Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
File:                     dmAUOBTDTSksdavNtF-BgZU07cE.mft (raw, json)
Hash identifier:          UzUauwf9JvJlQTgzQDl3EmNnoy0exGSSVBRb5oGoL5s=
Subject key identifier:   15:76:C9:38:6F:3A:17:CD:B2:5F:CC:9C:80:13:E8:1B:82:34:73:0A
Authority key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Certificate issuer:       /CN=7660143814c34d292c75abcdb45f81819534edc1
Certificate serial:       019357D2727294410ED5D096E562C6BDE3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 07:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:29 +0000
Files and hashes:         1: 1-EqfCxtazmRby047XACJ7EU02U8.roa (hash: hLYLurzuflJAyseGcrvIYBCJYwPr9M8v06pu6l5Uuow=)
                          2: dmAUOBTDTSksdavNtF-BgZU07cE.crl (hash: G9xC9nfM4FKLrMMdpxJkrxhNFS8slZmhYcptE2wEpIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:72:72:94:41:0e:d5:d0:96:e5:62:c6:bd:e3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660143814c34d292c75abcdb45f81819534edc1
        Validity
            Not Before: Nov 23 07:00:29 2024 GMT
            Not After : Nov 24 07:00:29 2024 GMT
        Subject: CN=1576c9386f3a17cdb25fcc9c8013e81b8234730a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:87:ff:f5:b1:5a:19:51:7a:a1:79:11:98:
                    51:45:ae:1b:ad:0f:64:88:5b:49:03:71:e0:a2:ea:
                    17:60:55:d1:fb:20:a7:e4:a3:41:a7:33:2a:63:ed:
                    2e:80:80:d3:31:57:65:1f:3c:74:5f:80:da:7f:87:
                    ca:9d:13:79:b5:c5:59:9d:e2:06:14:c8:63:73:9e:
                    cd:18:a0:f6:59:cd:b5:4b:47:7b:1f:e2:fc:ef:a3:
                    37:70:30:5c:f1:4f:6b:d1:a2:16:87:54:7c:99:57:
                    bc:2c:5a:27:81:fe:76:38:2a:a4:01:1b:1f:62:9a:
                    a8:d6:de:fb:c0:c9:91:e3:47:11:99:a8:50:f1:ea:
                    a8:9b:07:47:36:1a:6d:09:75:43:b5:85:78:b6:92:
                    28:a1:19:1b:55:95:85:57:de:5f:75:13:14:83:fb:
                    db:2c:2e:1b:3e:de:00:07:4b:59:3c:e8:dc:fe:0d:
                    10:76:6e:e1:bd:7a:ee:27:b0:b9:26:0e:8f:e7:85:
                    46:5b:83:a7:be:8f:57:16:ce:b5:97:b7:46:44:d4:
                    e5:b1:c8:d9:0a:58:5e:e2:c0:77:c8:d2:d9:72:6a:
                    bc:cd:ac:b9:6b:87:b1:8d:3e:81:af:46:eb:ef:3b:
                    9f:3f:35:c6:ad:a4:12:ac:93:2a:e7:9f:66:3b:25:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:C9:38:6F:3A:17:CD:B2:5F:CC:9C:80:13:E8:1B:82:34:73:0A
            X509v3 Authority Key Identifier:
                keyid:76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:5a:8a:af:c9:26:64:7b:04:03:fe:c6:eb:81:f8:d0:dd:
         b7:bf:b7:4f:9e:1a:44:5b:a6:13:19:87:b1:3c:a6:8a:2f:ff:
         ce:3c:89:3e:7c:76:1d:74:27:1a:52:a6:a2:3e:70:ec:cc:14:
         8e:b9:4d:a2:3f:ea:91:8d:5b:2f:e5:cf:35:a5:60:0e:7d:28:
         e3:f5:ce:61:58:cf:73:82:0e:00:04:98:7c:12:a9:fe:10:7b:
         5e:e2:43:7a:52:ca:0c:d0:1b:fb:e2:43:a1:09:62:e9:e4:78:
         f0:f1:6b:66:d1:ca:d6:3c:a3:79:d3:bb:a9:95:3f:09:ea:96:
         bc:34:a8:51:97:77:4d:4e:4d:08:94:18:d1:4d:cd:a3:22:40:
         69:f4:0d:f2:ae:34:dc:84:84:49:cc:26:c4:fa:76:3e:aa:41:
         6b:ff:f4:ef:6b:6c:39:12:c2:a8:82:96:27:4c:6d:f1:6f:c4:
         4a:6b:43:bd:6b:30:08:b6:9c:74:dc:f5:34:23:9b:38:0d:cc:
         5b:86:4d:e3:23:3d:7a:30:ce:8c:97:f8:45:11:56:10:0e:65:
         bb:cc:6c:ed:61:12:59:5a:21:97:32:92:96:86:62:89:94:8d:
         57:ae:58:b2:8f:dd:b0:15:c1:4b:bc:60:cb:24:f0:63:3a:66:
         0f:7f:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:31 2024 by rpki-client on console-fra.rpki-client.org