Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File:                     4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier:          TVRkVx4deRb9Wcwcbktl+06TBbNerZxQcwEm94xB6IM=
Subject key identifier:   EA:55:8E:13:FC:95:91:43:1B:E1:83:18:00:BB:E7:A4:0B:8B:C6:FE
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer:       /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial:       01935319FE8705F5B5C114DDF1D809A6775F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number:          06C8
Signing time:             Fri 22 Nov 2024 09:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:32 +0000
Files and hashes:         1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: N6WA4RDG9piG7g4WtH6Hy2H5gPAv43Pzl+QAiHrKz40=)
                          2: OjWHkO9Fp8HNvgGOFjzb8fbBDvQ.roa (hash: s4Jir+A11EG1cAY25HRmV6/tdu9hHRSFBL68394KABA=)
                          3: zCSUjkmYpzRl6PTG2rOlRzEu5nI.roa (hash: kv+cl6m0WgfjQ8koba7ByooF+FeU4gxgIAQhbia7j4o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:19:fe:87:05:f5:b5:c1:14:dd:f1:d8:09:a6:77:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
        Validity
            Not Before: Nov 22 09:00:32 2024 GMT
            Not After : Nov 23 09:00:32 2024 GMT
        Subject: CN=ea558e13fc9591431be1831800bbe7a40b8bc6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:a8:35:fd:83:c3:f0:ba:64:1d:1c:8d:f3:
                    42:15:f8:71:a6:e1:c0:e7:10:e8:73:07:fb:92:61:
                    fa:95:5f:f2:ce:7d:79:cc:f9:b3:b5:9b:bf:79:85:
                    de:61:cb:1e:e4:42:00:31:56:09:20:48:ef:86:fd:
                    0d:e7:29:2b:26:be:5f:5d:47:b5:c4:27:2d:e9:bd:
                    92:48:14:b6:2c:f9:c8:c9:34:c5:d6:1c:9a:8d:02:
                    a6:1c:44:61:1f:bf:59:c8:e7:12:d7:b0:c2:d2:b1:
                    39:45:23:94:f5:e7:77:7d:71:20:ee:76:ce:ff:a1:
                    5b:57:9c:e8:e4:7a:38:a1:b6:a1:df:4a:65:4c:1d:
                    68:81:b3:9c:27:7e:bb:c3:ce:6d:ab:55:91:24:87:
                    75:82:5a:2c:a7:5b:79:98:60:04:c4:2d:8a:40:18:
                    89:db:c4:9f:88:f9:fc:a7:29:64:af:40:2a:17:b3:
                    f2:51:b5:5f:00:32:0b:b7:1c:e1:c5:de:bb:9a:71:
                    b2:f1:cb:50:b4:a1:39:2b:71:cd:63:70:64:35:de:
                    70:55:b8:ae:3a:14:fe:4b:eb:cd:5c:73:7d:e0:24:
                    e1:06:5e:9c:29:fe:bf:6a:fe:96:80:d1:69:02:f9:
                    06:01:27:fc:ef:76:00:ed:0f:d2:99:33:3a:c9:81:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:8E:13:FC:95:91:43:1B:E1:83:18:00:BB:E7:A4:0B:8B:C6:FE
            X509v3 Authority Key Identifier:
                keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:ed:c1:d8:be:67:cb:a2:bc:cc:d6:77:f1:35:51:ac:08:
         99:95:77:90:fa:9f:99:be:f5:42:ef:c2:78:15:bc:1a:52:46:
         7e:61:b0:b2:04:af:2c:99:fc:23:12:db:61:39:d6:8a:f3:a7:
         38:71:16:15:5b:82:62:be:42:8f:a2:f0:3a:0f:aa:d3:6c:e1:
         3a:f7:61:dd:80:8a:16:ef:51:4a:0b:d7:83:d9:42:79:69:7e:
         27:c3:fd:4e:67:9c:e2:d5:66:6e:f4:02:16:e6:d3:a7:15:05:
         0a:7c:66:7d:df:63:0d:ef:05:d4:2f:76:26:93:93:40:ca:28:
         79:4e:5a:c5:14:54:74:a3:89:a9:e0:88:73:d7:9e:6b:73:fa:
         80:6e:9e:be:ff:f2:5e:59:c6:1d:4c:10:69:12:e1:7b:80:ea:
         71:52:ea:f0:e1:5a:15:1a:b9:83:95:67:96:35:e8:2d:53:ca:
         e7:d2:76:d6:92:3c:c8:8b:4a:6e:f0:f9:d9:62:fe:ba:21:c4:
         86:f2:d3:75:c6:5b:58:a6:d2:03:c2:54:8e:70:6d:95:12:67:
         a0:e9:49:29:4f:35:93:d2:c8:45:23:90:79:43:e5:2c:f9:f0:
         07:3d:6b:89:6d:38:c5:2c:a7:31:1c:bc:29:ea:c8:84:96:17:
         34:67:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:09:51 2024 by rpki-client on console-fra.rpki-client.org