Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File:                     4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier:          BjbRursS5UoPfUxz6cuVaCxjI1naVHYrwtynGabo6u8=
Subject key identifier:   0E:AD:6C:8E:4B:FA:F9:EF:7E:38:CB:15:93:13:C7:14:AB:AA:8E:C1
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer:       /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial:       019356F73AC126BA87CD077448C3132083B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number:          0FA8
Signing time:             Sat 23 Nov 2024 03:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:03 +0000
Files and hashes:         1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: GU1/tLZzwNdTlwXEQAo9qMNPnV0ZIrxsxlpYy0jdHNM=)
                          2: GInx4-Q5UHml9WjZq0iTTgFrsek.roa (hash: 2CxAijRMnPGAF2AHISjE4BzVZPvPqkdX+udUN3OGaM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:3a:c1:26:ba:87:cd:07:74:48:c3:13:20:83:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
        Validity
            Not Before: Nov 23 03:01:03 2024 GMT
            Not After : Nov 24 03:01:03 2024 GMT
        Subject: CN=0ead6c8e4bfaf9ef7e38cb159313c714abaa8ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:a6:4e:dd:0b:4b:8c:81:43:dc:d8:1e:e8:
                    e2:12:95:1f:af:e9:a1:7c:18:fc:c7:6e:fe:9f:57:
                    17:01:2c:39:56:7f:cf:9b:47:bb:cc:83:e3:7c:35:
                    c2:95:12:8c:1b:3e:af:92:4f:48:40:d4:fe:ef:26:
                    ec:28:d6:c3:13:5a:e2:40:67:89:ae:a7:a0:78:ed:
                    70:c0:75:9a:73:58:b2:07:74:ee:45:8d:78:59:31:
                    da:3e:2c:ae:6f:96:06:17:04:72:3f:7b:8d:85:85:
                    75:9a:ae:d7:78:17:8f:b1:be:d9:2f:6b:1e:69:2d:
                    20:fc:a7:83:06:7d:98:15:65:7c:29:25:d1:c2:eb:
                    63:ce:3b:df:fe:72:f9:85:3c:20:10:7f:13:9e:b3:
                    3e:b8:fc:54:56:e6:bc:4f:5c:98:b0:f4:1d:18:58:
                    4e:6d:da:83:87:47:72:e5:eb:e2:25:40:95:54:59:
                    d9:2d:cb:3b:d6:69:d3:c2:3e:10:02:35:91:11:0c:
                    d9:8e:20:a3:bb:a2:c9:23:76:7f:20:27:10:90:77:
                    a2:98:56:c7:f8:9e:ec:5e:76:c3:16:3d:2d:8c:aa:
                    9a:3c:4c:34:50:9a:7d:05:bf:cf:34:69:9b:86:56:
                    32:d7:71:20:22:8e:48:5a:07:92:0a:46:dc:3e:dd:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AD:6C:8E:4B:FA:F9:EF:7E:38:CB:15:93:13:C7:14:AB:AA:8E:C1
            X509v3 Authority Key Identifier:
                keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:52:af:96:5b:d1:d2:d1:f7:c9:80:9a:b3:d5:3a:b7:56:aa:
         37:ba:f2:f9:48:1d:1b:e3:70:69:01:85:2d:0c:29:98:95:2e:
         c7:45:b7:8f:ae:e1:8c:24:df:39:5a:ad:23:84:19:ce:bb:2e:
         61:f6:f6:4e:e7:e8:5f:30:45:0d:be:93:10:9d:25:6c:b6:4e:
         1d:c8:c0:fd:6c:cc:11:d1:5d:5d:78:6a:c6:37:94:09:9f:81:
         b8:14:62:04:74:2a:b1:eb:5e:9d:2a:ed:6f:97:85:64:5b:56:
         b6:04:d5:72:52:56:21:05:0b:08:5b:c7:7e:df:a7:5b:4e:02:
         e5:23:12:95:18:24:08:c3:ba:3c:4b:f8:aa:d0:95:ae:11:a8:
         aa:01:8e:08:3d:fa:ec:4b:87:ab:b8:02:79:c8:ea:ca:d5:e8:
         c4:5e:1e:26:7b:ad:81:7d:0d:5e:b8:34:ce:16:68:62:b2:3c:
         d9:3d:6d:f0:95:cf:68:4c:37:21:c8:a5:45:b6:4f:16:8e:a5:
         b1:14:96:f1:f7:80:73:13:fd:ed:83:ea:75:4f:63:d7:fc:00:
         95:fb:dd:ea:8e:ec:23:65:7a:ec:f8:a5:1b:af:e5:51:e4:93:
         a3:d9:0f:a7:39:9d:bc:cd:75:81:71:ad:09:92:1f:ec:c5:b8:
         3d:d6:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:00 2024 by rpki-client on console-ams.rpki-client.org