Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File:                     q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier:          SmAVvxEmHzUEJoyXdL1LfypSkHJgJgtLwtPV8UdSSIg=
Subject key identifier:   27:BB:EA:5D:9F:94:7A:B8:B5:09:C2:C1:0F:7E:A0:2D:9C:52:AE:09
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer:       /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial:       01938C9CCC79255FAD56F8D08135BCEBA7CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number:          0385
Signing time:             Tue 03 Dec 2024 13:01:46 +0000
Manifest this update:     Tue 03 Dec 2024 13:01:46 +0000
Manifest next update:     Wed 04 Dec 2024 13:01:46 +0000
Files and hashes:         1: 8wtXj6f5qBp0uAZpxTYBOHrvQJk.roa (hash: UXYtW3d3czaSDn5V7vj5GOsxwszbIv0BxdBtlFZErL4=)
                          2: CfBp2ubaQf0zLp1aneZdupfPIPE.roa (hash: cVxbSZA5Qpbsh7EPFAe7fSpVAabjjFW5xafo3stvWV4=)
                          3: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: T/0004hN7jg9Mq3IZUQbc+1hAKw4E0XEyK4jgyqSzj4=)
                          4: rRKah9Di5-fwiLSZzckNJJGgc_c.roa (hash: ia+p12ww5SvNlj521cLWDANMFMD51juR9S8F6EGHcxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9c:cc:79:25:5f:ad:56:f8:d0:81:35:bc:eb:a7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
        Validity
            Not Before: Dec  3 13:01:46 2024 GMT
            Not After : Dec  4 13:01:46 2024 GMT
        Subject: CN=27bbea5d9f947ab8b509c2c10f7ea02d9c52ae09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:2b:17:ff:84:93:3a:2a:b4:14:b7:7e:79:
                    b4:98:c1:28:02:8a:c1:bd:22:bc:cf:83:4a:8e:01:
                    d6:7c:57:bc:be:7e:bf:cc:67:a5:51:12:17:08:72:
                    7b:66:ae:a1:f5:9b:a8:d8:ee:92:7f:6a:bf:a5:e7:
                    48:55:8f:95:08:d6:1b:fb:a8:17:79:f8:da:fd:7a:
                    12:6d:1e:34:94:2f:c1:65:22:6c:db:70:9c:dc:d7:
                    a0:bc:b2:f8:5a:32:09:0d:9a:fe:19:4f:cb:24:9a:
                    f1:d1:f6:4c:67:b9:68:77:b6:0c:47:c2:91:ed:be:
                    c9:75:e6:94:6b:87:c9:f3:4d:3e:a2:5a:f6:80:a3:
                    0c:2e:75:b2:0d:af:14:1f:a3:f8:76:b9:87:da:66:
                    94:1f:11:16:7f:ca:42:84:a3:e4:63:20:dd:fb:d8:
                    de:c8:24:30:52:29:b8:67:7a:5c:20:76:35:78:74:
                    a6:b9:1d:f7:92:38:24:20:36:45:22:ad:83:8e:4a:
                    d1:d0:ee:20:33:93:e5:71:05:a9:43:6f:9d:c9:dd:
                    47:e2:cf:5d:b5:de:a9:06:6d:a5:50:e7:cc:58:40:
                    a0:c3:d2:11:4c:b3:38:bd:06:e7:c4:f5:67:c8:16:
                    5a:fb:d5:0f:c7:10:5b:33:3b:32:e5:8d:b6:0f:1f:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BB:EA:5D:9F:94:7A:B8:B5:09:C2:C1:0F:7E:A0:2D:9C:52:AE:09
            X509v3 Authority Key Identifier:
                keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:55:5e:2b:2c:62:4b:96:95:11:d1:d6:86:d5:19:21:80:
         bc:53:f7:08:b5:3d:6a:da:ae:82:10:04:1c:c8:0a:5e:d6:f0:
         7b:9a:aa:fd:5f:81:06:e0:d4:30:89:f7:90:77:09:58:e0:92:
         b4:7b:8e:81:5a:a9:bc:94:ea:b9:1c:e6:da:e0:80:17:b5:95:
         7d:40:74:4f:bf:3f:d5:21:c2:db:f7:60:e3:83:f0:05:ab:e0:
         ba:ea:c5:68:f6:29:b4:88:00:a4:12:af:e0:31:3f:ac:6d:8f:
         49:e4:19:a1:e9:cf:89:84:af:59:dc:90:5f:fc:4c:d9:41:be:
         91:54:e1:e9:b8:85:a6:5b:a7:f8:53:4b:93:33:22:7b:9e:4b:
         55:e3:0a:2a:8e:d9:22:64:3e:a1:93:0a:87:b1:79:8e:c3:52:
         44:09:bd:3a:e6:a7:cc:fb:40:2b:dd:e2:f1:c8:d8:d8:6e:d1:
         04:df:c6:1f:cc:cf:d0:7f:25:e3:7b:00:b8:77:8a:b9:0c:bd:
         3f:89:14:d9:89:0b:72:76:30:c2:c7:b4:fa:cf:e9:9c:71:3d:
         52:2f:84:e3:b0:cc:b9:78:9e:99:2d:58:9a:4d:4a:33:ce:25:
         c6:96:1e:37:72:4d:ff:ac:9a:d9:4f:a0:6c:f8:c9:90:fa:46:
         44:1f:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:07:34 2024 by rpki-client on console-fra.rpki-client.org