Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File:                     o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier:          k+3jrBklwjfjKci66YrJMvudQtG2GgNFMZtAqD54uoU=
Subject key identifier:   7B:1D:F2:5D:DC:25:11:A6:B5:01:14:C0:21:57:4E:C3:BA:19:E0:FB
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer:       /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial:       019365FD7E58FC3BC6CBCD5C5442674F2FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number:          06A4
Signing time:             Tue 26 Nov 2024 01:02:11 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:11 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:11 +0000
Files and hashes:         1: Tw9j_v_XmiW6OLRNQmWCBqIkYTg.roa (hash: I3F3YvhnePUqktpuD12+anlZyHrnV997YS7sAIJUIpk=)
                          2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: bmA3jyenG7VxrAPk8dnqZN9klH1uQ2zeiXkIsOhFn7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:7e:58:fc:3b:c6:cb:cd:5c:54:42:67:4f:2f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
        Validity
            Not Before: Nov 26 01:02:11 2024 GMT
            Not After : Nov 27 01:02:11 2024 GMT
        Subject: CN=7b1df25ddc2511a6b50114c021574ec3ba19e0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:c6:50:aa:0c:ad:f9:4b:4c:a2:61:18:10:
                    d2:27:46:fe:04:2c:49:54:79:a9:6b:e1:97:36:75:
                    cc:f9:b9:dd:8a:aa:a5:5d:22:f5:39:31:4e:9d:91:
                    72:ee:58:ad:7a:87:ad:92:fb:20:21:20:da:d3:b8:
                    ae:35:db:0e:7f:b6:a4:58:63:2d:29:19:32:3d:a6:
                    0f:55:8b:9c:51:b5:bc:fb:e7:7e:06:2d:aa:55:5e:
                    56:46:fe:ab:ae:12:33:8e:2c:2e:84:cb:a3:f6:db:
                    c7:7c:35:6e:07:e5:4b:7a:f5:39:db:5e:1e:01:c8:
                    22:99:ca:0e:a2:ee:c5:cb:06:95:ad:e3:a1:dc:81:
                    c6:3b:80:c2:df:e8:0c:84:6f:b8:cb:0f:82:41:c1:
                    77:05:03:bd:42:3a:d7:14:55:fb:0e:5a:7c:62:7a:
                    89:b2:b0:9e:c3:6d:2c:b3:7c:99:7d:bb:67:bc:2c:
                    c5:87:bd:53:0e:7f:77:10:50:a7:0e:f1:d0:45:31:
                    13:d4:e3:b9:ba:b3:97:15:24:c2:ef:5c:a3:f6:23:
                    05:65:ef:ab:02:60:41:39:7b:fd:bd:3b:e5:2b:27:
                    88:20:58:1d:8c:f6:b7:4b:51:82:c5:55:08:65:2c:
                    cb:d3:2f:5d:61:2a:d4:07:b0:a8:41:7b:0d:3b:24:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:F2:5D:DC:25:11:A6:B5:01:14:C0:21:57:4E:C3:BA:19:E0:FB
            X509v3 Authority Key Identifier:
                keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:61:77:e3:85:b7:cb:fb:f8:3b:1d:07:4f:4b:b0:99:37:
         49:d6:dc:11:67:0b:23:d4:28:74:71:23:ac:01:66:93:7a:e3:
         c2:71:ff:55:98:68:a6:2f:11:45:ce:e1:81:82:40:58:44:b5:
         4c:9a:38:72:c5:84:50:d9:e9:69:16:75:e2:a9:44:0c:19:42:
         35:0f:b5:87:fc:93:be:33:d9:3b:aa:d3:23:8d:80:53:4c:cb:
         ad:74:6e:4f:bc:cd:a7:a6:fb:7b:ef:44:19:61:57:da:7f:2a:
         d2:fd:fe:7a:06:28:38:7a:fb:14:c7:d3:75:4c:5a:b8:53:a3:
         b1:f7:bb:85:a1:48:e0:b1:83:af:b9:7a:28:c1:5a:17:b8:45:
         8a:70:a5:14:3e:7a:2f:d9:b3:ab:03:ca:99:47:9d:09:f6:ed:
         1e:94:55:5d:fc:b3:4f:a2:59:b6:d4:00:21:3d:ee:c5:b6:18:
         fc:dc:1d:9b:8c:e0:4f:52:4b:05:76:43:71:2c:58:02:c6:79:
         8d:4c:2c:f2:22:f5:e3:05:e9:a0:20:bc:34:af:30:8d:84:9a:
         f1:b8:9d:e5:95:25:63:94:b7:e4:46:5d:bd:10:76:71:4d:41:
         1c:a6:5c:bf:b3:d5:e7:b7:a0:0e:2d:76:b4:47:90:42:d5:dd:
         fc:34:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:57:34 2024 by rpki-client on console-fra.rpki-client.org