Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
File:                     sUJ73NR8eEMfZioIWJAFrLULk0E.mft (raw, json)
Hash identifier:          ztPXnJRGW+lkk5QU9j86acboaVhgGmmP6wdfkpjq1ss=
Subject key identifier:   DC:22:6D:7B:67:81:9E:AC:B1:2B:4C:13:09:C8:0E:60:8D:3D:9E:3B
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Certificate issuer:       /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial:       0193553FA80BF017ADA4B5FDD6187EB40E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
Manifest number:          0936
Signing time:             Fri 22 Nov 2024 19:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:55 +0000
Files and hashes:         1: INBgK1MYGzmciVM3XCCmgc0AJ4E.roa (hash: uo5/TOOJj1ebGbYc/0PMkFiqgxM2KczSp2bMmpi323I=)
                          2: sUJ73NR8eEMfZioIWJAFrLULk0E.crl (hash: 9sn00mJQHifLrHpjloqVyIHR0QDJDwvCxcHGxyWwaP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:a8:0b:f0:17:ad:a4:b5:fd:d6:18:7e:b4:0e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
        Validity
            Not Before: Nov 22 19:00:55 2024 GMT
            Not After : Nov 23 19:00:55 2024 GMT
        Subject: CN=dc226d7b67819eacb12b4c1309c80e608d3d9e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:1e:99:07:8f:e0:f4:29:df:e3:87:48:a5:
                    c9:26:2f:46:f9:04:3f:48:03:18:fa:d6:ec:d3:0d:
                    1f:3f:8c:94:c3:c0:a1:6f:ff:bb:34:fd:c5:80:99:
                    02:c1:d0:1d:44:a6:8e:32:30:bf:77:84:74:20:c3:
                    cb:a6:86:5d:8a:81:ca:06:4b:a8:7c:e5:f8:e0:dd:
                    a3:2c:b4:55:01:22:e8:b8:ac:80:fd:42:cd:b3:65:
                    c3:83:e7:76:08:cd:6e:f0:ab:e9:6e:0a:82:4f:75:
                    bf:23:8b:61:e7:6f:df:90:79:f7:b7:28:10:af:87:
                    67:78:36:c8:ff:02:fa:76:c1:52:fc:be:18:ca:61:
                    7d:0c:44:10:84:a1:0a:84:2a:9c:19:02:fc:9c:e2:
                    a8:5c:86:f0:8c:9e:4b:d4:06:a8:ba:38:b9:c1:3c:
                    f8:a4:0c:33:f4:18:9a:21:50:31:92:67:66:b9:e2:
                    fb:93:44:d2:b7:01:a8:bd:31:77:f6:cc:98:33:12:
                    2c:e5:ec:76:31:e1:2f:7b:92:7c:28:be:ec:5a:16:
                    04:8f:20:56:8d:21:6c:7e:04:e9:8e:70:8d:2a:07:
                    e4:c1:fb:99:c4:e8:4e:ac:54:b9:e2:9c:54:1b:a2:
                    7b:2c:4e:2c:35:8b:7b:27:13:06:f5:75:67:dc:c7:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:22:6D:7B:67:81:9E:AC:B1:2B:4C:13:09:C8:0E:60:8D:3D:9E:3B
            X509v3 Authority Key Identifier:
                keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:01:d3:ab:c6:4c:f2:c8:fc:c8:5b:86:5d:d8:7a:0d:40:
         d2:20:c7:81:4e:98:e6:7c:9f:4e:c7:b8:a3:f4:dd:b8:ca:b2:
         9a:7e:4f:d4:ae:ea:bb:53:ad:28:56:12:2c:92:74:a0:24:8b:
         55:41:aa:66:e2:3a:d1:34:bd:e6:0d:4b:a0:46:4d:65:57:4b:
         d0:95:14:12:26:f4:f1:a2:05:5b:b0:27:c4:91:8f:e8:6a:19:
         90:03:e7:4f:97:48:df:b1:f7:f0:4d:73:09:f6:4d:24:59:00:
         83:7d:80:85:88:26:47:a3:fa:f0:b5:f2:a0:52:92:7c:41:78:
         e1:2d:bf:e3:a8:62:a4:ee:59:07:bd:37:57:60:65:32:4c:25:
         6c:41:33:e7:a6:cb:e5:85:a5:56:a0:0c:e6:a0:ed:76:7f:ca:
         61:d6:3d:fb:93:7b:29:a8:e5:93:0e:fc:a8:34:f3:99:dc:23:
         0c:4c:33:af:26:a2:fc:1d:be:6d:d1:34:42:39:5a:b7:6c:51:
         c0:c4:87:c5:e9:46:7b:72:a6:e3:df:fa:92:5e:3c:30:4c:9b:
         8e:35:b7:ab:7f:35:9c:2a:91:6c:54:48:6a:2a:f5:7b:44:ba:
         86:a0:d2:ed:2b:53:bc:75:75:1f:25:e1:b7:95:8d:8f:00:11:
         5a:7f:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:25 2024 by rpki-client on console-fra.rpki-client.org