Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File:                     GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier:          efdYVLUtF2sWCKWJac6fA47KTZVGrFmHQhWExSVYGX0=
Subject key identifier:   E4:E4:42:3A:77:E0:AA:FF:69:0A:04:D1:E6:FD:26:DB:B5:DE:8D:FE
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer:       /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial:       0193655778049A1AA902C756B151DA744546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number:          137F
Signing time:             Mon 25 Nov 2024 22:00:51 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:51 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:51 +0000
Files and hashes:         1: 1xSBnK06zgnmMDJ3Re6aQEEY1zI.roa (hash: EtvDHBcTeWPrUTgoVJwIbMg9Lwly0QyI1p4UpAp40/0=)
                          2: CkIHK0wA0UJm0dYjOPQNNyFVzsU.roa (hash: sAnhKZ0A/ayG/Eb2hV/3xCgSIsCbOguMXddp2081HdM=)
                          3: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: ka1Y2D/yFHKwT9NKZWQHiLYFmrhoUe5iDLOV8nbaOcg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:78:04:9a:1a:a9:02:c7:56:b1:51:da:74:45:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
        Validity
            Not Before: Nov 25 22:00:51 2024 GMT
            Not After : Nov 26 22:00:51 2024 GMT
        Subject: CN=e4e4423a77e0aaff690a04d1e6fd26dbb5de8dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:5c:73:31:af:5a:5a:2f:6e:af:48:db:19:
                    62:d3:de:9b:27:36:7f:cf:4d:71:10:ae:c9:ac:2f:
                    72:ae:98:4c:3d:64:ae:1b:70:57:30:eb:f4:25:51:
                    59:8b:ec:43:10:78:90:02:b0:a5:f8:f4:46:79:61:
                    9c:3c:de:4f:30:8a:fd:1b:70:9f:07:b8:09:84:e7:
                    49:45:f8:ac:18:2d:5b:af:99:01:6c:9f:66:d2:6f:
                    0b:f9:e7:36:88:3c:0f:31:39:26:25:65:d7:0e:4a:
                    5f:9a:96:a4:68:fd:61:bc:b8:0c:fc:b9:8b:9b:6f:
                    52:ff:cb:5d:ce:31:e3:18:f1:5a:9d:da:b1:f9:18:
                    4d:5e:53:7f:5a:29:a5:d6:c7:a4:75:fd:41:eb:ab:
                    d3:16:d9:68:41:1b:53:c8:95:91:2e:a2:52:1f:e4:
                    b6:ae:5b:86:5b:ed:52:d7:aa:87:3e:13:56:54:16:
                    1b:be:88:42:2f:31:6d:0e:e7:3e:0e:91:b0:eb:c9:
                    a9:41:ba:8b:06:f0:42:05:dc:b1:03:9a:1f:1f:cc:
                    1e:57:06:4b:72:ed:09:25:13:13:91:96:aa:76:6d:
                    60:fd:f3:77:55:34:a8:69:1c:54:a4:36:cf:42:c9:
                    d1:00:60:59:b9:14:eb:3f:ff:31:6e:36:16:1d:e8:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E4:42:3A:77:E0:AA:FF:69:0A:04:D1:E6:FD:26:DB:B5:DE:8D:FE
            X509v3 Authority Key Identifier:
                keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:42:bd:8a:5b:c3:9c:e5:00:e3:d1:a3:34:ee:f2:91:fc:
         6e:74:ec:17:a6:2e:7e:db:77:93:05:72:e8:33:db:66:cf:21:
         32:1f:c1:99:1a:eb:4b:68:80:84:b5:28:e7:fb:de:ae:5e:01:
         bb:69:2c:55:f5:43:0c:62:76:eb:44:ec:7b:a0:c0:99:1c:27:
         a1:b2:f6:e7:e2:7b:e0:23:39:50:e6:08:20:29:be:d2:b2:30:
         30:8b:97:25:02:af:57:b6:2e:aa:8c:3d:7e:79:b6:23:0b:fd:
         a2:8c:a1:83:14:d3:b4:bf:92:ee:55:ba:0f:87:fa:24:5c:95:
         90:50:18:2d:18:e0:e4:1d:68:40:28:fc:12:34:dc:54:d4:3a:
         6e:fa:dd:4f:57:0f:98:b3:ba:bf:6b:63:97:1d:ab:cd:25:c0:
         f2:bd:66:86:52:93:bd:6e:67:20:74:39:8f:29:82:5d:5d:86:
         03:9e:ca:8a:29:01:86:e1:56:f2:21:f8:30:6a:c2:c1:89:e3:
         89:5f:12:8a:e7:73:a8:9d:51:2e:37:15:99:6f:cc:8a:a4:6d:
         e7:eb:22:b7:f4:a4:ad:f1:bd:3b:21:a0:04:9e:c0:e7:6c:2a:
         90:9b:09:51:1f:4f:d2:2b:f2:4a:96:ae:55:2e:27:8b:b7:7a:
         64:13:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:55:42 2024 by rpki-client on console-fra.rpki-client.org