Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File:                     g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier:          KvvY5KRgiraDtprcWgA9WZ9vRhakoM7til/WABEndOs=
Subject key identifier:   1A:C5:A1:A5:3D:E5:65:0D:3D:16:E6:89:8B:ED:DB:FA:F7:3A:42:F4
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer:       /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial:       019362FAF34CFA8EC6768EDDCCDDAB8EEECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number:          1379
Signing time:             Mon 25 Nov 2024 11:00:33 +0000
Manifest this update:     Mon 25 Nov 2024 11:00:33 +0000
Manifest next update:     Tue 26 Nov 2024 11:00:33 +0000
Files and hashes:         1: A7JDJepx2uGm64Y3mxLHLibJ25w.roa (hash: K0z+t4+KkAJ814aDkSAlgs1fWxkTnvo7Eg3ez+FkNcM=)
                          2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: r2GL0qR0vPe5N3Hu7KAaxpRa1Ik+BwWmjZ66qX3k040=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:fa:f3:4c:fa:8e:c6:76:8e:dd:cc:dd:ab:8e:ee:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
        Validity
            Not Before: Nov 25 11:00:33 2024 GMT
            Not After : Nov 26 11:00:33 2024 GMT
        Subject: CN=1ac5a1a53de5650d3d16e6898beddbfaf73a42f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:ff:aa:c9:c5:dc:cd:26:b9:c5:fc:24:a9:
                    95:09:5a:2e:1c:49:7f:9e:8c:7b:c4:fe:b2:14:08:
                    76:d6:ac:91:29:bb:a7:c9:0a:41:e5:22:e3:70:85:
                    0e:de:85:73:f2:fd:40:b6:6d:f5:f4:c1:02:77:ff:
                    de:ca:d9:04:40:3c:e1:a9:1a:83:c9:31:8f:a3:03:
                    ef:56:a5:df:19:18:ab:bc:10:e1:4e:e0:4c:3f:d6:
                    97:8d:86:a5:04:d4:2b:16:45:92:92:35:8b:e0:a7:
                    31:51:0f:8d:df:ff:32:b5:b3:7f:db:b0:c7:59:7f:
                    60:ac:51:a2:17:47:86:d9:34:f3:44:39:c0:02:5b:
                    47:89:29:75:82:e3:e0:e0:88:cf:6a:a2:c6:0c:5f:
                    b6:6a:68:ee:e4:f1:af:b3:94:21:36:8a:b1:51:c4:
                    fa:62:a9:91:52:58:e6:25:20:64:f6:4b:31:5f:9a:
                    2d:8e:3e:22:9a:8b:3e:2c:46:bc:69:2f:2e:b3:8c:
                    c8:5e:f4:b2:56:05:37:b9:a1:7a:54:4f:05:91:79:
                    c0:ff:d9:07:78:48:bc:c5:7e:85:fb:05:18:d6:7e:
                    61:8d:5b:25:c5:5e:02:b9:ec:bc:31:04:d2:45:84:
                    6b:ce:04:11:88:aa:53:89:82:7e:5b:07:68:20:63:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C5:A1:A5:3D:E5:65:0D:3D:16:E6:89:8B:ED:DB:FA:F7:3A:42:F4
            X509v3 Authority Key Identifier:
                keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:87:5b:9b:89:c9:06:01:4a:ad:cb:9c:f6:39:ab:d6:2b:61:
         8e:72:d9:55:99:0b:fc:2c:e1:88:7e:37:34:5f:75:b2:ad:89:
         b2:7d:c7:c3:43:d5:fb:b8:72:38:81:40:48:a5:05:7b:55:ec:
         15:42:4b:2a:1a:c7:13:e0:ed:85:bd:f0:60:1c:8f:d0:0a:0a:
         cb:2d:27:0a:e2:bf:2f:3d:12:81:2d:39:91:60:a0:e2:fb:d5:
         04:fa:3a:12:0f:29:3e:60:33:cf:a1:97:19:3d:52:7f:13:37:
         38:cf:6f:34:04:14:97:58:31:fa:83:87:4a:70:05:69:8c:92:
         45:61:32:72:56:dc:d2:e3:ac:2c:2c:26:0c:60:ba:f8:1a:0d:
         8c:2a:0d:dc:b7:8c:10:51:c0:36:7a:88:74:a9:a6:a8:30:7a:
         e7:0c:38:76:69:2d:41:59:45:72:2d:c4:28:7a:d0:36:ad:74:
         e6:63:cc:9d:50:cc:14:b5:50:51:8c:13:ac:ab:66:41:c8:2e:
         c2:88:ff:20:25:ff:01:e9:39:5a:6a:f2:1e:1f:84:e8:3f:7f:
         a5:4d:90:4b:77:72:22:d2:ba:26:0a:a4:a8:a3:f5:ba:3c:e8:
         ce:57:03:92:b6:39:67:dc:66:09:b8:0a:58:fd:e4:65:9f:6e:
         6c:b1:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:25:18 2024 by rpki-client on console-fra.rpki-client.org