Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          bcTZYSgBCbEj5ANXrOia+IOuua6cNMDhoTkuvYbZ9KE=
Subject key identifier:   45:BC:A2:A9:05:9F:B2:CC:30:46:28:AD:57:94:76:0F:DC:20:8A:69
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       019352AC78C83EC00AE813045B06742F36AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          130B
Signing time:             Fri 22 Nov 2024 07:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:55 +0000
Files and hashes:         1: 0Nd21FLbycmx78NdUehfrieGVPQ.roa (hash: 10CZZgm4EZ9W4TjZxDGmXh2eb3ZS2rzAVekWW6U6GTo=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: gdQVo6uCQQr3Z8iGVQhvdWL0Xa/vmmQrz10fCM3Eezg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:78:c8:3e:c0:0a:e8:13:04:5b:06:74:2f:36:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: Nov 22 07:00:55 2024 GMT
            Not After : Nov 23 07:00:55 2024 GMT
        Subject: CN=45bca2a9059fb2cc304628ad5794760fdc208a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:60:d3:4e:44:b7:89:46:3c:72:ad:cc:a2:
                    7a:0d:46:05:fb:df:9f:fa:fe:09:6e:69:4b:9b:02:
                    7d:b3:bd:78:d1:71:9e:0b:4e:7a:12:4a:c0:5f:ff:
                    c7:48:54:60:03:d7:d4:55:c7:b1:c6:d4:ac:b6:41:
                    7e:33:be:35:74:5e:48:2c:2c:bf:36:8d:bf:e4:cb:
                    02:21:e8:2f:e8:06:dc:bb:8e:a3:6c:79:78:ff:e3:
                    41:49:37:d8:b1:fe:cd:7f:ec:e9:90:e4:ac:1b:8d:
                    18:cb:93:44:fa:ec:f3:0d:6f:cd:40:4f:45:6e:9a:
                    1c:94:91:fb:e4:58:97:91:71:38:03:30:4e:d3:73:
                    7b:f2:f3:aa:e9:05:93:a2:f3:c3:27:fb:88:df:37:
                    70:3f:0e:87:bd:4a:8c:fe:54:a1:68:a8:08:41:7d:
                    f1:08:16:a2:a1:ec:21:77:2a:15:32:4a:cd:79:3c:
                    20:6a:bf:ed:d2:a9:29:fe:46:38:bc:8b:20:a5:e3:
                    43:ea:88:48:98:c8:f2:82:75:f1:30:e3:af:d9:43:
                    4c:d6:90:0b:c4:91:43:ee:df:4c:80:b3:b5:18:ad:
                    a2:5d:07:42:ae:cf:41:17:2c:6b:40:75:0a:6f:2b:
                    5a:86:d9:9e:94:56:bb:ab:64:00:9c:fc:44:e1:bc:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BC:A2:A9:05:9F:B2:CC:30:46:28:AD:57:94:76:0F:DC:20:8A:69
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:e3:3d:96:d7:1b:0a:74:43:f4:b9:54:ac:fd:33:5f:be:
         f0:f5:46:f2:ee:90:13:c7:7d:2e:78:e5:27:a4:91:f0:71:f2:
         11:a0:94:6e:d4:69:78:cd:b8:0c:02:7b:2f:fd:28:d3:0a:e5:
         d5:ab:bc:06:32:ce:a9:fd:b8:40:50:4a:9b:6a:b5:5e:e2:bc:
         7f:52:97:b3:db:11:37:99:44:06:9d:b1:89:a0:19:18:20:5c:
         a9:4b:36:f3:da:83:82:9b:c5:9c:24:fe:80:0d:45:36:43:dc:
         99:50:8c:0f:19:df:9d:6a:52:61:0d:d7:51:4e:fe:bb:da:60:
         6a:77:d1:d6:ee:ad:d6:c9:ae:5c:e9:09:df:40:45:a6:60:08:
         ea:52:2c:56:0a:52:24:32:f6:68:7b:5a:ae:2e:96:78:b5:ae:
         60:b8:8c:f3:9a:ec:37:04:f6:79:7c:d8:fe:fd:3f:99:3e:9b:
         d1:fd:4f:02:c6:96:36:78:38:a9:40:ff:91:de:69:32:60:d7:
         22:c2:01:5f:e1:70:14:e3:ed:9b:fc:01:1e:7e:a2:53:96:ab:
         28:fb:7a:bf:e3:28:3d:da:c8:34:7c:33:2c:c4:2b:06:11:6c:
         9e:b4:fb:75:b9:1d:15:39:4a:73:0b:f8:22:91:ef:b0:85:9f:
         5f:41:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:17:51 2024 by rpki-client on console-fra.rpki-client.org