Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          Qcb5/9vKhITi9jYTSIVfMmxXrOiCPZuvZefx0KTYzQY=
Subject key identifier:   8F:7D:34:1D:C5:8E:93:E9:9E:9B:24:87:74:61:FA:5D:E0:2D:C9:C2
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       019356897F0366ED65B6E0533863E7CB0DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:11 +0000
Files and hashes:         1: 1-4NIwwTC2DEh8yEiMX9bnL-8nJU.roa (hash: 3glw2dtSa2BjZYFu35uXiMtz4kDsHCBiN2c4rmVFne4=)
                          2: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: z5XcDsPOjRPedG0ukCnJCuNs0PIo6C/06nqIDhRR7TQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:7f:03:66:ed:65:b6:e0:53:38:63:e7:cb:0d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: Nov 23 01:01:11 2024 GMT
            Not After : Nov 24 01:01:11 2024 GMT
        Subject: CN=8f7d341dc58e93e99e9b24877461fa5de02dc9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d8:3c:85:31:50:29:bd:27:f1:ce:a0:eb:7c:
                    8f:cc:a4:96:c5:1f:78:23:f1:0f:fd:a4:ce:11:d9:
                    de:8e:2e:3b:f7:f6:b0:84:91:70:7e:d9:10:f4:dd:
                    aa:af:fb:88:de:89:c4:09:55:26:fe:ea:01:c5:8e:
                    40:e9:52:47:9c:25:ad:a5:a9:29:20:b3:22:54:c8:
                    e4:4e:e6:e2:f8:ca:fd:fb:4b:2b:a1:a7:7e:80:5d:
                    3b:bf:2d:bd:f6:ae:b5:48:d0:79:86:5c:fc:d6:8f:
                    a8:85:99:2b:b5:01:40:02:2b:8b:46:89:a0:6c:6b:
                    d6:49:1c:69:f2:dd:e7:86:33:f5:3b:c7:0d:8c:0d:
                    50:d5:f7:9f:a2:19:01:43:a3:12:af:19:87:6f:1d:
                    24:f8:cf:49:8f:95:18:80:a0:16:8b:5f:94:dd:5f:
                    81:8a:e4:72:51:c2:05:09:7d:49:50:c7:ca:c8:84:
                    35:e4:c7:d1:db:7f:8d:70:88:ae:70:60:99:2d:6f:
                    59:00:c8:ad:7b:44:bd:6c:b7:e0:c6:de:f0:f0:2f:
                    c8:06:9d:b6:cc:f5:da:a2:d2:b0:32:54:09:6e:ef:
                    f5:0c:01:37:18:a5:b6:29:f2:31:b3:8f:99:4e:32:
                    50:3c:2c:30:73:aa:0a:5b:d9:b7:38:94:7c:bb:0b:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7D:34:1D:C5:8E:93:E9:9E:9B:24:87:74:61:FA:5D:E0:2D:C9:C2
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:94:06:08:0b:3f:65:5f:c9:38:bf:49:f4:45:f4:47:15:
         e5:7e:3d:9c:a3:15:14:c2:19:be:0a:37:89:25:c6:1b:df:f8:
         86:ab:70:46:05:d8:2e:b6:45:d7:1e:01:2c:34:c1:0d:bb:59:
         a3:ea:66:b7:a5:40:80:d7:1a:6c:1a:db:f7:56:15:83:68:fb:
         8b:85:b6:5d:76:59:ac:b7:bf:a2:fc:9b:fe:60:2a:ad:33:6f:
         fd:36:fa:e9:22:c7:76:4a:a7:70:8b:2a:d5:df:a7:5e:85:83:
         b1:d5:7f:9e:69:53:bc:14:63:93:76:dd:99:85:0d:d6:24:8e:
         66:72:58:ea:c5:f5:c2:d0:e8:11:14:1d:52:19:d7:49:2e:83:
         df:92:5e:24:09:4e:34:0b:aa:69:54:83:d4:dd:a2:eb:69:b3:
         e1:4e:8e:7a:fe:77:89:da:8b:2c:b3:63:2b:11:e2:c5:9f:87:
         29:bc:68:0e:ab:bb:59:c6:99:98:18:da:6f:b9:21:75:9a:0a:
         7f:18:62:de:c1:ed:3c:46:f4:e5:81:67:ce:2c:38:ec:26:15:
         c5:f2:57:dc:4c:f5:d4:e4:f1:7e:a7:3b:ad:be:d1:40:db:e5:
         22:94:78:12:d0:20:06:8c:2e:e0:2c:cd:10:ac:5b:55:20:db:
         97:4c:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:14 2024 by rpki-client on console-ams.rpki-client.org