Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File:                     1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier:          BFh3lnH46nxA7uEpk5Ud7rRyVKZNLSLyK4/Q1Gs7DlE=
Subject key identifier:   5B:F8:3B:0D:21:22:C0:B9:72:C5:61:9C:E2:6E:FB:54:BD:35:E8:F7
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer:       /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial:       0193504FC9B1973889287C34477B197BA784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number:          1373
Signing time:             Thu 21 Nov 2024 20:00:26 +0000
Manifest this update:     Thu 21 Nov 2024 20:00:26 +0000
Manifest next update:     Fri 22 Nov 2024 20:00:26 +0000
Files and hashes:         1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: MvSJLCm4OK55+dGaR09okp2J9PVb1lA/7f/nxVKRYU8=)
                          2: IQUY6hZIRlDD87bVe3Fdnfwe3cQ.roa (hash: yLkAZNO68WsfjR6Rq6ZHJh3pFlE8GxmK6nsysNArrSs=)
                          3: _D4aDdgXjfDC3w2x8vgzuFoc0_o.roa (hash: koCRhSdvjI0PZh70imVyxfMgs3ix1LtC+CWFg1BgnVk=)
                          4: afbV6p7LvuvEEyjVSuP-TtnXjNI.roa (hash: fB0GG3sjxq89aZXqrSQW/PX5OHHdGlDl7be2SycqE3o=)
                          5: cD1Y9rt792fQ-TazQwxzuH85B-g.roa (hash: /991gHkkNrAJOnOk8relhLJG9blT4WFiJp6SP0Leilw=)
                          6: g39fXJWWgdCYIuc9NcTAEnSqFg8.roa (hash: Pn0kxOQJZO5SyvSjWpMJbvsc56KeKH5wdJMaQRT8/1w=)
                          7: nc1mP5BfexK_yeyVv2zTWCwwwzY.roa (hash: zkO6Pll4dK4kF42u+5vqnHBGhM3Wi1hRQbcUmOb3Iqw=)
                          8: qOL2GhcvZfH468QXPCfSQ8BM5uY.roa (hash: nS7rWT9BeH8zXl6eqUXfOxluzVFf2FAVgD62ZhDeWtA=)
                          9: swHkjVq7RZNzEcVisnGFGjYgnHE.roa (hash: v2NIOt8hdQChRH7FztCLL0hgpR5RwLhWsaRLt1zTOYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:4f:c9:b1:97:38:89:28:7c:34:47:7b:19:7b:a7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
        Validity
            Not Before: Nov 21 20:00:26 2024 GMT
            Not After : Nov 22 20:00:26 2024 GMT
        Subject: CN=5bf83b0d2122c0b972c5619ce26efb54bd35e8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:36:6b:db:c8:98:af:7f:9d:18:d3:32:80:
                    a9:24:9e:c3:5c:b7:3b:7b:25:ee:cf:80:c2:81:67:
                    08:e1:a0:5c:00:19:16:76:29:12:b6:25:02:bf:36:
                    78:36:c5:5a:e4:27:3c:b5:d0:8f:9d:6b:8c:22:47:
                    a5:12:60:bc:c9:9f:df:96:d5:86:ac:a4:93:77:a0:
                    ad:b2:c7:83:9d:18:13:1c:72:ed:8c:0d:a7:65:e3:
                    11:bb:c8:4f:7c:4b:1a:cb:90:6b:1d:a2:c1:1b:4c:
                    0e:f7:d1:98:57:63:1f:f3:93:bf:46:88:46:69:09:
                    8b:ba:c1:27:78:97:a2:90:1c:d3:c4:57:13:22:9a:
                    11:c6:6f:cd:e0:eb:63:80:50:fe:e0:9a:b8:97:07:
                    ea:f8:f1:a2:f0:b2:7c:eb:51:1e:57:99:53:05:9b:
                    69:db:d0:07:7a:a3:24:f0:e8:4e:22:14:64:e6:2f:
                    c5:58:a2:cd:63:f9:c7:3e:a1:be:b3:8f:f9:46:3d:
                    3f:c6:24:a5:9c:77:3f:ef:0d:ca:23:52:bc:41:41:
                    07:03:5a:86:4c:6a:18:d4:fc:1b:57:2f:13:45:14:
                    2d:9f:6d:81:5f:f2:89:5b:67:80:37:24:15:c0:c7:
                    19:f1:22:e1:e6:af:03:d3:25:64:17:3c:37:ec:b4:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:3B:0D:21:22:C0:B9:72:C5:61:9C:E2:6E:FB:54:BD:35:E8:F7
            X509v3 Authority Key Identifier:
                keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:00:2a:61:1e:fb:78:f1:99:44:d2:7c:97:27:8a:4f:08:da:
         ce:a5:83:9a:d9:38:c5:e7:5b:8e:cb:3a:5d:5a:4e:c4:3d:d4:
         61:6a:67:97:7b:f3:80:0b:5c:2b:f5:8f:2f:15:ed:14:06:02:
         09:f9:ae:e3:96:d2:46:d7:75:84:c1:54:70:ca:84:22:70:3f:
         f7:0b:c7:a1:56:69:d2:e8:8d:a7:dc:d2:11:90:5f:47:1f:19:
         e2:81:dd:46:4b:8c:51:01:67:68:ee:ed:c1:78:cc:0c:6a:a6:
         c1:c0:31:37:d1:5e:da:bb:4a:55:90:64:79:1c:51:c4:4b:28:
         fa:ce:24:45:88:02:d6:7a:bf:a2:7b:8a:d0:44:22:19:94:ef:
         ef:d0:48:c1:86:df:80:ed:2b:67:ac:59:75:06:1c:fe:65:d5:
         9e:f4:ca:bd:f1:6c:7e:37:a6:4c:2b:0e:57:04:99:16:f0:d7:
         d9:12:58:32:dd:d5:78:2a:a9:ba:7d:19:59:8e:77:de:7f:87:
         cd:18:43:8a:c5:1f:97:ce:f2:5d:7b:65:e3:84:f5:59:6a:52:
         a4:32:4e:c4:8b:6a:33:58:30:40:36:a1:d8:0c:f3:a9:81:4c:
         dd:c0:9e:54:bf:24:b6:a7:a5:b0:5e:c2:77:7c:9a:00:34:b3:
         1a:25:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:00 2024 by rpki-client on console-ams.rpki-client.org