Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File:                     _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier:          n8mbSxaKUV7WBxaRfqPzHhR7LrK0J8PzmkQXX3HAsaE=
Subject key identifier:   47:9E:CB:F3:55:A3:52:78:EF:F6:4A:9A:EC:18:BF:FC:91:50:B4:C4
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer:       /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial:       019368C6260BBF4C55DA68A4763F514F758A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 14:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:36 +0000
Files and hashes:         1: Sjd3dM-u0NuZV7T5OJZ9WCHZdK0.roa (hash: PN+83qFZFe92WADNYTMyioPjaLzaD+tY+B3dC6HqQ0c=)
                          2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: 0lBmnJx4sIAx0d40VQRVYWdG69LKucwN3yze9aHoc2c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:26:0b:bf:4c:55:da:68:a4:76:3f:51:4f:75:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
        Validity
            Not Before: Nov 26 14:00:36 2024 GMT
            Not After : Nov 27 14:00:36 2024 GMT
        Subject: CN=479ecbf355a35278eff64a9aec18bffc9150b4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:43:8a:04:c4:db:01:8e:17:88:73:ae:05:
                    3d:4a:ae:e7:61:d7:4c:5b:0c:d5:e0:61:ac:64:58:
                    ea:fe:63:12:6a:fa:5b:fb:ff:09:2d:98:a6:28:d3:
                    bc:71:1c:45:7e:61:68:8e:8a:33:ff:f6:c7:8c:8a:
                    10:c4:d3:a8:26:7b:84:02:16:fb:39:d3:10:39:fb:
                    1b:89:c8:f6:64:eb:ec:38:e0:99:41:3b:9f:e2:12:
                    e2:e0:5e:98:48:6a:48:1f:6d:ce:4f:c0:b7:5c:f2:
                    57:62:89:16:3c:4b:68:02:ef:3e:c3:5f:b9:1a:b6:
                    e9:5e:70:2c:95:0e:4f:75:da:4b:b1:cf:ea:76:0a:
                    8d:3e:d9:8a:de:c8:e4:e7:9c:e0:01:a8:f6:96:53:
                    79:ae:28:d1:74:17:01:1c:2e:e7:ba:70:c8:d5:7a:
                    b3:b1:b2:04:30:c6:5c:65:b6:8b:1e:ea:12:36:87:
                    6f:4c:5b:48:ad:af:8b:d6:03:09:0a:78:19:fd:2a:
                    73:86:a4:77:75:d0:ee:b9:a1:42:8e:58:ef:44:dd:
                    d5:01:d8:c2:b6:a3:19:53:0e:3e:d4:b8:7d:5f:23:
                    37:c8:82:4f:c9:3a:9f:9a:12:8d:80:c5:81:54:f5:
                    78:91:26:e2:10:a2:2b:b5:b7:bf:ab:28:59:3f:69:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:CB:F3:55:A3:52:78:EF:F6:4A:9A:EC:18:BF:FC:91:50:B4:C4
            X509v3 Authority Key Identifier:
                keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:59:07:48:3b:d1:16:c7:1d:d3:ef:ca:18:4f:40:30:79:
         f4:40:7e:a6:4d:67:f8:73:ca:58:52:6c:2d:3e:64:30:44:4c:
         f0:63:12:c6:da:d7:76:78:83:ad:d7:61:56:8f:fa:9b:86:23:
         8d:cc:10:6a:8f:be:e0:a9:da:e6:49:7b:2f:56:4a:f2:c3:e9:
         a2:a1:08:2c:dc:08:2b:53:98:2e:86:5a:50:2c:b7:3e:42:32:
         72:60:de:c9:76:11:dc:53:7f:ab:c5:0d:80:4a:25:ee:85:38:
         be:d9:22:7b:e7:25:a5:74:58:8f:de:33:e4:fa:e1:c8:f7:7e:
         18:03:72:0a:7e:3b:98:96:47:0a:66:2a:0c:90:94:65:6b:f4:
         7e:c6:3c:28:12:16:f4:e9:1b:a8:0b:ed:18:5b:07:04:7e:ff:
         9c:09:98:17:1b:24:84:36:74:61:5d:42:86:3f:9d:56:e7:46:
         99:0e:9f:4c:31:d7:bf:e5:c4:bd:f0:68:07:74:a4:6c:47:22:
         c9:78:f0:0d:49:fc:3c:a0:c5:74:36:6c:de:81:f1:7c:24:4f:
         2e:9d:33:a9:9a:e1:8e:2e:91:10:cf:45:5d:7e:f9:4d:3b:76:
         4d:0d:14:eb:58:4d:ca:9a:fb:0e:bd:65:0f:a8:cf:a2:1d:ad:
         66:c7:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:31:01 2024 by rpki-client on console-fra.rpki-client.org