Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          +7feAmb8b184+qe4ZXmcus4PWHi13JDICVLwEo3dKjs=
Subject key identifier:   0E:96:D6:02:F7:14:84:C9:59:DA:02:05:48:00:D7:45:F0:F3:32:31
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       01935274FC5503E517FBBF4D812CCDEF81AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          02A3
Signing time:             Fri 22 Nov 2024 06:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:18 +0000
Files and hashes:         1: 3adLNlqIL-tlqsB0yqRE4WvJzic.roa (hash: LTg4cDHXq7yPujY6oW/OazQ6t1zEpLGzCQETHhqUIXs=)
                          2: 4R4mKusC50a0PIgabKy4IKss2fU.roa (hash: AFj0A3THQoJ2AWADlDwOwMryMNfFdBzA4MGNl6zwiBc=)
                          3: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: li18CtqHjXcFdjCH2tTSLeitlkyWjKC5dspZZtEV+ho=)
                          4: Gtxpgixa8rI37a-Wlg51n7TvARA.roa (hash: 5RwEkl6EbWJXt1kXyT5C7n8nnW3fQ052ZMIoQqc9bzo=)
                          5: KpNVvRZIqyiDuUx9FFux5VS4g_U.roa (hash: HrNFZXlt7L1i4TpFqWhLEyBy30QPbENISG2SSmB6Yd4=)
                          6: Mhb9g1GW1ic5B1uHQQcAKZQcE_k.roa (hash: FpzRxrdL5GM1JZOZ9tmbgTdHPgyrYrFJIBXSZ3ts6QU=)
                          7: YogE9d5tH4k68Tt8pwZMnLBty98.roa (hash: uGUbLbhQePNMe2N5mijv6MQR7j0HWESjfb97Dlgfedg=)
                          8: j52KM_A1VVdrS2zWqPNnAgneGLs.roa (hash: uWrtScTPzXCcv4OEECoSEzSRhwYVgoQY0/PHQOFTyhw=)
                          9: l2LPibpxhRRCa_ETh0O198o5wVk.roa (hash: z1rlifPugsUuSUKwnvTHeLqOfDUFgcCcFpJM9sLyS/8=)
                          10: vQ7cPQtltsy8XBsA9zzuO1VTd3c.roa (hash: 9lr7wfHahrj8O9pMfsYJG4uJOb4QdikJ/5pcO9R8pt8=)
                          11: zytvXYGp5Ix5VrTr0rcnHDKoq28.roa (hash: zVhB1XTlKSuKezk8MLiNFeesrC0yiwYuaK/wQ8y5byA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:fc:55:03:e5:17:fb:bf:4d:81:2c:cd:ef:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Nov 22 06:00:18 2024 GMT
            Not After : Nov 23 06:00:18 2024 GMT
        Subject: CN=0e96d602f71484c959da02054800d745f0f33231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:1b:84:d8:6d:52:42:61:66:16:18:59:17:
                    5b:63:ec:6e:c8:72:0c:89:4c:1a:40:08:1b:28:a4:
                    75:09:a9:3c:bf:3e:40:f3:4b:29:21:ad:fa:4f:3f:
                    c2:43:74:c3:5f:cc:76:d7:23:13:ef:a6:80:30:f4:
                    35:dc:9e:f0:45:53:5d:a0:34:0a:3b:c2:f2:4f:b1:
                    a0:8b:d9:da:b8:55:5e:c2:c8:ec:37:6d:90:40:83:
                    e1:6c:c5:b6:ee:07:f7:9d:93:66:f6:ab:4a:21:f9:
                    17:64:59:11:c5:b7:46:37:ae:33:ec:58:d0:72:57:
                    2b:37:9c:80:66:66:c0:59:42:cd:e5:df:08:f7:f2:
                    64:d6:db:85:a7:90:6d:83:b6:92:57:e9:1e:70:80:
                    30:95:ea:64:e6:d6:e6:19:3b:29:cf:f2:43:a3:3b:
                    26:d2:6c:cd:f8:9c:ae:60:89:3d:b9:68:34:3c:17:
                    3d:87:e5:6e:d0:0e:c9:68:fe:79:6b:14:72:8d:3b:
                    fb:b3:8f:a6:1e:12:2a:e3:3f:69:ec:a9:56:09:14:
                    cf:55:ab:7f:67:d1:74:bc:25:ca:f6:4e:e5:d0:db:
                    fb:c9:cd:99:49:fa:fa:2f:56:da:1b:12:22:0c:04:
                    01:e2:e7:e4:30:7d:0b:bb:0c:cb:2d:e0:81:2e:03:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:96:D6:02:F7:14:84:C9:59:DA:02:05:48:00:D7:45:F0:F3:32:31
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:32:9a:d6:10:b3:08:a5:7a:cf:a2:f0:7c:b8:f9:3e:90:
         36:51:92:7d:a5:cc:37:8d:3c:72:61:06:4d:a7:dc:0c:d0:91:
         d0:55:68:5e:13:ad:d2:d9:a5:6e:d8:d7:3f:b2:8d:57:ec:17:
         d7:a0:30:b2:29:ab:b0:5c:72:95:ca:f2:13:14:1a:60:f7:b1:
         ec:38:b5:51:32:1d:44:ba:66:b5:54:ed:26:5a:fb:be:47:12:
         61:61:f5:d9:d3:57:fe:a1:06:f2:79:ef:e7:f0:48:5c:48:a8:
         86:6f:73:f9:e5:f5:97:c8:cb:61:63:bc:88:f3:fd:61:04:74:
         39:9f:e0:a1:d8:25:d1:8c:e3:0b:8c:af:2a:6f:cd:73:6c:0b:
         c8:b1:35:ce:d7:e9:74:29:6d:5c:40:f3:27:73:a7:7b:fa:50:
         c0:3b:a2:f4:56:fb:74:b2:0f:04:5a:d9:7c:a7:0f:55:0a:e8:
         3f:fe:5e:a2:9c:10:4b:49:94:8b:4a:52:05:00:52:97:6a:90:
         a4:37:40:9e:cc:b0:a6:42:fe:5b:4f:6a:85:ff:be:8c:bb:0e:
         78:24:19:c8:8d:51:98:a7:9f:fb:df:b4:12:a9:fc:c3:91:ea:
         8f:69:5a:f9:f0:81:25:b8:91:2e:fa:d4:0d:4e:2b:75:fe:bb:
         c0:37:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:30 2024 by rpki-client on console-ams.rpki-client.org