Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File:                     GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier:          vx/3MCJN0cMdN3y3IPJLtzi437tQp6bMCxhGBqsA154=
Subject key identifier:   52:77:1E:B8:1C:35:48:95:5B:10:9D:0D:77:33:70:57:4A:13:E9:A7
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer:       /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial:       019358405FC6E9E1B9077B78391521B13B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number:          0808
Signing time:             Sat 23 Nov 2024 09:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:33 +0000
Files and hashes:         1: 53LkXT_lerus2aC8etQSPzLJ2QM.roa (hash: bXL0RXAM66OLEe7YM1glMFhyT+w6TGqmMoBwRe+H92Q=)
                          2: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: H1kCiakFh7dTLhPmIucjrIHG8bVtryaQ9Ioj3RHDc+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:5f:c6:e9:e1:b9:07:7b:78:39:15:21:b1:3b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
        Validity
            Not Before: Nov 23 09:00:33 2024 GMT
            Not After : Nov 24 09:00:33 2024 GMT
        Subject: CN=52771eb81c3548955b109d0d773370574a13e9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:0f:cd:33:cd:46:8f:f3:fa:97:4a:da:a7:
                    b5:3b:c8:a0:26:3d:4b:23:c2:1f:ac:20:06:3a:54:
                    a6:b2:a9:55:28:39:3a:8c:02:eb:4b:32:7d:7b:42:
                    6e:a6:58:c7:67:84:65:e0:e5:40:b0:0e:25:43:e6:
                    89:16:85:ea:56:b0:2d:2b:f8:0c:3b:8e:09:c7:d7:
                    83:5a:35:8e:e3:b7:41:a4:8a:e7:76:1b:ce:7c:c6:
                    a9:0d:1b:f5:5b:39:08:44:65:2e:52:81:b1:a9:a3:
                    51:d2:da:22:e4:eb:5a:74:59:77:3e:62:34:30:90:
                    3f:44:1f:c4:84:83:4b:49:63:d0:b9:35:a5:13:96:
                    6b:c9:63:3f:0c:94:27:aa:71:c1:b5:2b:c4:ae:79:
                    5e:5c:69:a3:8c:a4:c5:86:4c:b9:31:7e:91:ac:bf:
                    bd:76:bc:ce:53:d5:d9:ad:5e:79:28:19:8a:7b:a1:
                    85:d6:f6:65:ee:6d:02:16:ad:e9:aa:4c:38:3f:96:
                    04:1b:aa:21:b5:c4:db:b0:22:38:57:e8:43:0f:bc:
                    3f:ff:34:85:20:1b:54:93:ce:ae:89:91:ab:11:14:
                    d2:3b:06:54:e6:75:37:66:76:35:d6:7f:3f:fd:49:
                    c7:d2:90:2c:1c:67:cc:eb:c4:b8:14:a9:76:91:fc:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:77:1E:B8:1C:35:48:95:5B:10:9D:0D:77:33:70:57:4A:13:E9:A7
            X509v3 Authority Key Identifier:
                keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:75:a3:79:e8:7c:fa:53:48:67:df:54:49:8d:a4:2e:5f:
         ba:d8:41:b6:6d:aa:55:e7:f1:17:1b:2e:6e:4b:c2:90:3b:d6:
         ec:82:bc:8f:07:5b:27:fe:e9:24:be:29:1a:61:23:d1:82:87:
         d9:61:ec:f3:65:86:d8:26:e3:bf:30:7f:a9:7d:92:ae:74:46:
         b4:f4:e1:f4:02:17:66:e7:6f:95:e4:22:fe:44:d6:5a:bc:70:
         f3:9a:62:74:0d:7f:25:48:c8:bb:ae:98:21:26:38:2b:35:db:
         95:c3:58:3a:43:88:8a:2f:10:11:28:65:38:fc:f1:6e:29:b9:
         97:d0:fc:3d:2c:01:6d:4c:45:e8:c5:93:1c:99:57:79:ff:af:
         b5:44:b6:3c:7a:6e:a4:54:15:30:d3:48:b6:32:e2:e9:32:8a:
         4e:e8:c4:d7:b8:04:f9:be:b9:74:c4:d7:78:0b:79:ba:91:bd:
         6a:9a:b9:5a:d1:a2:9b:56:d6:e0:b6:a1:fe:75:1d:27:0e:5f:
         27:36:0c:3b:f5:2f:3f:18:f9:72:f2:41:d9:61:eb:41:9f:b0:
         9a:9f:e2:e3:56:ce:e2:9c:42:41:a0:16:89:94:25:00:b1:5a:
         e8:d8:9a:83:35:b1:7e:6e:84:4f:83:37:09:ae:bc:6a:43:65:
         21:9e:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:31 2024 by rpki-client on console-ams.rpki-client.org