Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          OovHsxHNQsAdCEKp7P7qAX0NHE0cS96at2MTyqYasvM=
Subject key identifier:   BD:4B:DC:05:EE:31:2F:46:60:D3:2C:FA:E9:17:1F:FB:15:A0:23:BF
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       019356F6AD8537390F42A0A389D4F672D93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:27 +0000
Files and hashes:         1: 26UVBofgdxEQ3z-mbP4Lm2UwH0Q.roa (hash: bl4MqUepM0ji76guRYfFhQ/ZA3JMR6YMKzI+VZB8nmU=)
                          2: 3LMEW9SoiD4nPF-QjSJbbYp5C7s.roa (hash: Eeq5uCFVHPVXML77iH9+iN2MVS6LNkdAdgb5LQ1LMIk=)
                          3: ny2ogYkY-fwYCU8DV1KM_WJv6Ec.roa (hash: 7Kcw+Rn+RlvVA241bjWXf7uWhacM4dSlAU194THthhA=)
                          4: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: l039YyJ7IvQWS+I9cyiWauTWxJH0o/g2M8VcOrT15Rs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ad:85:37:39:0f:42:a0:a3:89:d4:f6:72:d9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Nov 23 03:00:27 2024 GMT
            Not After : Nov 24 03:00:27 2024 GMT
        Subject: CN=bd4bdc05ee312f4660d32cfae9171ffb15a023bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:f2:34:83:51:1c:1d:59:97:6f:b8:41:2b:
                    b6:20:13:4c:4a:3a:32:36:8c:98:2e:30:f9:8f:1f:
                    fa:71:bf:ee:92:e9:8a:f7:71:22:7a:fe:fb:90:86:
                    ed:7e:07:84:7d:6c:ec:5a:7b:9e:6b:5f:44:80:ab:
                    a6:28:39:4e:18:64:83:91:91:4c:24:f3:5d:3b:c9:
                    44:37:ee:5c:38:98:01:4b:07:5d:ab:81:b1:26:78:
                    99:c2:fe:92:4d:77:cb:ea:8c:c9:bf:a3:ab:47:60:
                    64:44:c9:3d:30:f1:11:ee:0e:dd:07:8d:cf:3d:cf:
                    c1:26:35:aa:20:2d:f9:85:f1:42:9d:d2:c2:8a:91:
                    4a:f2:ec:9b:d0:ab:7d:a7:da:51:f9:3a:e8:bf:cf:
                    61:40:59:56:62:4a:30:96:ee:aa:60:80:02:35:b0:
                    53:86:4c:60:cd:04:ab:b0:d8:94:b2:20:99:91:f8:
                    ad:0a:dc:fd:4f:c4:49:5a:c6:85:92:12:a2:be:04:
                    94:cd:53:b9:8b:eb:c5:7a:b1:77:f6:0e:35:d0:a8:
                    96:10:10:aa:84:89:62:b5:48:ea:b5:e3:69:bc:b8:
                    1f:b7:fa:8e:3e:b7:69:c5:04:80:0a:0b:0f:f8:b1:
                    8c:db:3a:00:c9:78:eb:13:db:27:ad:a8:ec:b0:b4:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:DC:05:EE:31:2F:46:60:D3:2C:FA:E9:17:1F:FB:15:A0:23:BF
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:bd:5a:71:f7:5a:5b:ea:88:a9:ac:fa:a9:34:13:bb:4f:
         ce:4e:89:93:63:6d:c5:37:38:21:12:31:74:53:88:3e:14:c1:
         04:39:34:58:34:41:47:26:64:43:7d:16:10:a5:2d:31:a5:37:
         58:ba:b8:a6:30:6b:c1:83:0d:a2:7f:94:6d:11:db:06:be:60:
         b1:fd:33:01:54:d9:c2:09:33:23:a2:3d:56:f6:63:b6:2f:57:
         d3:09:fa:ad:06:4d:ef:43:f9:2a:f5:97:70:c3:70:d7:b8:5c:
         28:9f:59:12:d8:17:18:e9:55:96:91:bd:bc:c4:6f:f8:62:41:
         7b:7d:85:75:7b:8c:ff:1f:65:82:d6:cd:98:77:39:6d:65:d8:
         7d:ce:34:ef:07:a4:51:a0:bc:8c:71:a9:77:e1:8d:8b:24:79:
         31:88:3c:11:9e:fd:2f:17:20:b6:e9:64:32:1f:eb:85:f7:82:
         a2:ca:46:75:27:3c:13:a4:aa:96:5c:76:03:cb:38:80:6f:52:
         af:d7:49:a9:55:1e:27:42:b2:1e:a4:c0:86:55:37:52:84:09:
         89:46:39:fa:28:2f:6b:35:cb:14:10:7d:07:a9:87:a7:42:b9:
         c2:ff:ec:7e:aa:c3:13:95:9d:c2:7e:11:f3:a4:77:89:ed:20:
         f5:ab:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:43 2024 by rpki-client on console-fra.rpki-client.org