Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
File:                     pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json)
Hash identifier:          3oGU5NAQ2ZgpaRvUoo6/7cLpV0SRI53H55mpkPolTaA=
Subject key identifier:   9E:71:B3:48:8C:B4:70:C7:B6:92:C9:E8:21:49:42:44:08:23:45:DF
Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
Certificate issuer:       /CN=a724383490a105bdc0d21597bfb1478ef04630b1
Certificate serial:       01935CC1E6C96BE6BE7B8B769CD52823E965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
Manifest number:          0343
Signing time:             Sun 24 Nov 2024 06:00:31 +0000
Manifest this update:     Sun 24 Nov 2024 06:00:31 +0000
Manifest next update:     Mon 25 Nov 2024 06:00:31 +0000
Files and hashes:         1: fFQjsTaAFHFAOZJFbSYYuW0ljAs.roa (hash: lEaMndftnCn93E0o5v6pJyu/niyBLkXX5AayNelw/xw=)
                          2: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: bojNhBlCUeyD2A2Ms/hT6s51KBfEquCgsC9kbJHSjzk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5c:c1:e6:c9:6b:e6:be:7b:8b:76:9c:d5:28:23:e9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1
        Validity
            Not Before: Nov 24 06:00:31 2024 GMT
            Not After : Nov 25 06:00:31 2024 GMT
        Subject: CN=9e71b3488cb470c7b692c9e821494244082345df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:61:62:6d:cc:61:51:81:cd:01:98:32:da:
                    f5:c6:f7:09:87:23:10:f4:2b:f7:05:5d:7d:c5:30:
                    25:cd:6a:cf:6a:36:b1:80:d1:1a:46:5f:52:59:db:
                    fc:1d:0f:18:20:88:e7:bb:fe:bc:ed:71:5c:de:47:
                    e6:31:3e:dd:34:13:35:18:aa:6c:80:9d:8c:d0:38:
                    75:ae:80:62:f9:48:30:01:70:9a:b5:f3:95:b7:ee:
                    2d:6f:f2:58:d8:55:ad:c4:59:44:93:65:a4:0e:83:
                    c5:37:f9:e1:89:cd:5e:76:04:08:c9:4b:23:90:ba:
                    48:6b:5c:34:9f:fa:b3:d7:fe:19:62:ff:49:f5:c0:
                    7a:37:d7:25:01:52:6f:ba:22:0a:42:45:ce:89:c0:
                    cd:6d:df:1a:48:b1:0d:17:c7:29:a2:25:3c:59:85:
                    58:f8:dd:9e:2c:b6:ba:53:f7:34:7a:65:d8:05:62:
                    15:28:43:d1:34:26:6d:d6:b7:d4:ef:71:e6:4c:a5:
                    2d:db:d1:d2:ab:9d:d2:bb:95:b1:b6:e8:3c:ef:d7:
                    b6:e6:7d:eb:60:2b:8d:e9:39:ff:22:88:a7:17:00:
                    3a:e2:d0:6b:d8:2c:34:ce:e4:80:7c:8e:bf:20:c0:
                    79:ca:a5:ac:63:c7:8c:da:bf:95:1d:ee:66:a8:97:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:71:B3:48:8C:B4:70:C7:B6:92:C9:E8:21:49:42:44:08:23:45:DF
            X509v3 Authority Key Identifier:
                keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:db:5e:4c:29:e0:cd:2f:2c:24:92:65:49:d0:78:a7:f7:
         dd:ed:c2:1b:e8:e3:ca:65:90:62:1b:82:f0:26:d8:bd:8c:83:
         03:cc:ef:6f:41:86:77:8f:06:eb:49:ea:36:da:cd:f5:1b:98:
         85:5d:a2:f3:0e:03:e9:13:8e:f1:d8:fe:ca:86:38:df:81:4d:
         d1:13:82:de:8c:b9:9c:1a:4e:4d:9d:fc:0a:90:60:27:68:6d:
         ba:7b:79:e6:8d:94:1b:09:70:40:88:dd:a5:d8:9a:89:22:07:
         7d:ff:73:c2:05:ab:3a:19:74:8b:22:66:57:ee:34:3e:28:1f:
         f1:05:0c:d7:a2:d6:66:bf:75:ba:05:0e:87:7b:d0:ac:b3:dd:
         6d:10:16:1e:ec:2f:7d:44:ca:bc:29:07:4c:b7:f6:0b:a4:f3:
         fd:5b:67:2e:22:18:0c:67:fc:32:f6:e7:9d:55:5f:9d:35:63:
         39:23:62:ec:d7:44:7a:8d:97:72:73:d1:90:41:ee:27:f0:6f:
         03:b0:be:4e:b1:93:b1:30:9f:5a:93:69:24:91:e2:31:2f:67:
         1d:6e:4c:ed:15:1d:83:a5:b2:cd:91:ac:b3:35:57:bb:b1:ae:
         38:ed:30:fd:67:1a:20:0f:e3:fe:f4:7a:1a:c8:a9:2e:87:1e:
         65:db:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 07:15:54 2024 by rpki-client on console-ams.rpki-client.org