Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
File:                     i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json)
Hash identifier:          wOZda9V6rcQQbr9QfqGpzepNgW9iWwVYhMjJLckPsx4=
Subject key identifier:   51:2F:34:D4:3B:B5:67:7F:73:FD:E1:BD:93:38:C7:F0:6F:43:7C:13
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Certificate issuer:       /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial:       0193572D8E7C0D71439AFAD83EBF340B2894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
Manifest number:          0FAD
Signing time:             Sat 23 Nov 2024 04:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:23 +0000
Files and hashes:         1: GU7LJlWOmvKqbfhyTHULbE7Q3JI.roa (hash: G9pBM5B2pGYho2cPCNbIlsyWeIwomP7LULNZf88ttpg=)
                          2: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: X9+o8V8Up+AV9iV2veOXe4WAHUekTXVXQ2jfrNcYtgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:8e:7c:0d:71:43:9a:fa:d8:3e:bf:34:0b:28:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
        Validity
            Not Before: Nov 23 04:00:23 2024 GMT
            Not After : Nov 24 04:00:23 2024 GMT
        Subject: CN=512f34d43bb5677f73fde1bd9338c7f06f437c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:8e:df:9f:f2:3c:ab:89:68:ef:8c:e1:91:
                    f9:29:ae:9a:9d:c3:d4:ce:e6:a8:49:60:85:ea:8f:
                    4b:48:43:f7:8d:9e:e6:ae:88:31:a1:60:78:b3:b4:
                    93:7b:01:a5:8a:48:9a:80:63:21:fc:4c:0e:51:d2:
                    11:7d:b8:30:05:64:ca:19:b5:4b:cb:bc:78:f5:48:
                    88:26:9b:4b:75:b8:8b:72:99:61:f8:2d:dd:6a:03:
                    b2:ff:fd:b9:25:d4:67:1e:c0:6a:25:9a:24:78:13:
                    31:a2:4a:7d:ff:88:16:7f:60:ab:74:0b:02:95:e4:
                    61:cc:17:67:b6:55:e8:21:54:8f:18:62:26:21:c3:
                    a5:5d:b1:f6:7d:28:6c:66:38:96:f9:af:5c:1a:1f:
                    58:4f:21:9d:45:c6:c5:48:01:26:85:3c:44:d5:fe:
                    45:99:31:40:c0:f5:c4:0a:b3:08:ee:cd:91:cd:23:
                    53:2b:c5:e1:15:32:ae:b8:91:43:06:f3:2c:ee:bc:
                    da:b1:57:4c:0e:bd:cf:49:81:fa:61:a6:39:f7:28:
                    28:c6:9e:a8:ab:67:dc:7d:ae:26:0f:38:71:11:48:
                    02:2a:d9:7c:42:48:54:b3:b4:3a:e1:29:39:10:de:
                    87:83:61:55:86:43:87:c8:8f:8f:9f:3e:05:33:2b:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:34:D4:3B:B5:67:7F:73:FD:E1:BD:93:38:C7:F0:6F:43:7C:13
            X509v3 Authority Key Identifier:
                keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:89:19:ac:67:3a:45:c1:07:d0:62:5c:b5:72:a2:9c:fc:
         ad:4d:6d:c6:1d:5c:1d:58:f7:ef:e2:9a:10:ea:5e:67:fb:b2:
         fb:2a:47:c3:54:54:d0:50:49:74:64:57:40:ca:55:3e:22:b2:
         7b:00:9f:d7:97:1d:87:cd:66:f2:1c:e2:d5:8d:73:d7:00:4a:
         c0:73:40:63:0d:cf:93:12:8b:b2:77:55:9c:a5:af:bc:db:82:
         20:c6:2d:32:cd:c0:ac:00:bc:a7:d7:31:11:5d:5d:05:90:c4:
         0a:b8:9d:a1:a4:aa:50:bf:08:91:ca:65:29:63:ab:f6:e6:a3:
         c0:d3:ac:57:1a:50:7b:37:d9:e3:0a:e7:23:36:29:06:1e:3d:
         07:ee:3a:42:82:01:ab:4e:98:4c:cb:08:6f:c5:60:de:e3:80:
         2b:d5:f8:9c:a7:90:99:1a:db:53:c7:21:1c:93:3c:85:41:87:
         91:ed:ae:70:b8:4d:0c:04:bb:c7:f2:4e:76:79:b0:45:77:e2:
         00:fd:cd:9d:1a:a9:a9:c5:6a:bb:02:82:53:62:db:a9:2f:95:
         aa:9d:a5:31:95:ea:03:a1:c5:88:0d:2e:e9:7f:d4:88:2d:2e:
         d7:87:ca:55:1b:6a:57:08:d4:34:48:99:97:65:4d:0e:30:b8:
         50:a1:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:23 2024 by rpki-client on console-ams.rpki-client.org