Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          0ytDWeLew663IwC7sSfKrQbJB5wSNQ4h2xvUQDbgQBc=
Subject key identifier:   99:AB:EE:60:25:11:D9:35:43:18:72:8C:73:6F:DE:D5:72:9A:97:F3
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       01938BF6D82B1A7D13AF01FE7887C0DC316B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          138C
Signing time:             Tue 03 Dec 2024 10:00:30 +0000
Manifest this update:     Tue 03 Dec 2024 10:00:30 +0000
Manifest next update:     Wed 04 Dec 2024 10:00:30 +0000
Files and hashes:         1: 0NffjqNFzP_lsfXiB6wiO4AqtgM.roa (hash: FDHNjaTiWZsof03netrS207D8fi1iOLMbI+ktbQolZA=)
                          2: 25vV_Hla1Uz5TU7dM8H6qVgL2To.roa (hash: f87ENI3MHssTgPGmoqzQl685IQTawybAiHOiQ2Su5oA=)
                          3: GdXmxikGrR1baabP1RdjyTSOe0E.roa (hash: bMDLnFU/nWtxQMlMMMqYNGRxtsP22ykzTqn5f4011Vs=)
                          4: baZ3lK0RUqMYBcv4_ZE-FMcKq4Y.roa (hash: Pye1uq2rRtMv4qWnzaKbY5tyIhueG8KOo2aZhtwf9lg=)
                          5: do3gPz0LlAN1X6Xy8mHxZSlWynU.roa (hash: W683wwuLTRU5fFhOj1GkPOHmi+O/0E5ne9oBPJq3mxQ=)
                          6: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: nH8mZRSIRIx8TU6yCszwa+ICcxLef8U4pbPR4Rc6Fts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:f6:d8:2b:1a:7d:13:af:01:fe:78:87:c0:dc:31:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Dec  3 10:00:30 2024 GMT
            Not After : Dec  4 10:00:30 2024 GMT
        Subject: CN=99abee602511d9354318728c736fded5729a97f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:4a:f7:4d:69:a0:9b:fa:92:97:ee:5b:17:
                    c0:d7:08:cb:c2:e3:d0:24:0c:cd:09:9e:14:2d:89:
                    93:a3:8a:0d:b8:8f:e8:dc:22:2e:45:e2:dc:d2:23:
                    69:ff:5e:50:8f:89:04:6f:56:99:91:77:ab:87:f0:
                    f8:c0:af:f9:e6:fe:85:82:03:30:c1:7b:0e:8f:f3:
                    9d:e3:3d:e5:6f:f8:e4:c0:3d:86:82:f4:ba:7c:52:
                    7f:94:68:66:d2:62:b8:05:50:e3:4e:a8:b4:d9:f9:
                    51:ee:8d:4f:a7:75:b6:8a:4d:8c:e2:75:49:5b:18:
                    b4:14:bf:31:d2:1a:1d:be:2e:bb:6a:55:ae:1c:03:
                    82:3c:af:b7:0a:84:53:8d:f0:41:b2:f3:3a:4a:ae:
                    a3:ca:1f:2c:6e:48:6d:10:d6:f6:2f:36:27:82:c5:
                    61:b1:d8:85:d5:ce:f6:dc:8a:64:eb:c0:4a:20:64:
                    ef:97:ac:9d:24:e6:6c:25:43:fa:6d:f9:88:52:88:
                    8b:23:09:b6:76:90:45:a9:9c:ec:36:cc:fd:1a:b7:
                    38:15:fd:d9:af:e1:e7:a4:9d:9b:0d:26:9a:23:7e:
                    1d:9a:4f:49:05:d3:53:48:a0:86:e8:22:e7:bd:5e:
                    00:2c:b0:69:d0:d6:83:4b:50:e7:30:a0:2d:2f:75:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AB:EE:60:25:11:D9:35:43:18:72:8C:73:6F:DE:D5:72:9A:97:F3
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:eb:42:df:07:7a:34:d8:7c:57:77:65:d2:73:f6:32:50:
         1f:aa:f2:ff:6c:87:a2:a4:ac:0b:f2:d1:92:0f:09:d0:99:57:
         1a:47:e2:c5:04:d5:74:7a:4c:f8:4b:de:4f:17:c1:6a:ec:a0:
         5f:8f:7c:75:4a:67:6e:68:b0:9e:a6:44:5f:77:b7:02:f5:d1:
         e8:60:ba:98:8c:d2:fb:4e:ce:cb:b6:18:5a:98:db:d1:b6:4c:
         dc:f8:aa:32:ff:7c:a7:fb:3e:2f:bf:9c:13:93:9c:93:e6:eb:
         ca:ee:b8:00:17:f7:06:68:32:07:75:a1:b9:df:5f:6b:f6:81:
         fa:ec:e7:c8:25:9c:d7:0e:5a:4c:75:84:f4:3f:97:5e:08:69:
         e8:d2:9b:46:57:e1:f2:43:4d:39:c4:aa:b0:32:89:b0:36:79:
         ab:21:96:c5:fb:de:0a:c1:d7:78:ed:09:1e:78:19:e8:de:fd:
         76:70:43:2c:31:d5:9a:5d:d4:b2:28:7d:4a:41:85:26:e9:b4:
         38:6c:51:05:ef:48:4b:9e:0d:8b:ea:8c:71:34:dd:88:f1:3c:
         c5:fc:41:c9:42:d8:ff:28:3f:25:3b:00:4b:bd:da:b2:9c:d4:
         db:06:82:c2:24:25:94:f4:cd:6c:74:4a:5d:d4:e9:ab:32:59:
         9f:42:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:32:05 2024 by rpki-client on console-ams.rpki-client.org