Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File:                     pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier:          APePhTL/FGsY8rFwuKCUkwGlf+WltSisnioS5pAT6cg=
Subject key identifier:   0A:2A:7D:B9:B8:3B:5B:21:23:1B:78:27:59:17:D3:50:D6:D3:0F:3C
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer:       /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial:       019357D29D1E4C1992A30AC91C566AF49898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number:          1305
Signing time:             Sat 23 Nov 2024 07:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:40 +0000
Files and hashes:         1: R5lS2Lg87NxOw_FmjeXh2aymlNg.roa (hash: tVVXpacctdbNoeFaAMSz5FYLyy+w4qf2aRry3EZ2u4A=)
                          2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: ag/Z/WPKsMVxQXaeltt1LuZjBkfGjUy1Cke5vN9nFAE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:9d:1e:4c:19:92:a3:0a:c9:1c:56:6a:f4:98:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
        Validity
            Not Before: Nov 23 07:00:40 2024 GMT
            Not After : Nov 24 07:00:40 2024 GMT
        Subject: CN=0a2a7db9b83b5b21231b78275917d350d6d30f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:9c:e4:64:7b:2b:77:86:e1:7c:32:93:83:
                    50:e5:d7:8c:d3:b8:d8:92:9e:3f:74:1a:6a:d2:4a:
                    44:03:25:bf:f2:bf:07:e6:ba:e1:89:df:37:ef:e5:
                    10:c9:a7:f8:a1:54:05:e4:ae:78:fd:12:6b:f5:86:
                    cc:61:01:6e:e2:96:30:76:e3:1e:81:31:a0:9b:69:
                    63:da:49:21:0b:ca:7c:24:c8:aa:1d:7e:2c:7a:f6:
                    ca:c5:23:59:44:2a:bd:fc:44:26:d6:5d:26:38:b3:
                    ff:e1:b0:05:f7:e6:c0:9a:fa:60:93:0d:99:85:2c:
                    6c:9f:87:0c:bf:ab:78:a0:97:0d:b5:9c:96:cc:41:
                    f1:10:b3:f0:aa:ec:31:63:ae:d7:57:9f:cb:a6:8e:
                    3e:4c:4e:35:c5:8d:d9:b2:de:b6:82:0e:79:a6:93:
                    aa:bf:83:87:c8:d1:b0:96:17:39:1a:f8:37:45:18:
                    73:35:55:4e:c4:ad:76:56:58:56:ed:17:37:8e:1e:
                    36:66:d0:52:ab:58:0a:d2:2f:df:61:e1:6b:1e:66:
                    76:bc:45:26:71:d3:b4:28:0d:04:e0:34:2b:12:be:
                    fd:e1:92:c9:f2:0b:ab:b4:8c:99:9a:a4:c7:be:08:
                    ec:f7:76:af:e0:59:2c:92:37:5f:5f:2a:e5:5c:1a:
                    2c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:7D:B9:B8:3B:5B:21:23:1B:78:27:59:17:D3:50:D6:D3:0F:3C
            X509v3 Authority Key Identifier:
                keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:96:0e:ba:9a:1f:0f:0d:2c:85:81:81:75:9c:ba:37:5a:
         06:5a:06:6d:cf:30:62:89:33:2c:eb:00:ae:88:cf:75:9d:04:
         dc:48:08:16:cb:ac:19:9c:c9:0f:2c:d9:de:f7:13:1a:cd:4c:
         74:f4:dd:7d:50:de:7e:23:ae:e1:8a:3e:84:f7:25:e2:eb:ce:
         be:a4:92:99:6f:4b:8d:2a:6e:79:9c:9d:70:9c:ad:29:0e:ee:
         c7:a2:aa:5b:3c:9f:34:64:14:7e:54:97:2a:cb:6f:51:60:b9:
         57:bb:ac:9c:ac:1c:2e:33:17:ff:dd:9a:c2:be:e1:51:09:ea:
         aa:26:6a:f2:ac:75:eb:46:da:3b:6b:b3:c2:34:84:05:e6:92:
         41:ed:e7:f2:4e:3e:b4:65:26:a6:ca:31:4a:bb:25:b1:8d:3b:
         d5:6a:a3:9e:c8:75:1e:7b:6a:ed:d3:fe:67:af:1e:fb:5f:8c:
         95:85:4b:8e:1c:ce:ed:cf:f4:ba:7e:6b:ee:bc:f8:03:16:ab:
         3d:ef:95:fc:a0:70:53:c2:6d:09:c0:9b:8b:9e:e3:43:9c:86:
         4a:4e:07:f6:f9:f6:58:27:78:74:b1:09:14:26:93:52:cd:5e:
         ab:96:80:25:4f:5f:bc:cb:3c:ec:db:0b:2a:f9:fb:23:ef:cb:
         fa:a3:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:21 2024 by rpki-client on console-fra.rpki-client.org