Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          tdel6FvpKpmS5Q2JOAEReL9OddywXUUbAi8QkuI5f+k=
Subject key identifier:   1C:30:DD:A1:41:13:A6:D9:90:45:98:D3:87:B7:AD:75:DC:66:BB:AF
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01936368A6E9A39CDB9B1AFEB46D186EC17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          0207
Signing time:             Mon 25 Nov 2024 13:00:23 +0000
Manifest this update:     Mon 25 Nov 2024 13:00:23 +0000
Manifest next update:     Tue 26 Nov 2024 13:00:23 +0000
Files and hashes:         1: 56u9DaVBFRifNCwM6TBFPNa8wBY.roa (hash: J+HX3s34aq+tkfWDVNAnSUmJ7sHELSBA7NcfzrA8ovk=)
                          2: D5sPXTxAF7C_4o7Bt4vlbo_P5TU.roa (hash: GSuj11Nqcti2Syrflxs5dx/e6LdTXErsN65n+JcCoME=)
                          3: Dufyk__ztvQ_zIYPO4_dTXTdsu0.roa (hash: 1Cmm/CrQovMHQ4KqKsNZRNP784G7x+x/rs8KACQl8+s=)
                          4: sTjvOTbsn_PO8aEAx09eJEQOKno.roa (hash: BRe1wHr61fjpNtHnYMgo7vBeCstu67YcnAMUbd0U0bk=)
                          5: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: /4HyFtmI329zEdGAJA5xLRMVofaVmEUEGmNesHf36SA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:68:a6:e9:a3:9c:db:9b:1a:fe:b4:6d:18:6e:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Nov 25 13:00:23 2024 GMT
            Not After : Nov 26 13:00:23 2024 GMT
        Subject: CN=1c30dda14113a6d9904598d387b7ad75dc66bbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:49:a8:4b:c9:e8:b2:f7:72:bd:32:0c:ad:
                    b3:ca:2c:1b:54:3c:d6:fe:c6:fa:10:ab:ee:48:cb:
                    43:67:3f:b4:97:bd:09:7d:22:1b:bb:96:07:c5:ed:
                    96:99:f7:3d:25:4b:e0:a7:fc:35:2e:99:96:25:e4:
                    78:17:8e:84:02:7d:31:51:15:a5:fe:12:74:42:0d:
                    1b:3f:24:fc:d1:34:26:d7:3e:2f:ec:b8:ca:2a:c8:
                    b1:6b:d8:1f:78:08:8f:2a:e8:de:17:3f:a8:30:62:
                    5d:2e:2e:fc:1f:e4:26:46:94:2a:3c:9d:1d:76:bc:
                    b0:96:c3:9a:d9:31:05:8b:4a:86:7e:0c:b0:3b:86:
                    5f:2b:29:b6:7d:74:2a:ac:b5:c1:8a:7e:df:99:e8:
                    82:cc:ba:35:dc:57:35:58:08:a6:a8:1a:30:ba:f2:
                    cd:2b:e8:04:ad:f6:16:8a:6b:2d:8a:e6:c3:77:bf:
                    69:af:f7:51:e5:40:77:9d:bc:23:f8:95:e7:f2:29:
                    37:05:8b:1c:57:39:1e:99:9d:5a:21:88:d8:38:c4:
                    1b:bf:79:e1:22:47:f6:cb:eb:dc:3c:98:62:ab:02:
                    28:44:22:5d:c2:fb:10:d3:f7:92:d2:a5:c5:db:87:
                    de:a8:a5:fb:66:57:b9:60:b6:42:b8:79:9d:4c:97:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:DD:A1:41:13:A6:D9:90:45:98:D3:87:B7:AD:75:DC:66:BB:AF
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c1:02:ea:c4:8a:46:31:f0:3d:aa:5b:0d:e3:aa:5d:6f:a6:
         38:1b:fc:e2:fe:c2:86:97:66:c3:4b:30:cc:b7:c9:77:8c:ab:
         6a:fe:8d:4d:ea:3d:32:35:e2:ef:3f:5d:9e:75:ba:e0:f4:34:
         a0:fd:34:41:1f:a9:54:23:5f:89:ec:bf:4b:a8:51:03:52:a3:
         88:40:95:73:ae:7a:6d:0e:b9:ee:30:cf:ae:d6:50:59:29:e7:
         c3:32:1c:a3:e9:68:4a:cf:bf:bf:d3:4f:85:fe:f6:46:0d:be:
         ec:75:37:9e:41:d9:41:74:f9:17:35:04:60:4a:d0:9a:2f:d2:
         01:d1:36:e9:1f:5c:05:0d:5c:cb:72:1d:6d:d9:46:22:8f:1f:
         d1:7f:3d:55:0f:52:00:26:96:33:95:a9:09:8d:f6:6a:1d:30:
         a0:19:e1:4b:fa:41:b1:67:ea:9a:4c:d4:2d:d6:ff:8f:83:73:
         e4:bd:46:65:3d:0d:26:c4:d9:29:88:99:66:b3:68:d1:86:3c:
         8f:82:f1:1e:a6:fd:02:1d:23:d3:d2:d6:b4:43:15:0c:9d:3e:
         ca:30:79:60:bf:f4:9d:1b:c7:8f:6d:ac:cb:21:69:9e:b4:89:
         14:9a:5e:62:50:b5:53:9d:e3:01:8a:e6:52:c1:7c:58:49:ea:
         f6:b5:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:55:48 2024 by rpki-client on console-ams.rpki-client.org