Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File:                     _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier:          nFUCDWYK7N9WL20I9Y7gHypQtxwiAGsyYLzPr/aeqkI=
Subject key identifier:   6F:4E:17:23:5E:B7:21:4C:23:F4:D2:2F:F3:78:34:F1:5A:90:52:50
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer:       /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial:       01935840513FFF8E1C52C12F1FC9A72695A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 09:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:30 +0000
Files and hashes:         1: 8nhXvPi8uY3gOJD_Vvi_gkZJ4Yg.roa (hash: 7b4Xy0Ahyt8EU+ybAlfih5FwNzQogFLH8Ro8/B8jI8U=)
                          2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: 1AcFMJXHZYMu8xViGCfI2C9smnSJfRnj0FEMO4yZ5Ug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:51:3f:ff:8e:1c:52:c1:2f:1f:c9:a7:26:95:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
        Validity
            Not Before: Nov 23 09:00:30 2024 GMT
            Not After : Nov 24 09:00:30 2024 GMT
        Subject: CN=6f4e17235eb7214c23f4d22ff37834f15a905250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:7a:01:a9:fd:c7:8b:78:61:b3:03:fa:25:
                    36:d5:30:90:3a:4b:f4:8a:da:32:b8:45:0e:bf:71:
                    22:df:79:f5:e4:ff:93:9d:b3:f0:d6:10:bf:f7:8c:
                    d1:91:92:26:74:d1:60:16:cc:c1:65:ef:bb:36:4d:
                    8a:e6:77:e5:f8:23:ed:c6:c7:b1:8c:7d:98:71:6c:
                    55:5e:ff:1c:65:3f:bd:22:40:7a:7e:b2:29:30:67:
                    69:e7:f9:58:b0:cb:31:f3:3c:d1:bc:2c:d7:e0:2d:
                    c3:d4:22:e2:86:a9:92:10:fa:ae:d5:e1:12:39:26:
                    af:7b:f6:a3:db:8d:1f:57:4d:6e:74:d7:53:06:ff:
                    f9:9b:16:36:4f:21:4d:b4:4d:a5:25:d0:10:19:40:
                    19:ac:fe:28:dd:d8:84:35:63:81:29:f9:c9:a5:a8:
                    98:74:b1:b4:95:07:0e:68:3a:2b:5a:32:8f:0e:9a:
                    9d:3d:75:36:a6:66:15:d0:77:e2:99:67:eb:56:f2:
                    43:f0:8e:22:54:76:07:92:f8:ce:7c:18:80:40:4d:
                    b6:58:53:97:c9:6f:53:6f:63:6e:c4:9b:5f:ae:b1:
                    ed:56:c8:cd:83:fd:a7:d6:f7:d0:93:47:c8:5e:39:
                    43:f7:2e:72:e4:92:20:81:ea:02:3a:1c:10:05:7f:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4E:17:23:5E:B7:21:4C:23:F4:D2:2F:F3:78:34:F1:5A:90:52:50
            X509v3 Authority Key Identifier:
                keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:3a:09:86:c2:2a:19:55:d4:94:b2:e7:0b:e9:6d:a5:8f:
         84:49:59:ea:f0:72:3c:6f:8f:6b:7d:44:b9:24:44:fe:ce:56:
         21:e0:72:f3:b5:a2:ce:fc:55:fb:c2:9f:4b:fc:e6:99:24:20:
         a9:36:b1:23:80:6a:d0:4e:ee:3d:1c:01:5a:71:64:f7:f5:e3:
         7f:72:47:16:70:2f:21:8c:a3:e1:ed:9a:7e:83:7d:f1:59:1b:
         f4:c1:51:46:44:9d:f3:9c:6e:91:b9:44:d3:e1:de:d1:6f:c8:
         a0:16:11:60:0a:44:9e:dc:52:c4:fa:f5:fa:67:0c:78:60:d4:
         5c:1d:fb:2d:9b:1b:32:48:b1:05:d6:ca:c8:d0:d6:24:e0:e6:
         4a:36:86:58:3a:63:30:f4:22:61:99:77:9c:0f:69:a3:24:9b:
         29:cb:6f:a0:bd:d3:5b:b6:53:c1:4a:88:e6:82:2f:83:08:53:
         c9:c8:3d:29:d2:bf:80:8c:fd:52:d5:79:d1:6b:dd:d6:1b:dc:
         33:73:c1:b7:e4:6c:2b:d3:42:8f:1b:26:76:ce:60:41:3d:fb:
         94:5e:7e:cc:94:48:fb:4f:8e:3b:0e:1e:0d:b3:7f:66:20:01:
         b1:f8:08:4f:cb:49:29:44:31:8e:01:a0:23:e4:73:dd:18:7e:
         fa:8a:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:25 2024 by rpki-client on console-fra.rpki-client.org