Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
File:                     bAXPnDJ7L8h3votWGCKwZeCWkMI.mft (raw, json)
Hash identifier:          BI8Wtjwvp6jYep1gbVs/OWhb6Nw92vdMPM5FSf+8WuU=
Subject key identifier:   A4:86:A0:9C:03:29:9B:B7:E8:77:FF:CF:E2:D7:33:91:39:BC:0B:7F
Authority key identifier: 6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2
Certificate issuer:       /CN=6c05cf9c327b2fc877be8b561822b065e09690c2
Certificate serial:       0193561ADA4207D01F1D2864105B5C09CF71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 23:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:20 +0000
Files and hashes:         1: 8v1nXt4dVR9J0FKdRUKlv_VZvzQ.roa (hash: sewwdkF8529VZjQgg9QpkP6t2kFTBrX/b0hJNV9eKUs=)
                          2: LKPzTE1hqqd0Z1Ylu5XHzUGQ154.roa (hash: O801WZy6lNWM6flq4HLiuhIaASbT6kqfSPwoJoa3RUg=)
                          3: _4rK3YJSIVmYu7Zsp-R-UmMbzXc.roa (hash: f5L3PNxAWNJ6yYu02b7AgdVbzC7Eq4AY7J5SKieKE4s=)
                          4: bAXPnDJ7L8h3votWGCKwZeCWkMI.crl (hash: lIoX+qybkrp9QM/vIttP1EG3696kCGuc8GVaAGwyNV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:da:42:07:d0:1f:1d:28:64:10:5b:5c:09:cf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c05cf9c327b2fc877be8b561822b065e09690c2
        Validity
            Not Before: Nov 22 23:00:20 2024 GMT
            Not After : Nov 23 23:00:20 2024 GMT
        Subject: CN=a486a09c03299bb7e877ffcfe2d7339139bc0b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:7e:81:1c:c0:a4:0b:44:62:d0:70:4c:55:
                    e3:e3:80:11:58:42:46:9c:99:a5:cd:98:c9:36:4c:
                    d2:a5:df:1f:3a:3b:93:59:d1:26:17:23:ef:62:95:
                    fd:c4:92:b3:45:4c:33:a8:a0:92:9f:68:87:53:2d:
                    a8:05:97:97:31:3e:32:9f:67:30:10:ed:19:85:78:
                    a6:ee:ec:7e:61:10:d0:01:5e:1a:6d:e5:d3:5a:86:
                    9c:60:2b:a7:0a:8d:da:7d:af:b4:fd:32:cf:f9:d9:
                    c1:25:f1:e1:1d:4b:c4:6b:d3:ee:e3:c9:2e:af:09:
                    e2:20:87:da:e0:cb:d4:ff:9d:e5:5e:7b:9a:31:95:
                    5c:3f:61:3e:cb:e6:46:a4:8e:f9:2f:06:c0:1f:00:
                    3c:a7:e2:c3:1e:05:2a:57:c5:13:dd:20:6e:d7:8d:
                    1e:6c:5a:da:eb:85:8d:16:40:17:bd:06:3c:58:d3:
                    fc:2f:38:38:ca:ab:d2:25:d9:52:53:f8:37:4c:be:
                    97:4d:9e:0d:eb:f5:82:83:04:ec:b2:0b:04:e7:7c:
                    a4:39:33:f9:ea:d7:dd:55:42:c2:7d:2a:7b:85:30:
                    e3:8f:4f:69:46:22:6f:c2:c7:a5:69:64:a7:2f:78:
                    10:23:49:fc:8a:b9:04:78:32:00:4a:45:3d:e4:ab:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:A0:9C:03:29:9B:B7:E8:77:FF:CF:E2:D7:33:91:39:BC:0B:7F
            X509v3 Authority Key Identifier:
                keyid:6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:c1:fa:14:b8:83:0e:75:25:08:3a:3a:af:6e:af:79:9c:
         4f:e6:dc:3d:06:b9:ad:1e:26:e9:87:cc:d0:9c:1d:ab:5b:a2:
         53:33:11:6a:0a:4d:b7:b7:05:e1:20:c4:3d:e8:ed:f9:92:31:
         c6:d0:d2:d8:1f:e0:08:e3:1d:a0:88:5b:8f:a2:b3:47:96:aa:
         f3:08:95:c0:62:47:80:55:85:1a:fd:b6:68:9e:86:57:15:41:
         c0:ee:27:64:e4:f0:36:e7:48:62:b5:45:87:f8:9c:ae:d1:7a:
         27:b1:b9:79:bc:78:e7:0e:e4:11:bd:f1:ea:16:8b:3e:a6:6b:
         c5:4f:74:47:4a:58:7d:9a:09:57:d9:d9:71:68:fb:46:84:c5:
         17:3b:04:db:8d:ea:3d:c6:1b:27:99:47:b7:11:48:80:c5:74:
         8e:d5:e3:20:eb:95:09:9e:8a:11:6a:64:1f:d4:79:29:9e:1e:
         47:50:52:c6:c7:e9:59:f0:6d:14:69:76:1b:41:ca:bd:8f:09:
         77:63:3a:4e:74:27:1e:b6:97:0d:e4:81:31:c7:04:56:cb:3a:
         7f:4a:b1:4f:2a:3d:7f:e2:5f:b4:25:ee:1d:e4:f5:f6:48:56:
         ce:ac:5b:33:3b:1e:79:43:7b:61:8e:b3:86:96:6e:96:24:e8:
         5a:fd:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:02 2024 by rpki-client on console-fra.rpki-client.org