Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          EWiTZ8MILVVFP/FEIm94Xv1DeF5h+uj7J8Vfcy8/FZQ=
Subject key identifier:   AD:86:93:3E:DC:88:80:95:6E:16:6C:34:70:96:C0:BF:91:17:81:20
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       01935350E297690DA3217064DC487062AE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 10:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:29 +0000
Files and hashes:         1: 8JxzypQVwuc8HLJDSgWq3HARqu4.roa (hash: AoVVUUyhhwTPHfgdjmL5oWfDC6j824RCWlR/WG6WaWY=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: HptV5R5UXO3uHcUBCIA+nhMh/54RMY3g3Mi6lworCZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:50:e2:97:69:0d:a3:21:70:64:dc:48:70:62:ae:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Nov 22 10:00:29 2024 GMT
            Not After : Nov 23 10:00:29 2024 GMT
        Subject: CN=ad86933edc8880956e166c347096c0bf91178120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:63:07:70:d8:0e:3a:00:89:80:1e:fa:5e:
                    22:bd:5f:86:48:6e:8e:67:66:bd:70:e1:98:7f:09:
                    21:46:f6:d3:4d:44:23:10:3c:27:8b:29:a6:6f:c0:
                    1e:c6:f9:6d:42:19:e2:c2:d1:e6:3b:82:f8:69:82:
                    24:c8:6c:4e:cd:e6:24:2b:7e:c2:ed:9d:37:57:0f:
                    d8:d7:f0:98:6d:33:22:a0:03:e4:92:39:84:cc:5e:
                    e9:14:48:10:80:fc:ad:ed:14:7b:c5:ea:70:ff:5c:
                    40:15:f1:a9:5d:a6:a0:62:ff:1c:83:1f:c0:e3:9f:
                    fd:1c:28:19:68:af:e0:d8:a8:e1:29:10:0b:1d:09:
                    82:9e:44:0f:d6:94:df:9a:8c:09:fd:98:ee:8c:90:
                    1e:f3:13:62:ed:6a:62:29:20:fe:9f:04:39:c1:72:
                    25:ec:d5:53:25:61:af:d1:19:e1:6a:e9:26:18:0d:
                    1a:26:d0:8c:8c:6c:8f:2d:56:3a:42:69:3d:8b:a0:
                    44:f1:d0:7d:2d:48:12:53:b8:35:15:cb:89:2e:b1:
                    8d:e3:8b:75:2d:51:99:15:a2:71:2a:c2:90:2c:36:
                    ba:a9:23:eb:ac:48:a1:72:f5:e4:75:e0:7a:6f:3d:
                    ea:a5:55:0f:3d:0d:7a:64:17:93:79:f9:1c:3a:5c:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:86:93:3E:DC:88:80:95:6E:16:6C:34:70:96:C0:BF:91:17:81:20
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:36:20:63:05:4b:5e:a7:ef:0a:bc:cf:a5:fa:62:d6:cb:d3:
         1e:2d:3a:ab:e5:93:6e:ed:fe:0a:8b:8a:ae:78:19:a6:36:6a:
         cd:a5:06:69:16:93:ee:6e:b0:85:ad:76:26:7f:3f:5c:88:71:
         21:d3:f9:4e:b5:f2:c8:fc:6c:bf:99:24:99:aa:f4:66:6e:d7:
         69:bd:92:fc:ae:34:cd:92:4a:22:08:d9:ce:2d:4d:bc:13:e8:
         3e:88:83:44:9f:4b:a7:24:a3:7b:94:89:43:74:e8:b4:bb:f1:
         24:ec:27:8d:60:bb:a3:15:b9:62:ea:07:d5:3c:fe:32:8f:e0:
         64:ef:82:ee:2e:3e:4c:b0:8e:cd:fe:7a:ce:b1:ef:a1:8f:be:
         74:0e:ab:b9:ce:e7:79:67:6d:de:f5:9d:59:dd:29:7e:ce:2e:
         7f:f7:a9:93:be:5b:c6:af:23:6e:4c:bb:05:70:75:02:36:18:
         02:4e:07:72:05:11:64:76:cf:35:65:7f:12:f2:b7:04:bf:4b:
         92:9d:26:44:fc:31:cf:38:be:ca:1b:fc:63:10:8a:ee:ef:d5:
         3b:51:df:20:79:08:0a:51:51:84:d6:08:db:14:5c:f8:1c:fb:
         79:3e:e8:5d:02:9f:e2:1f:51:2b:cd:67:bf:92:81:30:d4:1f:
         9a:2e:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:34 2024 by rpki-client on console-ams.rpki-client.org