Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File:                     zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier:          T5ws84JZIBWzVtB8wYR7PDwNm6rYVjBUt9RT1dz1zmg=
Subject key identifier:   AE:EF:6D:AC:4F:C1:F7:49:7F:31:24:47:33:33:0A:49:F9:1D:CE:66
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer:       /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial:       019365209216EC3B216550544F7662C991C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number:          1085
Signing time:             Mon 25 Nov 2024 21:00:53 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:53 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:53 +0000
Files and hashes:         1: qAunIZ-2m5ax0cRlumS_HtYBpuc.roa (hash: MfIIPschRVeUqN95ntPbo3zOp9BBcAWuN0yAyEu+0vE=)
                          2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: ODpvx6kGFvi0HMHRfhdkgY/NaStE319fAQG8cX8dcjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:92:16:ec:3b:21:65:50:54:4f:76:62:c9:91:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
        Validity
            Not Before: Nov 25 21:00:53 2024 GMT
            Not After : Nov 26 21:00:53 2024 GMT
        Subject: CN=aeef6dac4fc1f7497f31244733330a49f91dce66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:fd:d7:70:c6:58:77:a6:88:2d:b2:dd:f0:
                    e2:72:2d:21:59:36:2b:80:38:22:64:5b:94:a8:b0:
                    f5:ef:6a:f4:97:35:f8:e7:1d:84:d0:67:06:88:7b:
                    78:91:42:80:fa:6c:69:9e:ae:e9:a2:1c:b0:3b:62:
                    a4:e9:a6:b1:ec:22:7a:54:94:27:df:ca:c3:5a:6a:
                    c7:34:74:5d:09:2a:f9:7c:7c:14:d1:71:9a:52:fa:
                    ae:7a:a4:80:3b:49:bc:80:0b:d7:fb:61:25:21:5b:
                    78:03:96:05:77:2c:c3:6f:c6:d5:9e:57:fd:c8:2b:
                    95:87:9b:e6:1d:6c:c8:e3:8d:6a:4a:46:d0:97:35:
                    70:ce:6e:40:93:64:72:4f:e7:f6:65:fa:96:ff:5b:
                    e1:81:be:64:ab:30:11:ff:da:0f:f0:35:06:26:35:
                    34:03:4d:be:39:49:7f:0f:3b:76:20:05:f9:ef:ab:
                    91:bf:b9:74:3e:4a:a5:e3:78:46:13:81:a0:02:bc:
                    42:53:76:e8:e4:6b:a0:31:a0:f3:33:97:29:b4:e6:
                    03:11:e8:65:e3:c4:7a:72:a4:6b:d1:7d:a0:4b:33:
                    33:b0:83:36:56:92:7b:a8:9b:6e:d4:82:cd:6a:d8:
                    48:90:94:68:70:c8:42:ef:fb:06:46:b7:31:5e:84:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EF:6D:AC:4F:C1:F7:49:7F:31:24:47:33:33:0A:49:F9:1D:CE:66
            X509v3 Authority Key Identifier:
                keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:8e:33:c2:c9:d7:c5:5c:bc:a2:e5:1e:c6:9f:61:aa:11:
         4f:2e:a7:86:78:00:78:45:5e:a8:e8:ab:c4:7f:97:cf:c9:11:
         68:43:c2:1a:64:65:1c:46:06:55:9e:0e:d3:74:a4:4c:8e:3d:
         fe:f8:19:45:77:49:1f:69:9a:a6:ab:6f:c4:8d:67:ea:4b:74:
         d3:33:b5:0c:0c:99:81:68:a4:eb:0c:8e:84:1b:17:f3:18:69:
         64:8c:66:45:cb:29:dd:59:46:02:a0:35:27:e6:78:2d:32:5b:
         5b:b4:e3:40:03:44:74:d3:6b:46:8b:6a:54:9e:7e:69:f1:37:
         fa:a5:61:d2:56:bd:33:37:4c:66:b2:2d:90:82:0c:5c:99:b0:
         0d:3c:d2:c5:8a:e9:41:dc:90:73:73:57:31:13:0b:69:00:36:
         7b:af:ac:5b:90:be:f7:df:91:3d:26:11:36:62:d9:87:b2:ff:
         c3:f0:49:1f:86:a3:0c:d9:c4:5d:74:bb:81:0b:ef:e5:d5:e9:
         86:9a:cf:c5:32:52:6b:22:7b:4d:46:27:f7:21:fb:0e:f2:66:
         73:86:3f:b2:4c:7c:58:f8:eb:f0:13:65:33:59:b5:2a:66:ec:
         7b:26:39:de:ef:1d:08:c1:fc:4f:2b:06:d6:d4:8b:72:ff:e1:
         12:7e:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:06:36 2024 by rpki-client on console-ams.rpki-client.org