Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          fqBLtKpWu8uPg278t/UJJ9VaIhNcqXz00MjHaqcaPfs=
Subject key identifier:   CA:2E:3D:7A:9B:13:76:DD:B1:DE:81:8F:B2:59:53:F5:A0:66:15:A0
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019369DAF342FB33F8A0EDFE2B4B70371191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 19:02:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:56 +0000
Files and hashes:         1: 24Dg1pTGVBWiZZULP0tejjNpnOM.roa (hash: OsdXCUQ69HuTvR8+CvH0WDNj0ivYOcdKaq3dpudNvCQ=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: ftdABa38olEW31/35KT338v7vHdWC/nDIK1pTBsdx+M=)
                          3: 481ONYMTUbrU1OJkj5sDk_jB0Ms.roa (hash: +8aovwmz3Vl1nBKbZqNP3jZmM2j68g9N8kETG2vUT6Q=)
                          4: FeHIeQLI5X7FXfBCINUyS0oPGv8.roa (hash: kzAJvb8YNgT96ZNc6iYRS33ByMzUwodH7d8o9R6afyA=)
                          5: lSbcgBTZUSMGftb49C0qPsyM920.roa (hash: O5Siqeh5WHzmH1yheIBTr15Ug7zVWOC5TDIPmHO+F0k=)
                          6: o5Uj1-8kPb9sYJkD78AE-ApWA_E.roa (hash: LqPFTmtQmAkQu2Wf2Yxmz/XojSrU3TGUXlm/Bb5e5iM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f3:42:fb:33:f8:a0:ed:fe:2b:4b:70:37:11:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Nov 26 19:02:56 2024 GMT
            Not After : Nov 27 19:02:56 2024 GMT
        Subject: CN=ca2e3d7a9b1376ddb1de818fb25953f5a06615a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:89:e9:79:01:3c:56:f8:2a:f5:33:85:9c:
                    d2:16:96:c2:c8:b8:32:de:d1:ea:62:d2:7c:7b:f3:
                    ff:23:42:2f:c3:b7:b8:21:1b:b7:d3:46:cb:aa:e0:
                    4a:52:e0:08:b5:42:ca:cc:e4:7f:57:20:86:b8:42:
                    8c:27:0f:ea:56:b5:5e:d1:33:10:64:35:10:9b:08:
                    80:83:53:ff:1c:af:85:4a:44:3e:b3:cf:3d:5e:5c:
                    21:5b:40:ed:78:15:be:51:4c:3e:37:5a:1c:06:ab:
                    52:76:ad:9d:76:a8:2d:6f:75:27:c0:4e:7d:ce:1a:
                    25:e4:24:dd:7c:af:d4:be:dd:46:6f:b8:36:a9:de:
                    11:aa:93:0c:c6:b8:1d:69:de:68:1e:fa:2b:16:f6:
                    84:cb:4c:6b:53:10:86:01:4b:9d:96:04:9b:11:2b:
                    fa:25:9d:0a:bf:08:11:17:84:df:b1:4b:5a:27:75:
                    89:6c:32:1e:19:15:5b:9a:a9:28:08:f0:61:ab:18:
                    dd:d6:f2:a7:23:91:2d:47:97:0e:fa:a9:1b:eb:9e:
                    a5:6d:2f:36:3f:4b:d1:af:27:91:d4:58:28:c8:02:
                    73:c9:8b:87:05:bd:a9:f0:00:a8:27:d1:2e:6b:7a:
                    7a:53:74:e3:0f:79:a4:ad:d3:62:f0:27:36:f7:3b:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2E:3D:7A:9B:13:76:DD:B1:DE:81:8F:B2:59:53:F5:A0:66:15:A0
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8c:cd:83:fd:d8:ea:ee:65:92:66:25:f1:72:c9:a5:38:62:
         e1:ca:f6:18:68:4c:b3:98:fb:ec:c7:64:48:e2:ae:68:30:c4:
         ba:2c:a6:39:f7:75:c0:0d:d8:52:a7:4c:e9:6b:c2:a6:25:44:
         3d:9c:f9:f2:e2:bb:21:09:eb:b0:da:e8:5e:e3:99:e5:a1:1c:
         95:6f:d5:58:95:a2:f6:10:a6:f9:85:b0:16:6e:cb:c0:fb:99:
         97:1b:d9:01:d0:2f:91:d8:f0:4e:4e:56:85:ef:e1:9f:6d:0c:
         05:75:56:f7:85:9d:44:03:d2:94:c8:89:f8:73:8f:d0:dc:c0:
         fc:e5:65:85:e8:74:d4:7c:f3:a2:87:12:8b:73:fa:01:42:aa:
         fb:e7:6f:02:5d:86:8a:45:29:9e:de:1a:f8:95:9f:f7:ad:5b:
         74:ba:67:dd:af:a7:19:e1:f8:76:b9:f6:4a:3c:e2:7f:2e:0d:
         a9:53:9d:57:4e:67:77:e3:45:c5:9b:75:cc:db:63:ee:b0:d2:
         e6:0a:92:9a:3e:f9:38:a4:5e:d1:a1:ea:6d:81:b3:4b:fe:43:
         c0:4d:81:41:5b:ce:4b:4f:52:fc:50:64:96:a4:a2:fe:20:b6:
         63:f2:8c:2d:3d:e1:fb:04:12:c2:fb:e2:7f:a9:13:36:eb:bc:
         bf:49:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:16 2024 by rpki-client on console-fra.rpki-client.org