Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File:                     ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier:          Omt9EjxxD0EVtA+/nhklNv1X9D/ScsOcN2Ygd5hsj7E=
Subject key identifier:   39:6E:F7:73:81:23:39:DF:0E:60:44:79:7A:93:40:60:2D:6B:A4:F2
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer:       /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial:       019357650869C4473FBE107734C11705BEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number:          0808
Signing time:             Sat 23 Nov 2024 05:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:59 +0000
Files and hashes:         1: b5yPqPXQ-DqOy854saIRS5R5PkE.roa (hash: zHKPPnU7zt0NwZ7yJuRtdxa5WoYKMxFcK1gRRocQDvQ=)
                          2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: Esi2eKaw3WkHY8tg7Sde67ByOc6iaVy3gN8hFldgaWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:65:08:69:c4:47:3f:be:10:77:34:c1:17:05:be:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
        Validity
            Not Before: Nov 23 05:00:59 2024 GMT
            Not After : Nov 24 05:00:59 2024 GMT
        Subject: CN=396ef773812339df0e6044797a9340602d6ba4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:39:25:9f:eb:e9:8d:2f:32:4d:8b:18:b6:
                    dc:9e:13:a3:65:5b:27:95:ea:72:80:22:0e:57:8f:
                    9e:c7:2f:a3:ae:9d:24:9b:96:8f:d9:0f:f2:e0:17:
                    93:c0:81:f0:42:d7:44:40:4f:ad:dc:8a:b4:10:63:
                    97:e6:6d:20:7f:39:2c:91:4a:cf:52:bb:e6:c0:be:
                    cb:ca:30:af:7b:2d:cc:56:e0:f5:eb:8b:ea:4e:e9:
                    fc:c9:f7:cf:12:27:05:1f:02:1f:bb:91:91:ab:0d:
                    18:39:95:29:a0:db:75:c9:84:cc:13:f3:d9:6b:ac:
                    21:58:53:35:ef:80:52:6d:05:12:43:b9:60:8d:90:
                    5e:9f:35:02:87:9a:6d:ff:0e:d4:65:f9:c8:2a:57:
                    9b:e8:4e:0c:32:63:75:00:e1:62:05:bd:75:3b:ff:
                    d6:8e:28:19:3f:63:d9:f7:de:02:ef:b3:1d:4a:50:
                    75:85:6b:26:c7:39:a3:89:ff:1f:bf:14:71:49:41:
                    55:be:39:4e:fd:06:25:26:c9:b8:b5:e2:dc:c8:89:
                    2f:47:1c:ca:80:f5:80:17:0e:01:c9:03:8d:e8:38:
                    7b:01:2d:17:d4:c6:75:86:2b:b9:c1:eb:de:f6:dd:
                    f1:0e:da:4e:42:d9:3d:85:07:3a:0a:48:c8:6a:76:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:F7:73:81:23:39:DF:0E:60:44:79:7A:93:40:60:2D:6B:A4:F2
            X509v3 Authority Key Identifier:
                keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:41:10:c9:4f:dc:6a:c5:13:1d:bd:69:77:93:6f:73:42:c3:
         dd:92:3a:d5:26:9d:56:d2:6a:74:09:db:db:3d:67:ce:b2:fc:
         65:24:3a:ec:ca:9d:7c:2b:d9:d6:0d:32:92:32:65:7d:c8:23:
         40:9a:0b:71:a2:32:3f:ae:9c:f3:d9:ad:d2:af:c2:44:91:07:
         ac:4f:55:e7:ec:01:1f:ff:57:35:a3:bc:82:65:43:80:85:f3:
         58:18:5b:01:5a:3d:a8:34:e0:d7:60:81:95:48:e6:e2:54:67:
         d4:78:3b:a2:9c:ba:b6:18:bf:40:98:8e:7d:9f:7e:2a:da:09:
         51:dc:dc:7e:2c:58:f4:a9:d0:8b:3d:09:4c:82:10:df:d2:bf:
         8b:7e:ba:73:73:67:c3:16:b9:13:16:7b:9e:a6:02:8c:4e:10:
         d9:31:03:8e:23:96:16:57:ce:75:a5:25:19:e1:a5:5e:17:f3:
         d2:c4:fe:d8:a5:0d:9f:b5:85:38:70:cc:f8:61:2f:b5:94:46:
         4a:d7:1e:e6:90:26:71:bd:a1:83:82:2f:96:89:8c:90:b8:9b:
         52:f6:a1:87:12:ec:00:cf:be:7c:23:c9:ff:11:07:8b:ae:08:
         62:87:f7:1e:ea:69:cf:c4:ad:f1:28:4b:0f:6e:d2:ce:31:f0:
         5d:95:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:24 2024 by rpki-client on console-ams.rpki-client.org