Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier:          FraJXRXDkgjZNNGx+WkghiCeSNfC8qvRhs8rA6sEFwg=
Subject key identifier:   D4:DA:6E:88:8A:70:6F:1D:11:F3:EC:2B:F9:96:71:5A:4E:5A:67:93
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer:       /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial:       0193572E21AE80A72A710F6382281A3F20A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number:          0971
Signing time:             Sat 23 Nov 2024 04:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 04:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 04:01:01 +0000
Files and hashes:         1: BAz8aShy0KTEjAHKmZdgZHyYGQU.roa (hash: QbEgUHVKzK/GBYfshTM6VaSzB/z8w4xPIpPkKtWAW5g=)
                          2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: awwQoiWck0BbkvwORAVQ9SOUCyUE1GHCQCdQr8PM6Lw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:21:ae:80:a7:2a:71:0f:63:82:28:1a:3f:20:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Validity
            Not Before: Nov 23 04:01:01 2024 GMT
            Not After : Nov 24 04:01:01 2024 GMT
        Subject: CN=d4da6e888a706f1d11f3ec2bf996715a4e5a6793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:3d:3b:f6:4e:ed:8c:ef:32:1d:4d:7c:87:
                    14:89:76:b1:a2:38:4e:72:84:42:07:87:62:80:40:
                    e1:24:cd:cc:32:d1:18:e0:8d:a3:6c:b3:5e:5b:13:
                    b3:24:c2:66:45:c6:56:c0:22:f7:4f:8f:e4:43:d1:
                    af:bf:27:85:e3:11:87:66:a2:c1:bd:44:73:53:af:
                    4a:ce:e2:42:16:86:2d:f0:ca:40:d9:dc:16:fb:f0:
                    e5:05:dc:ca:7b:15:9b:86:75:33:24:73:78:d5:a7:
                    33:fa:f9:74:8e:ac:6c:3e:fe:54:32:fa:2b:23:2d:
                    58:46:9c:0a:30:d2:fd:25:7f:7b:4c:f7:9c:94:f1:
                    10:26:00:7a:5d:9e:d8:ed:73:50:23:7e:eb:56:72:
                    40:56:86:fd:a8:2b:ca:b5:76:55:36:2f:92:71:0d:
                    a9:48:24:dc:97:29:37:0e:b6:2e:8d:4e:de:e5:cc:
                    37:c2:ee:41:1b:5c:c7:94:82:19:32:31:49:5d:f4:
                    6e:35:30:67:12:86:b6:be:b6:a4:8e:85:fe:94:09:
                    59:d2:13:c5:b0:65:79:ed:c7:f4:d0:1a:ce:3a:05:
                    d0:72:73:80:57:e0:3d:c4:c6:5b:4b:df:6f:4b:ec:
                    ad:04:40:73:1f:a4:aa:4c:9d:a0:68:32:19:0b:bc:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:6E:88:8A:70:6F:1D:11:F3:EC:2B:F9:96:71:5A:4E:5A:67:93
            X509v3 Authority Key Identifier:
                keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:95:f6:b4:a2:91:ec:fc:c1:44:1c:de:30:fc:2c:e9:f6:
         d0:73:7e:5b:0a:b0:12:c2:6b:6e:99:c4:d3:b3:24:93:4c:34:
         dc:82:6b:4f:da:07:12:c4:5e:b8:75:ae:ff:4b:ab:16:8a:c4:
         f5:f1:01:a7:d4:eb:6c:7e:fe:c9:3b:b7:48:5c:10:9f:1b:e4:
         7b:82:54:62:41:87:5f:ef:f2:cf:8e:75:66:d0:86:43:87:f3:
         72:d0:13:28:b0:12:06:9e:68:7a:f3:49:6e:a6:f6:32:f8:92:
         da:9d:2c:8b:b8:f5:c1:21:26:40:20:48:5e:9b:e3:27:60:89:
         9b:ee:ad:de:c6:e4:8a:92:73:0c:8a:c8:73:d1:1e:0e:74:9d:
         04:67:f8:25:79:12:89:2e:30:f0:c9:53:90:6e:fd:c8:0c:6e:
         8c:0f:5a:bd:65:7c:64:1b:85:fb:9d:06:3d:a0:a7:e9:41:37:
         52:be:d7:61:1d:50:67:d9:7e:e8:e6:df:a9:3e:6d:41:fc:2a:
         62:21:92:3c:bd:61:d2:69:6b:b5:85:cf:d7:94:a5:2e:54:71:
         34:4c:aa:11:f7:09:d5:04:cc:28:a2:64:49:00:eb:77:42:c1:
         7a:98:19:1c:57:a5:9c:9d:dd:d3:2e:86:8e:58:09:16:67:02:
         bb:ec:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:29 2024 by rpki-client on console-ams.rpki-client.org