Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File:                     7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier:          8Qpn+m+pD8PlmfjYqmWJeHHycE/5MGxg/4uQnVb0Z28=
Subject key identifier:   59:86:F2:4A:01:CE:8A:AC:93:E6:14:68:69:66:CE:18:04:A1:70:75
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer:       /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial:       019369DA23BEA9D60F1FEC2B3BA63F7AF2E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number:          0C99
Signing time:             Tue 26 Nov 2024 19:02:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:03 +0000
Files and hashes:         1: 1zgUWd8LUb9m1CmRohHESCyYSA8.roa (hash: qcv/tGoV8UC5mp33xfT7aXTzWEkpJmmWh8y75lyw4hg=)
                          2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: A1wBzHnU4GZo8M9twHaQeYY+pYegiKQ3pfUoALl49KU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:23:be:a9:d6:0f:1f:ec:2b:3b:a6:3f:7a:f2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
        Validity
            Not Before: Nov 26 19:02:03 2024 GMT
            Not After : Nov 27 19:02:03 2024 GMT
        Subject: CN=5986f24a01ce8aac93e614686966ce1804a17075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e2:79:e9:0d:4e:1c:aa:f8:1d:7d:29:9c:e1:
                    20:e2:50:aa:90:b4:ea:99:13:69:27:29:7c:11:f7:
                    f1:e4:f2:5c:25:ea:7a:64:47:c9:27:18:66:1e:cc:
                    1d:cc:6f:bb:33:3c:d1:82:60:dd:db:0a:8c:65:db:
                    04:7c:e5:3d:ec:bc:5c:c2:a6:88:9f:2b:ac:bd:75:
                    18:5c:4d:29:cc:4f:74:f3:29:a4:39:28:c4:c0:53:
                    a1:06:c3:f4:e2:42:0b:30:2e:5b:96:42:52:b1:92:
                    c4:9c:88:79:63:1a:a7:c3:72:bd:4d:05:1b:c1:64:
                    c6:2e:8e:48:ec:7d:83:4b:2c:0a:96:93:ee:53:44:
                    0c:dc:3c:87:fc:0b:d2:e7:ac:3f:2a:da:54:84:1c:
                    c7:8d:b0:11:04:6a:b3:04:b0:8d:4e:90:81:97:e5:
                    6f:bc:f1:a1:15:8c:cb:0d:48:b3:9c:52:fe:28:b6:
                    54:b5:27:96:8c:10:65:e8:b8:da:29:5d:5e:3e:4e:
                    4d:11:5a:bb:ef:d7:c3:94:ee:27:6d:08:1f:8e:db:
                    1b:bc:ed:80:de:08:3d:5d:5c:c8:76:f2:35:a0:a8:
                    30:d8:60:b8:f1:47:a0:5e:e2:f9:4f:b5:10:f4:36:
                    b5:a6:7b:51:b9:08:e4:78:e0:e4:b8:d6:38:ee:10:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:86:F2:4A:01:CE:8A:AC:93:E6:14:68:69:66:CE:18:04:A1:70:75
            X509v3 Authority Key Identifier:
                keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:c5:8c:c0:1b:0a:93:ba:89:13:f8:46:13:1c:1d:9a:53:
         49:83:04:70:76:f0:59:36:f7:e3:50:63:3d:19:b3:08:06:f9:
         31:48:9e:5b:e9:b0:ca:42:b7:a6:00:b6:2f:e7:b9:f4:c5:c3:
         5f:fc:78:48:7c:09:12:43:47:a4:a6:9a:a0:66:aa:a7:5f:6b:
         10:21:e2:41:9f:20:b9:e2:f5:cb:3b:b0:2a:21:71:aa:b7:e1:
         97:50:de:4e:51:8a:22:0a:b9:ef:88:81:7a:f4:7b:33:c0:7f:
         0b:3f:d7:9d:12:34:03:ef:24:7b:c5:1e:12:a5:5f:6b:87:19:
         19:99:47:4b:8a:af:ed:0b:d7:29:ff:3b:04:19:aa:0b:3f:f0:
         b6:08:49:8f:3b:0d:79:2b:8a:15:d5:06:e4:dd:91:5b:01:0e:
         fc:ca:fd:70:48:88:91:6d:51:7f:6c:d3:38:9a:ed:ae:67:c1:
         90:86:98:78:df:b0:5c:b7:0e:18:b0:06:4e:6b:98:6b:07:f2:
         ed:87:31:b1:0d:37:fa:05:74:4d:70:e6:2c:a7:56:f7:7c:bc:
         31:3f:f4:34:93:31:38:08:b1:a3:52:c9:88:4e:21:b1:fd:d5:
         bb:ee:25:88:03:d0:98:29:fd:25:c6:99:d2:02:0e:9c:b2:3a:
         c7:73:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:15:52 2024 by rpki-client on console-ams.rpki-client.org