Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File:                     I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier:          CMveJDh3cVMWe48SgajoenY7hDgdb/fUK4GGz1k1Owk=
Subject key identifier:   DF:94:A6:4B:EB:FC:BE:3E:1F:CA:0F:0F:C7:AA:72:26:26:99:A2:4A
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer:       /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial:       01935651D882D7138B3B16E8033E4B4BD8B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 00:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:24 +0000
Files and hashes:         1: 999r0NWrPfvR3_rZH1SqP_hOOfU.roa (hash: v1n10El5aCqGaEq9W1kjPgP/b/caVobxI/OHO6kE1zI=)
                          2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: hvTmBSCdxQ7iqSHe0IkaUgL+drTlPMm7g5VegYNsYbc=)
                          3: Z4j1DLQanFUmbIvnmG3K9H6cQ8I.roa (hash: HtEqRzOi35BsTdQW6U6mqsrN2fZfG+M+ArMg7578XcY=)
                          4: hYz65H9ML5bXE1g4s4GPXZM09v0.roa (hash: 8hlYReX8GKCSzrIuxQGlwy6xTB2tEAPrh2am9BcJ1tM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:d8:82:d7:13:8b:3b:16:e8:03:3e:4b:4b:d8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
        Validity
            Not Before: Nov 23 00:00:24 2024 GMT
            Not After : Nov 24 00:00:24 2024 GMT
        Subject: CN=df94a64bebfcbe3e1fca0f0fc7aa72262699a24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:5f:1c:c5:a5:1c:7e:78:c3:07:64:5b:b6:
                    9a:83:f5:82:5b:d7:4f:03:3c:7c:75:7e:67:f7:de:
                    3d:ce:3e:d1:a3:0b:8b:b7:b3:a5:b6:c3:6b:0f:68:
                    28:57:2f:63:69:f7:75:ab:b8:6d:cf:53:e7:5d:47:
                    0a:cd:aa:02:57:98:c3:4b:3e:a9:e9:ee:47:35:39:
                    a0:ca:c6:82:80:1d:24:a0:aa:1b:dc:f1:3c:68:3c:
                    53:4c:43:b6:71:e9:01:27:62:c9:25:2c:ac:19:ff:
                    78:3d:2c:e2:19:f0:e1:b7:19:db:53:92:66:98:10:
                    c2:ef:e5:82:a9:c6:dc:51:76:c5:90:75:01:bd:69:
                    f2:11:82:cd:79:df:6a:a9:fa:71:8a:88:be:bd:1f:
                    c7:2c:4d:da:e5:53:83:bd:2e:a1:c9:48:64:4b:d4:
                    5a:80:7a:16:e9:45:28:20:8b:d9:f9:de:fa:6e:34:
                    36:af:f4:80:58:cf:4d:cd:4a:b3:40:00:80:fe:37:
                    8e:dc:9a:a4:1d:59:00:e6:04:a0:41:2d:55:d0:a2:
                    62:2c:92:37:18:2f:06:f7:87:2f:42:98:1c:2b:49:
                    dd:f0:13:ee:75:99:76:04:01:a3:ec:95:bc:a5:bd:
                    97:64:b1:74:3a:a3:df:e6:f3:be:96:97:6b:16:9f:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:94:A6:4B:EB:FC:BE:3E:1F:CA:0F:0F:C7:AA:72:26:26:99:A2:4A
            X509v3 Authority Key Identifier:
                keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:3c:55:c1:d2:87:7d:f3:b2:69:b2:28:bc:e0:c9:15:fe:
         8d:41:8d:a0:71:34:5d:35:a4:8e:2d:65:f7:63:7f:d5:94:61:
         8c:34:fb:9d:12:9e:ad:d8:7c:2f:30:99:96:c5:27:6f:5b:ec:
         34:b6:51:e0:c0:68:d1:c5:f1:c1:6b:7e:ec:5c:b3:04:b0:02:
         3b:29:07:66:b6:8d:1f:14:1c:3c:53:4d:fd:19:f8:de:01:9e:
         d7:18:5c:93:c9:ee:a5:35:5e:f9:b9:33:22:15:fe:0e:0d:0a:
         b8:81:71:b9:68:5e:cc:26:1d:61:40:ea:df:58:d6:d6:b4:2f:
         e3:5c:21:3e:ed:74:ed:40:b0:d7:da:05:e5:4b:3e:e0:2d:36:
         c3:2a:24:32:62:7e:db:2d:d9:02:da:2a:f7:a1:2a:63:1c:ac:
         c2:c5:a6:21:11:bd:ea:63:98:d8:64:b7:df:1e:f0:d2:20:fb:
         d1:00:81:7b:0b:cb:ee:8b:57:8a:42:e5:04:ce:7a:83:00:3c:
         4a:c0:55:55:c2:6a:98:8a:12:0d:fd:98:95:16:ab:2a:dd:46:
         41:d4:3e:ba:84:ef:73:2e:cd:df:b8:ed:4c:a6:5d:ea:01:2e:
         3d:5c:7d:0f:49:9b:d7:13:14:80:7b:5e:02:2e:1b:8e:bd:a0:
         da:7a:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:16:44 2024 by rpki-client on console-fra.rpki-client.org