:
                    eb:be:6d:9a:05:f8:27:0d:54:e3:03:a9:a5:bb:4e:
                    9a:e0:f4:e8:64:7a:2e:6a:9c:ef:b1:a2:23:d7:b6:
                    02:41:fe:a6:72:b4:8a:41:a5:01:41:4a:a5:f7:e5:
                    5e:81:02:77:e7:f8:ad:91:85:9e:ec:4d:0d:d9:c0:
                    dc:87:9d:05:fd:0d:7a:52:f5:de:9c:13:6e:ab:df:
                    93:33:4b:49:ec:0d:fe:fd:a3:4f:a0:ed:6f:e5:1b:
                    a8:55:36:d9:0a:97:1f:10:95:b2:b2:94:a9:9a:2e:
                    90:ca:93:ea:68:a1:91:e6:98:62:91:fa:55:5d:8f:
                    82:d1:1c:c1:9c:aa:9d:81:01:b6:22:3b:65:4c:6b:
                    40:e0:01:32:e5:f3:66:7b:1f:f0:9b:9c:2f:ef:07:
                    78:22:80:18:f4:b3:3f:cc:b4:1f:9c:e1:93:e6:9c:
                    0c:af:e3:d3:c4:d1:e1:9d:9a:c1:11:36:16:37:8f:
                    d9:49:15:e1:04:db:cd:39:15:47:0f:aa:1f:59:b7:
                    f1:c5:d5:5b:65:19:82:75:b5:54:f5:9c:f6:b6:8e:
                    cf:1c:87:a5:f7:49:22:be:59:a1:2b:9f:be:d8:0a:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:53:BE:7D:EE:3E:77:30:B9:02:85:41:7A:E2:A1:C3:C0:5F:55:96
            X509v3 Authority Key Identifier:
                keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:85:a5:8a:5e:2d:79:7c:8f:03:fc:f8:e2:e1:16:ef:e6:02:
         ec:d1:22:05:ec:35:fa:66:52:a4:d2:c0:82:b3:65:2f:c5:0e:
         4a:d7:b3:85:84:74:9e:5b:3f:ec:10:b5:48:20:75:b7:cb:94:
         12:5e:19:ea:ef:ac:18:e6:b0:39:07:b6:8a:d4:bd:a7:ed:e8:
         c5:2d:f9:89:f0:00:06:7e:2d:10:95:09:97:47:35:6f:cf:8c:
         6a:ca:17:92:3b:ac:44:58:2a:77:0c:ca:26:13:78:37:78:11:
         57:b2:8c:6b:98:8b:84:74:8e:4a:ed:8e:b7:58:2b:dd:5d:8a:
         86:45:03:8a:a7:52:26:e6:a4:d2:ea:eb:f8:b7:86:b8:be:2c:
         73:c0:ba:c2:e4:4a:14:24:09:ae:c4:b1:7e:68:9e:c2:6a:7a:
         c3:43:96:93:85:56:7d:32:57:fa:f8:97:40:b1:fb:af:01:43:
         f2:8b:a8:eb:d4:b5:ff:46:50:81:5e:09:0b:61:35:de:1d:ce:
         6e:98:eb:89:ec:83:7b:78:75:48:aa:d5:4d:4d:14:9c:c9:3d:
         50:9f:05:7b:9f:1f:1b:ba:e5:ec:34:a4:dd:96:6a:e5:c3:b3:
         9b:e3:41:78:89:3a:67:29:c5:de:6c:d1:da:fe:55:f9:27:27:
         04:4e:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:05 2024 by rpki-client on console-ams.rpki-client.org