Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File:                     o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier:          0/vPA7s5JOkKHLE1YLswFZV630fH240HFTDHVt3pvR0=
Subject key identifier:   CA:41:CA:43:D2:25:17:03:CF:45:98:6D:10:0C:CD:11:0B:65:6F:59
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer:       /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial:       0193523E30E6A9E92D384DC40B343B66D22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number:          098E
Signing time:             Fri 22 Nov 2024 05:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:27 +0000
Files and hashes:         1: 6lpemoQeCgWCN5S1uLn9IdT8BtM.roa (hash: jTVTd4h+TpKoxxRvNxcV2pUMHDbKVQgyHPop3LKCOPk=)
                          2: LA2Kmva-LY3D6ibWlhaPya3flHI.roa (hash: SSazPXd2IzieJT/SCiym+GCiAhWwovYmDmVQBm1kq14=)
                          3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: 4wXH+vnXj6HkObN+ezBcoG086twHp30aKno6TZdIvq4=)
                          4: zOiUb6C0vIjlye0tzdb9SD5C5GA.roa (hash: P0/8K4gax3yz8F+2pW5WFEEmKS3G0Hok+z7e9n1LRJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:30:e6:a9:e9:2d:38:4d:c4:0b:34:3b:66:d2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
        Validity
            Not Before: Nov 22 05:00:27 2024 GMT
            Not After : Nov 23 05:00:27 2024 GMT
        Subject: CN=ca41ca43d2251703cf45986d100ccd110b656f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:57:45:89:00:6f:35:18:35:38:0e:fd:10:
                    35:aa:d9:44:9b:c4:fd:b8:ba:a7:70:e7:20:15:f8:
                    3d:2b:9a:00:0f:84:dc:95:19:d1:06:c3:d7:ed:cc:
                    ff:0e:d8:2d:7e:33:2a:92:0f:f9:4b:37:fc:93:66:
                    a0:38:07:c5:d6:2f:24:98:90:37:55:32:cd:61:fe:
                    7c:48:b8:e3:44:95:e0:dc:64:09:02:4c:33:08:bf:
                    9b:8e:e0:0b:31:c9:1d:bf:64:42:41:43:e9:c7:41:
                    3e:3d:14:94:ff:56:d7:e8:6c:5f:79:ef:a4:3a:0a:
                    68:7e:df:0b:eb:02:c8:f1:1b:8e:86:78:68:5b:8a:
                    87:61:a8:32:24:2f:e0:ff:3c:e4:8e:c1:f4:00:1c:
                    8f:82:ba:13:76:97:69:b4:24:73:e1:0f:9a:a0:98:
                    bf:ef:ba:4a:92:80:19:74:98:42:f2:d3:87:3d:91:
                    28:8b:cd:d0:b3:01:2d:56:3c:4e:ad:a1:85:28:fe:
                    91:7a:57:12:25:4b:83:32:bc:90:2e:0e:c7:d1:80:
                    16:8a:5d:b0:14:a9:6c:1b:92:64:d4:ec:77:cc:aa:
                    1d:cb:fa:3e:5e:6f:b8:6e:21:1d:bc:6c:45:97:c7:
                    22:0d:ab:a1:e2:8b:ee:6a:6e:0d:8d:9f:4f:ff:5b:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:CA:43:D2:25:17:03:CF:45:98:6D:10:0C:CD:11:0B:65:6F:59
            X509v3 Authority Key Identifier:
                keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:33:c0:ac:5b:c3:99:69:7e:b8:df:62:34:9f:71:71:cb:3d:
         a2:39:31:9d:b9:80:bd:3c:36:be:64:72:18:f2:1e:be:5a:7b:
         b2:57:fd:99:4a:91:3c:52:40:d7:2f:d9:53:e8:b0:f3:b2:5f:
         47:94:4d:0d:a5:ec:35:55:20:b8:ce:42:3c:77:c2:a7:15:4f:
         b4:d8:38:ef:4b:99:be:ea:c1:8a:a8:56:07:57:4d:c9:48:d1:
         6a:27:3f:38:0f:3a:7f:6c:c1:a9:2e:05:5a:c7:19:c1:b1:8c:
         59:68:67:e3:cf:6c:3b:11:b5:49:67:12:43:b9:75:74:95:d6:
         cc:a5:5c:d0:e0:25:c3:bf:5b:47:24:18:58:45:4e:bd:de:d6:
         56:01:5a:fe:4f:16:d7:40:1b:6a:bf:81:87:07:fe:c7:00:37:
         24:68:a3:cb:4c:b4:35:37:be:ec:e4:81:2b:0a:b0:43:5a:4c:
         59:24:77:e7:11:7d:aa:e5:19:ef:44:c5:e3:2b:59:e9:60:2a:
         6e:b3:f8:0b:43:81:0d:2b:ee:ae:26:f2:8e:5a:46:b0:7c:8c:
         05:1b:56:e8:1b:1d:60:2e:fa:73:7d:96:7f:18:53:2d:f6:8f:
         5c:85:cf:05:ef:aa:4d:8f:95:63:1b:2d:2c:6b:dc:1c:2f:a9:
         7b:24:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:34:24 2024 by rpki-client on console-ams.rpki-client.org