Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft
File:                     hyB28YjqSmzl93Z_cxdt1KeTlBs.mft (raw, json)
Hash identifier:          Xr247jrj6UY8+UftPK2ym+aHewKMtq5QHtOnKU5gq6Y=
Subject key identifier:   4E:D6:42:FA:D5:7C:C4:8C:AF:E1:E3:07:80:FE:CD:C0:87:A8:79:7E
Authority key identifier: 87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B
Certificate issuer:       /CN=872076f188ea4a6ce5f7767f73176dd4a793941b
Certificate serial:       019352AC9FB21C08C7B4483462DA723EE777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft
Manifest number:          0616
Signing time:             Fri 22 Nov 2024 07:01:05 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:05 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:05 +0000
Files and hashes:         1: YRMgmXlRMmsX_th_N_dOFnF28q4.roa (hash: KY+Yf6dGM9OO8PrJR+tlkqWSg/2FI2jZztvRouj2dkQ=)
                          2: hyB28YjqSmzl93Z_cxdt1KeTlBs.crl (hash: 30B5V0J5WNg+mprcxhtxIcNEFWZ+vknB6mSk3Cgko50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:9f:b2:1c:08:c7:b4:48:34:62:da:72:3e:e7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872076f188ea4a6ce5f7767f73176dd4a793941b
        Validity
            Not Before: Nov 22 07:01:05 2024 GMT
            Not After : Nov 23 07:01:05 2024 GMT
        Subject: CN=4ed642fad57cc48cafe1e30780fecdc087a8797e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:61:c3:95:3e:1d:30:91:71:94:2e:cf:05:
                    35:f3:a8:17:80:6b:b8:6c:ee:05:be:59:b6:7e:68:
                    25:12:6f:82:98:33:3f:91:70:54:24:1d:39:98:f8:
                    70:f2:4c:a9:3f:3d:57:92:57:27:62:16:ef:70:41:
                    bd:d4:09:62:c7:e0:c5:bf:b4:d3:29:2c:9d:1c:74:
                    7a:84:19:e2:07:92:f6:46:ea:26:12:f0:8c:57:fc:
                    31:77:b0:86:0a:5b:c7:50:ac:47:60:2b:cd:df:7a:
                    85:24:00:a6:e2:bd:de:dc:24:30:e3:0c:a1:90:01:
                    65:91:8c:54:ed:90:f0:d5:42:96:f6:dc:4c:85:9f:
                    20:78:e5:6d:2b:14:f4:68:aa:6b:7f:e5:bd:5a:e6:
                    a8:84:22:61:7f:ba:f6:bc:98:8e:2f:c1:61:d4:63:
                    8a:76:1b:9d:a1:1f:ef:1f:00:ef:ed:70:5b:91:f8:
                    43:7d:5a:d5:93:36:d4:cc:50:d4:d3:2b:b9:5c:c2:
                    97:3a:e1:30:73:72:92:97:cc:1b:6f:52:e0:a1:ac:
                    12:29:77:07:46:9a:c3:2e:fd:d7:0d:f3:fc:4d:83:
                    c4:ff:fa:6a:0b:a4:56:8e:77:bd:77:01:ed:ef:bd:
                    bd:98:c7:0f:9e:ff:6d:80:88:dc:d7:fc:2b:41:4e:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:42:FA:D5:7C:C4:8C:AF:E1:E3:07:80:FE:CD:C0:87:A8:79:7E
            X509v3 Authority Key Identifier:
                keyid:87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ac:98:37:84:45:ae:51:cc:de:7b:66:62:9b:0f:d1:db:26:
         3d:13:d4:d7:e6:72:93:57:74:79:38:c9:68:b9:71:73:87:88:
         b4:76:ef:61:99:5d:dd:a8:82:bf:6c:e5:a1:71:62:9f:f3:6b:
         0e:2f:12:83:55:7d:26:3e:95:54:1c:f4:04:13:7a:4f:d7:7f:
         cd:8e:b5:48:c7:06:47:d9:fd:d6:15:d8:c3:c3:8a:5c:40:f2:
         5d:70:8f:26:68:c1:b8:84:99:67:6c:c6:a7:43:3d:3f:c5:72:
         0a:50:20:ce:f0:f4:24:9a:25:9b:6f:71:fa:2b:f1:78:fd:65:
         c1:4c:90:09:52:1d:1e:71:c0:f8:c6:b1:d8:39:1a:a4:f0:26:
         ea:3f:d7:7f:09:8b:3e:7a:0a:67:71:8e:35:d0:87:3c:30:4a:
         b0:ff:5a:ac:d9:b8:d7:19:5b:c0:1f:52:52:13:4d:75:1c:8e:
         fd:88:64:26:66:be:f3:c3:58:e2:f7:a9:5a:de:b1:27:73:9b:
         f9:fd:85:1c:4c:9b:cc:b0:d3:6f:c9:35:15:9a:55:f9:b2:58:
         36:ec:06:76:e9:ab:53:8d:d7:a7:55:91:c5:e1:ce:d4:f2:c1:
         f9:8b:a9:4a:f8:3a:f6:1f:b5:23:8a:cb:7d:d8:5f:b5:19:a1:
         0c:4e:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:08:21 2024 by rpki-client on console-ams.rpki-client.org