Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File:                     IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier:          17WOGP7YR0Cc2OfVTCfjYJY6QvRhQlPXd7GL939hvBY=
Subject key identifier:   55:C5:B3:3A:6C:8D:D7:6A:FF:E7:B1:DB:69:36:2C:CE:1E:B2:6D:5F
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer:       /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial:       01936A46FD4350AB0B454146B4B215167F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number:          0538
Signing time:             Tue 26 Nov 2024 21:00:57 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:57 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:57 +0000
Files and hashes:         1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: yTyNBrXgY9jyH6FAhuOsnxsUAoGLUThDK9YAQLtf4DY=)
                          2: uAG1KqArQ88wPYJGqlEeMcsbkyo.roa (hash: EorcWNZQraqHx+dvy471RgacStOnP1L+enA0/OrxPLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:fd:43:50:ab:0b:45:41:46:b4:b2:15:16:7f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
        Validity
            Not Before: Nov 26 21:00:57 2024 GMT
            Not After : Nov 27 21:00:57 2024 GMT
        Subject: CN=55c5b33a6c8dd76affe7b1db69362cce1eb26d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:58:3c:16:a1:02:1e:48:52:3d:c3:d7:9f:e6:
                    3d:e6:2f:e7:74:66:16:8b:e5:5b:63:f6:b4:66:8d:
                    4b:f4:1c:8d:b0:5c:a0:5b:ec:f5:31:93:33:f3:bc:
                    4b:f4:10:c2:4d:11:49:dd:93:6e:55:a3:a9:e7:15:
                    38:e4:ea:17:2f:44:28:b2:60:87:58:c3:56:97:37:
                    92:a3:4f:47:44:f5:f1:c8:0f:2b:0f:0b:df:19:3f:
                    22:63:ec:d2:f0:7c:9f:91:3a:ca:8e:5a:98:01:8c:
                    9c:69:6a:c7:7f:a0:4c:01:52:9a:7e:cc:01:46:de:
                    b3:4a:89:2f:75:75:a9:69:f7:0c:bb:f1:bf:0f:89:
                    b6:fa:e7:f8:4e:e3:38:10:41:6d:48:de:8b:a0:f4:
                    78:49:73:94:e3:94:22:33:d0:27:fa:bd:6e:f0:8a:
                    f0:20:bf:4b:56:88:89:b4:ad:b9:f2:e3:fd:0d:87:
                    32:9f:5e:7b:44:5d:57:70:e0:b7:96:86:a7:9a:2f:
                    26:0c:a8:b7:a4:4a:68:85:14:f6:76:b1:65:a4:cb:
                    0a:5a:2b:1d:66:80:88:db:63:03:62:be:94:4e:77:
                    f2:f7:c3:00:77:eb:b1:1b:bb:0d:fc:6c:cf:0f:92:
                    41:5d:d3:c3:22:27:92:62:4c:b8:af:1e:fe:c6:28:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:B3:3A:6C:8D:D7:6A:FF:E7:B1:DB:69:36:2C:CE:1E:B2:6D:5F
            X509v3 Authority Key Identifier:
                keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a9:55:c2:e4:bf:35:a1:34:49:ce:d3:ab:01:53:79:d6:a2:
         2f:b1:c4:f1:13:bf:a1:0a:f7:48:39:5d:1e:d2:73:fc:55:e3:
         ae:dc:74:f2:fe:cd:cb:4d:4c:6e:b5:db:29:9e:a2:d2:a6:d8:
         48:2c:7c:9e:c3:1b:ab:70:76:42:4f:fc:56:38:2a:66:b7:a0:
         01:36:aa:2d:53:1b:ab:64:ac:99:c9:cc:fb:3e:6d:ea:f1:7b:
         ae:14:96:d9:fc:52:3e:ce:4d:3f:b7:01:b6:87:80:3a:ae:95:
         f1:74:cb:60:2b:b5:42:a4:b0:da:4f:e7:5b:0d:4f:09:8a:14:
         e3:4a:1c:9d:76:3b:f3:6e:1d:5d:e9:d5:99:a2:cd:de:02:a5:
         8a:ab:0c:cb:43:eb:2e:5f:b7:77:78:f6:dd:0f:0e:fc:8b:71:
         83:96:33:28:d9:e9:2d:c3:73:1f:a4:2b:1c:fe:05:80:91:f5:
         9a:58:29:dd:90:49:67:d7:9b:39:a7:a1:a4:a0:29:c0:22:7a:
         66:f0:d7:d8:10:ec:62:50:b4:d4:14:e6:d9:7d:9a:f0:24:7a:
         34:2b:82:e4:d1:fa:f6:a7:bc:62:1b:39:2e:9f:6e:6b:9d:d8:
         2b:0c:59:5e:c7:a9:28:9e:2f:1a:56:66:f1:68:c8:7d:63:f5:
         f3:c6:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:15:08 2024 by rpki-client on console-ams.rpki-client.org