Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File:                     I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier:          4pv1kc8Pbv/s7rEYLCqd7x/Se/Ljb2F8ivUHOgdPpTw=
Subject key identifier:   97:DA:46:F9:AE:C3:ED:52:8B:50:9C:90:B3:FB:1B:2C:4A:44:27:C3
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer:       /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial:       019353BEE8DAF5CFD0547688D0D2756E39B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number:          0DB8
Signing time:             Fri 22 Nov 2024 12:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:40 +0000
Files and hashes:         1: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: T7IZ/QonuKyeIJaPyPFUUjLjUTMWzykr9x0DVqmb1uc=)
                          2: S_kUF4dwsafcn_g3eAWJCUDRpdM.roa (hash: HZlB1UxwDr6nWkWJvpfcRaMd4trSPaKU2BmTtwElY7c=)
                          3: rvSX3jPzz4HCyynMZhuBuR7SVhM.roa (hash: BNdGSZUd3UOrDu4ivSbD2jZPGyD4fg+XMjORunE1sb8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:e8:da:f5:cf:d0:54:76:88:d0:d2:75:6e:39:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
        Validity
            Not Before: Nov 22 12:00:40 2024 GMT
            Not After : Nov 23 12:00:40 2024 GMT
        Subject: CN=97da46f9aec3ed528b509c90b3fb1b2c4a4427c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:d6:ca:97:ce:2d:77:c9:f1:7f:e9:3a:7c:
                    01:02:d2:b1:b5:7a:1b:f6:a7:54:ee:db:81:f1:a7:
                    72:02:f4:7f:d2:36:56:69:59:a9:89:50:3e:3f:9a:
                    f7:ae:a0:60:6c:36:58:3b:04:d1:c3:ef:b3:51:90:
                    9c:ce:3d:ad:ed:85:75:ef:eb:3a:f4:39:80:85:43:
                    90:51:13:a0:a9:c4:7e:c7:77:f4:9a:cd:9f:eb:1e:
                    af:73:18:49:ce:de:d4:30:1c:0d:88:de:78:69:b9:
                    ed:6c:7c:b2:6c:95:f5:16:4e:b3:06:b8:1a:56:63:
                    fb:f7:2b:eb:e7:15:81:69:43:57:e4:0d:94:bc:08:
                    0b:76:58:1b:25:dc:de:cf:1b:60:59:a2:23:7e:68:
                    d0:50:35:b7:15:0a:f9:40:ab:0d:a7:c3:64:c0:b9:
                    fd:d1:af:21:34:46:92:9c:76:d5:05:cb:c2:06:d8:
                    65:92:21:28:fd:57:02:24:1b:ef:7b:fa:db:65:5b:
                    f6:dd:ba:e3:bb:61:18:43:22:74:71:75:92:f4:7e:
                    6a:4e:49:50:8a:cd:71:e1:fa:ed:0e:52:ec:29:92:
                    54:d4:be:ca:5b:fe:2f:c3:4b:ad:60:e7:5d:05:0e:
                    c3:04:0c:4e:7c:2e:b7:e6:f4:fb:3d:3e:71:6a:65:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DA:46:F9:AE:C3:ED:52:8B:50:9C:90:B3:FB:1B:2C:4A:44:27:C3
            X509v3 Authority Key Identifier:
                keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:50:c0:32:73:6f:2a:6e:c3:b9:18:06:a1:22:9d:8b:83:
         1a:08:bf:ae:eb:17:90:89:86:ce:41:83:b0:4c:92:41:18:20:
         00:4e:28:0b:ea:63:21:2d:e1:59:3e:b0:e7:a8:a2:ab:b2:69:
         84:d1:0c:eb:ba:72:60:81:d7:0a:f0:8e:f6:16:5a:b5:4f:7f:
         22:a7:15:a7:06:2a:4c:bc:b3:65:4f:cf:d6:e9:4a:ee:33:e8:
         87:31:5d:89:9d:74:52:12:09:60:22:02:9b:b4:25:df:12:39:
         d1:c6:27:a6:56:64:bb:8b:82:e6:32:32:1a:87:2d:49:39:75:
         ad:b9:7f:3d:e6:29:78:a6:07:f2:8d:a1:08:af:fe:a5:ca:d8:
         9a:1e:0b:60:a2:df:63:12:97:7b:62:25:28:62:e9:a3:cc:6c:
         18:67:3d:5e:37:79:61:46:b1:63:02:33:2d:51:3b:ae:cb:50:
         42:6f:6b:af:5d:94:f0:b3:c9:2f:5a:88:09:3d:05:97:65:6f:
         4b:f5:e9:15:fc:a7:74:b4:52:e5:8c:95:37:0d:6b:2c:08:c5:
         7b:7c:80:4f:dd:15:18:e2:b8:30:d9:fb:8b:a7:56:b2:3b:d1:
         dd:b8:59:95:9e:62:6b:fa:85:54:66:cb:ec:90:89:0b:43:d4:
         01:2a:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:41:14 2024 by rpki-client on console-ams.rpki-client.org