Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File:                     q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier:          wshb4QtMPtMpEAMFYN14kUw5vjU4b8yFmtA9gWXqE/c=
Subject key identifier:   21:67:33:67:EA:C4:7E:98:0C:93:D1:68:18:FF:96:2E:66:60:3F:F7
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer:       /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial:       019356F66B684469E65FB369B1D9D774FB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 03:00:09 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:09 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:09 +0000
Files and hashes:         1: eZOpPpmf2U6UT76ZxC16aAn7UbQ.roa (hash: 9piTehD5X97It+H48SVt1nRRNymuyJa93SOOlsU4UDE=)
                          2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: zxbWWODA1GLCe+giSSELVLXUioQy+MylMF+WikB263U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:6b:68:44:69:e6:5f:b3:69:b1:d9:d7:74:fb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
        Validity
            Not Before: Nov 23 03:00:09 2024 GMT
            Not After : Nov 24 03:00:09 2024 GMT
        Subject: CN=21673367eac47e980c93d16818ff962e66603ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:56:f0:46:a4:99:14:60:f0:61:c9:8e:ac:
                    49:ce:6a:87:28:3d:dc:38:6d:2c:78:8a:09:04:be:
                    39:0a:6c:69:cf:d1:f7:fd:26:fb:38:3b:df:66:33:
                    5d:43:a8:02:77:3d:78:a3:a5:ff:6f:36:c8:ef:33:
                    20:62:0f:a6:25:16:d0:3c:b3:28:95:07:2b:92:bb:
                    94:7b:89:5f:cc:57:72:58:83:c7:47:dd:9f:ef:66:
                    03:8b:47:f1:ad:0f:6d:38:de:6a:f5:9c:1c:ab:05:
                    4b:44:41:e9:90:5a:84:78:e3:73:cc:52:b8:22:35:
                    aa:c8:87:f9:cc:2c:e7:5c:3e:3a:a7:0b:88:4a:13:
                    97:97:26:64:da:ed:c6:c0:0f:1b:8c:15:69:13:2a:
                    8b:44:99:56:5e:c7:10:3e:6e:2b:d5:c1:1b:d0:5c:
                    59:14:b6:da:22:34:84:04:97:d6:57:08:6b:3f:18:
                    23:72:11:36:6f:75:f7:81:18:70:5c:97:0d:71:03:
                    51:56:b1:8b:59:5c:d8:81:81:ed:63:4d:ac:de:dd:
                    b3:0f:db:15:2d:9e:e5:6d:21:c9:72:76:6a:df:fc:
                    fa:cd:ee:e3:b5:f9:17:5c:ae:26:63:fd:91:bb:fd:
                    7b:25:69:41:44:e1:32:a0:55:cc:5c:30:81:71:37:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:67:33:67:EA:C4:7E:98:0C:93:D1:68:18:FF:96:2E:66:60:3F:F7
            X509v3 Authority Key Identifier:
                keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:02:40:c6:99:21:75:cb:1b:a4:d9:a9:cb:7e:01:f9:4f:
         43:fb:7e:b2:7a:49:c1:d9:18:df:f9:9b:ca:93:f7:fd:52:a1:
         12:bd:37:53:34:9a:89:63:8b:10:a9:ab:1c:9b:cb:44:5e:20:
         5f:d1:cd:22:1b:c1:02:8e:f1:20:53:49:72:41:22:87:08:e2:
         7e:73:8e:ab:8a:c2:32:31:3a:6b:e9:d9:f0:7d:28:e6:7d:bb:
         59:ba:73:ca:6a:a2:29:82:18:40:1d:8b:f2:35:ff:78:90:13:
         34:a4:f7:06:03:97:ce:e0:45:07:87:71:c6:69:9a:1b:29:44:
         22:be:1f:f6:da:18:38:9d:d2:a4:34:48:76:ec:1f:86:f4:80:
         19:8d:e6:0a:33:15:82:ee:b6:ed:2a:d6:99:61:27:bb:e9:b7:
         81:c7:19:58:60:0a:23:f7:34:0f:14:0e:dd:76:e0:dd:8a:8d:
         e8:ca:ea:75:89:14:d9:00:5a:d3:cb:b0:29:fb:b4:72:8e:42:
         69:eb:d4:26:37:a8:af:0c:a3:98:43:48:2d:4a:11:cf:19:9c:
         b2:22:cf:16:f9:16:e0:41:36:aa:e1:e4:cb:3a:31:87:c7:6d:
         54:e7:39:5a:19:e4:28:63:4d:cb:16:fe:88:03:b0:1f:95:fb:
         16:8e:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:35 2024 by rpki-client on console-ams.rpki-client.org