Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
File:                     xYSSMuOUO_JXydyuqw75LTCkz60.mft (raw, json)
Hash identifier:          KX5MFYm5PdoUqEtGmXfQUW3+NRH+BazEQmgBrMepBZY=
Subject key identifier:   D4:C7:E1:D7:EE:6B:6C:B9:99:37:56:DD:1A:8E:BB:6F:04:DB:C0:10
Authority key identifier: C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
Certificate issuer:       /CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Certificate serial:       01935162945F8D873C42390F7BA29935EF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
Manifest number:          02FD
Signing time:             Fri 22 Nov 2024 01:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:35 +0000
Files and hashes:         1: Ugt2iyA_J2iylWXK_vCpMRgEu9E.roa (hash: QNYzJ3/4DGChtcvDDxyvU6qfzq62rCbmDDzGUC4/FKA=)
                          2: awU8V85Lv_Ymj9jwjnGE3xNPp3I.roa (hash: OwhNJ9ocZZAuxCoJgYqq8WgfctpIOQPcPGeUctwlkAQ=)
                          3: cx6RSFKGRMysR8-lxazbdzOwPgM.roa (hash: gcM5nphMQqNN9jdFYbLQLoofVnR6R7ovN8nbROZhraA=)
                          4: xYSSMuOUO_JXydyuqw75LTCkz60.crl (hash: sPo7FrLAd6EsLV/AIndqE1Zj4Yr/4wQA8ZY/wvBU/LQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:94:5f:8d:87:3c:42:39:0f:7b:a2:99:35:ef:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
        Validity
            Not Before: Nov 22 01:00:35 2024 GMT
            Not After : Nov 23 01:00:35 2024 GMT
        Subject: CN=d4c7e1d7ee6b6cb9993756dd1a8ebb6f04dbc010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:38:43:fd:3f:31:70:c3:fe:3c:21:24:5d:
                    63:c0:2b:5a:ea:a7:0e:68:a9:03:f8:24:79:78:8f:
                    a2:e2:d3:29:55:3a:49:48:97:dc:a1:2d:2c:a2:c4:
                    6b:e3:fa:ca:07:0d:df:ee:44:66:9d:f2:95:e2:29:
                    e9:be:48:c5:fd:8d:3f:82:76:d2:c9:2b:79:55:97:
                    39:43:f1:19:cb:c0:02:0a:48:0d:d1:3a:0d:21:a5:
                    e5:1d:5f:b4:56:bf:d6:e4:b6:63:de:b7:fa:a6:57:
                    c7:8e:05:a7:b3:a6:a5:9c:bd:f1:7d:d5:b1:ad:88:
                    e2:30:23:44:ba:3c:94:37:35:b3:b4:65:fd:70:5b:
                    20:ef:6c:8b:73:5e:11:d5:4c:c1:37:a9:4a:2a:25:
                    3e:34:38:b3:fb:57:2e:86:2f:03:5c:73:1d:81:16:
                    b6:3e:0f:11:3e:1b:7b:60:6a:34:25:c2:c0:92:60:
                    95:3a:47:6c:a2:ad:06:32:13:82:c0:af:58:5a:60:
                    04:34:19:d4:a0:c9:b7:5d:1e:b3:5c:a5:c5:f6:cb:
                    04:68:ce:06:c3:e5:e1:23:21:ea:e0:04:2d:ae:d2:
                    8b:ec:c1:50:66:fa:19:60:64:dc:fe:4a:7a:20:2d:
                    c2:f4:a7:25:68:15:5b:af:64:76:60:dd:51:35:81:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C7:E1:D7:EE:6B:6C:B9:99:37:56:DD:1A:8E:BB:6F:04:DB:C0:10
            X509v3 Authority Key Identifier:
                keyid:C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:9b:f3:0b:61:af:62:f8:b7:dc:9b:80:64:00:4a:2a:7b:
         b5:75:67:ae:14:d1:5f:eb:8a:6a:fe:ea:29:c1:9c:87:c6:10:
         ab:02:45:72:2b:3a:8b:61:92:c4:e2:22:57:c3:54:63:dd:70:
         75:d9:f6:69:ce:21:cb:d5:39:f3:16:6a:6c:d1:d2:9f:20:61:
         a7:7c:ef:ed:b7:a4:34:26:4a:f8:65:30:e9:d1:08:f3:0c:62:
         9b:e7:41:e8:5a:e4:ab:cb:18:55:eb:66:c8:d4:d8:30:bf:a1:
         2b:bd:0d:03:a3:66:6e:0e:f4:a5:0d:40:f4:08:9b:da:d7:53:
         86:8e:6b:98:3c:6f:9c:ef:b6:02:22:7c:74:de:1d:30:24:db:
         35:ff:f1:68:97:89:ea:df:19:6d:5b:51:30:ab:4b:ec:eb:ea:
         ef:09:6a:8b:97:df:83:3c:f8:f8:99:fd:c2:0c:a2:90:d4:f7:
         ec:f0:03:49:e2:b1:45:b3:ad:0e:0a:cd:b9:6a:30:c1:9d:e8:
         0a:4f:a3:ba:21:90:9f:71:7e:5f:99:47:9e:ff:93:cc:e5:37:
         a0:83:b8:a6:ab:5f:11:37:38:55:04:58:ba:a9:c4:1c:ac:99:
         2c:ac:31:9a:2c:1a:9b:ce:45:6c:58:31:82:51:4a:a3:55:25:
         3c:f4:03:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:08 2024 by rpki-client on console-ams.rpki-client.org