Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File:                     zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier:          FhFecWw3mz7R66jTUmHiwQTLzHAGyg/AUaBadPjWyUo=
Subject key identifier:   A3:5D:84:5F:D2:44:C2:3B:29:71:30:30:05:1F:5D:95:F9:87:4D:57
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer:       /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial:       019369D932A9601341819CC16BB816B41F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number:          0E3A
Signing time:             Tue 26 Nov 2024 19:01:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:02 +0000
Files and hashes:         1: AvAKbIT21TNPc4Dr3f_Y4XngQkQ.roa (hash: gC1drCENRn2lcvhz7CA+IauI4fLdy1Bf65OSsRnicL0=)
                          2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: hFzOvZWsPioABLBINKCdpSO51n30NesI7aukWgaxVb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:32:a9:60:13:41:81:9c:c1:6b:b8:16:b4:1f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
        Validity
            Not Before: Nov 26 19:01:02 2024 GMT
            Not After : Nov 27 19:01:02 2024 GMT
        Subject: CN=a35d845fd244c23b29713030051f5d95f9874d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:fe:1b:73:e5:6b:28:5c:5b:d2:1e:47:6d:
                    25:9a:2a:60:7c:a9:99:34:33:d6:78:58:de:f2:f6:
                    30:ab:49:6e:13:12:2b:ac:d7:d1:25:2b:9f:7b:21:
                    3a:72:a2:73:26:eb:d3:9b:28:dc:d2:1c:f6:cc:eb:
                    c0:cf:d6:fe:0d:9d:d9:8b:1a:8a:de:31:ee:0a:de:
                    7d:4f:7c:21:4c:41:af:0d:ee:a6:43:39:13:d4:ac:
                    15:97:23:aa:57:d8:94:94:d5:c2:33:cf:93:95:d8:
                    eb:4d:aa:14:f0:cc:51:51:24:aa:8d:ea:83:f1:41:
                    ce:a6:89:a5:4e:a5:d8:74:a5:95:d6:c0:ff:9d:91:
                    82:90:44:7a:6c:d5:be:36:3a:28:3b:85:1e:4e:9d:
                    5e:49:65:ee:0c:9d:1b:fb:88:b2:29:a7:e5:6d:9e:
                    2b:a6:f5:88:38:81:00:7b:94:93:22:54:df:6a:e5:
                    45:7f:a4:a6:28:44:85:ab:69:1c:b3:cb:a0:75:45:
                    40:5f:d5:e7:6e:20:4e:5c:76:d1:6d:76:b4:0b:bd:
                    7a:6c:a3:21:bf:f7:68:b0:7b:a2:65:61:7c:e9:e4:
                    12:70:dc:96:43:28:c6:84:8e:0f:f3:1b:92:2b:fc:
                    19:8e:4a:bf:77:41:c3:a0:55:ca:f2:84:ff:78:ca:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5D:84:5F:D2:44:C2:3B:29:71:30:30:05:1F:5D:95:F9:87:4D:57
            X509v3 Authority Key Identifier:
                keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:be:9c:51:c4:71:a7:d2:84:fa:97:a4:81:20:ea:18:b7:b3:
         e6:bf:dd:ff:4f:18:9d:b9:b6:90:6c:55:4a:15:46:39:4c:bd:
         cb:b6:c1:b8:58:89:37:4c:cf:ec:a5:77:af:62:86:ef:32:f3:
         e9:96:6e:fe:ce:63:ea:5d:ea:be:14:95:21:5b:26:d9:e1:6f:
         4a:09:aa:f4:1a:62:79:43:ff:64:d5:e7:69:f7:39:12:db:63:
         80:68:b6:2e:2a:67:f4:aa:26:b7:31:33:4a:5c:23:db:00:a5:
         77:4c:1f:22:75:64:8e:55:72:ea:5f:58:4a:3d:f4:36:20:f3:
         33:3d:78:8b:65:ce:07:d8:0b:44:90:63:64:58:82:de:31:92:
         ec:75:ff:c7:20:f2:42:c5:35:ff:3b:cd:da:c7:3b:d2:91:51:
         94:1e:01:a8:27:77:8a:b6:7e:bc:22:65:c6:63:19:34:1a:e6:
         b9:e4:53:36:c5:24:7a:48:b7:b1:70:ef:42:75:67:b8:40:4b:
         54:ab:94:92:35:05:ff:d6:fa:fb:9d:49:53:af:23:70:e0:77:
         46:29:d9:ae:b1:4d:ab:27:4e:05:3c:d1:99:ee:5c:1e:aa:5b:
         68:dc:85:1e:a1:bb:37:35:23:bf:bb:f2:69:63:43:25:21:21:
         6e:c3:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:16 2024 by rpki-client on console-ams.rpki-client.org