Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          b348ZilcDl+0DwGN3bcvIveEdUdLHYUXuL9TmIKbjd8=
Subject key identifier:   03:A9:28:90:91:9C:08:22:4E:59:CF:66:01:90:4E:32:B8:26:95:B4
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       019358095445447D55D3829E81E9269432A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 08:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:26 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: eaxlH3zhYqh5sgiys+OXUrzzG4iWJ4xbgvsMweseqss=)
                          2: q6EutOyBbt7VfXuMfCiwbiC30pk.roa (hash: /S+E74XbVu5Jjel2IzrX7MBD6yFHHuYbfxBfKo795Mk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:54:45:44:7d:55:d3:82:9e:81:e9:26:94:32:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: Nov 23 08:00:26 2024 GMT
            Not After : Nov 24 08:00:26 2024 GMT
        Subject: CN=03a92890919c08224e59cf6601904e32b82695b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:cf:d1:5f:6d:61:70:a7:22:dd:84:00:7a:
                    82:90:7d:ce:a4:15:fc:0d:6b:9c:57:12:7d:c9:1b:
                    cb:14:ca:c0:79:9c:08:89:4f:f3:46:ed:44:15:35:
                    e9:c2:22:68:c3:2b:e9:bb:99:1c:d4:38:4c:b4:22:
                    b6:03:13:bf:18:da:a0:ca:9f:76:eb:f5:63:ce:d6:
                    d8:bc:c4:9a:e0:21:b6:38:35:03:0a:92:08:90:7a:
                    33:6c:49:b9:e0:a5:a2:b0:98:c3:7c:74:ec:f0:ab:
                    86:d2:ea:0b:e0:7c:80:dd:a3:0b:e2:23:cd:02:85:
                    9f:a4:25:5e:00:20:e8:9f:67:b1:9e:25:df:f4:28:
                    c8:1d:dd:6b:69:94:a5:3b:a5:45:aa:52:10:cf:50:
                    7a:7e:87:4f:a5:92:d7:23:82:18:d8:09:c2:33:be:
                    82:df:c0:02:25:17:46:0c:1b:0c:0b:c1:bf:38:70:
                    f5:16:e0:d3:1e:17:ce:d9:40:d1:c1:c5:4d:12:3f:
                    20:5a:7e:e5:cf:fd:17:3d:63:68:3c:19:60:64:43:
                    8f:c4:30:c2:d6:9d:56:82:54:04:67:74:15:1b:c6:
                    fe:7b:36:fc:27:a4:d3:fe:21:46:64:ce:b3:45:2a:
                    06:69:ac:46:3c:68:a7:f2:6b:e3:96:ae:d7:1e:61:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:28:90:91:9C:08:22:4E:59:CF:66:01:90:4E:32:B8:26:95:B4
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:50:86:de:d3:4c:b2:48:0c:0f:09:3c:c1:16:f9:e1:84:
         b7:bd:3d:0b:db:68:45:4b:0b:22:ec:96:c2:16:d6:47:53:d4:
         66:62:ea:09:9a:2b:d2:37:cc:3c:33:c0:c9:bf:3c:56:a7:05:
         22:03:3b:69:d2:ba:7b:14:48:29:19:44:63:64:a5:da:33:e7:
         ee:0c:b5:1c:a7:65:fc:5c:13:e5:62:0a:e0:c5:ee:c5:38:4b:
         39:bb:73:75:09:ad:35:60:6c:b9:3a:00:1d:f6:3e:99:42:66:
         e5:cf:a4:a2:35:f8:3c:30:7e:a1:58:37:1a:be:e8:72:96:e2:
         9d:f9:33:de:0b:5c:02:23:98:7c:bc:f4:35:e4:f7:0a:0c:dd:
         17:6b:c5:87:b8:42:91:53:05:70:47:cf:34:4e:e9:40:04:c8:
         c7:b1:14:88:13:bb:5a:cd:87:0d:74:50:fa:9d:0a:dd:54:56:
         0d:de:c7:45:00:80:fa:1c:da:8e:cf:26:c1:ef:0e:b0:40:f2:
         15:07:e2:82:e8:12:a9:c6:83:3e:6b:3d:fd:cf:a7:93:c6:02:
         11:46:89:c6:fd:6b:b7:b6:0e:94:a7:3c:58:2d:16:29:5c:50:
         dc:27:17:b6:eb:ba:d3:11:c4:4a:25:2a:5b:69:14:42:a8:78:
         b1:84:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:10:32 2024 by rpki-client on console-ams.rpki-client.org