Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File:                     _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier:          T/PvS/fFwOx28tklXfq6qej4xTv1rJG3fsA8zrwvre4=
Subject key identifier:   B7:64:9E:2A:7A:74:68:25:86:2C:DC:4B:45:6C:C4:38:A5:0A:0A:C1
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer:       /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial:       019357D2EC5B57305DA55F0C6083759B8C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 07:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:00 +0000
Files and hashes:         1: SxUvEI7-4z8BCHs8EjbuCx00RrI.roa (hash: 4IAVeGq/WHvzEFfp9XLn6edJ2XkPhrU2WqReQjUSQa0=)
                          2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: NxReO5C8+Xs/zQx0pajdWeeCnJeBED7snPTKED08fiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ec:5b:57:30:5d:a5:5f:0c:60:83:75:9b:8c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
        Validity
            Not Before: Nov 23 07:01:00 2024 GMT
            Not After : Nov 24 07:01:00 2024 GMT
        Subject: CN=b7649e2a7a746825862cdc4b456cc438a50a0ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:4b:f6:69:3c:66:05:fa:6b:96:71:dd:9a:
                    fd:95:3f:6b:c5:50:4b:83:c2:15:e4:9e:c8:b2:5b:
                    17:73:fb:62:d8:04:8b:2b:24:2a:d9:4c:cd:0d:bb:
                    25:c3:43:84:77:58:eb:ec:3a:f3:88:f2:47:a2:72:
                    5b:b2:e6:d7:4a:1b:b0:53:48:98:23:aa:f8:81:ae:
                    d0:81:e1:38:72:9a:76:4d:9a:14:fb:9d:21:89:7b:
                    d3:1d:f8:42:bb:9f:24:b9:ba:83:18:62:ec:0a:f1:
                    97:96:e8:da:a1:22:12:18:43:5b:8c:31:92:55:49:
                    ef:2e:f6:77:91:67:45:a3:02:f0:43:37:60:a1:58:
                    7c:5a:f8:17:09:b6:0f:55:a0:2f:c6:b2:b7:96:ef:
                    d7:b7:0e:ce:7e:4d:f7:83:6f:66:64:ae:f9:d4:8a:
                    0b:a0:22:00:ec:1d:17:dc:eb:e1:e8:f8:93:59:81:
                    03:79:c9:46:9e:2b:39:14:3c:fb:33:9d:97:56:01:
                    96:b5:3e:5d:1b:02:80:2d:e6:3e:09:86:20:5b:35:
                    11:fa:a7:18:3b:49:e7:85:d4:f6:38:07:89:0e:cf:
                    5c:07:5f:12:61:21:d7:09:c5:30:73:49:4c:ed:93:
                    47:03:ee:1a:0f:37:57:89:ab:0e:62:c1:09:7b:2b:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:9E:2A:7A:74:68:25:86:2C:DC:4B:45:6C:C4:38:A5:0A:0A:C1
            X509v3 Authority Key Identifier:
                keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7c:fa:44:2a:78:68:44:9f:80:11:f1:b9:4e:ef:b7:51:35:
         e1:56:eb:d5:07:df:d5:ee:ca:10:d8:6d:5f:71:ff:54:ba:27:
         c6:47:ee:17:b3:a2:4e:4b:43:9b:d0:69:89:3b:c1:24:8c:4a:
         5d:fd:7a:6e:1f:6d:0e:67:26:75:4a:2c:20:34:d6:30:c1:e0:
         6f:d9:5d:c5:95:a1:69:5f:67:ae:94:e5:72:e2:17:b1:11:64:
         8a:96:ff:02:bf:3e:23:3d:f3:55:87:b8:4c:80:99:a9:0f:d2:
         45:f1:7a:07:4a:a1:d4:dd:fe:f8:7d:5b:10:0b:04:92:bf:bc:
         f3:0f:c1:d9:28:f9:2a:06:29:a8:ce:3d:fc:74:11:22:c6:d9:
         c8:db:53:3d:ab:2b:2b:40:9a:35:db:b9:73:9a:24:cb:ab:2a:
         b0:ab:61:11:94:e6:6d:83:a3:9b:f9:bd:5e:3e:23:79:67:09:
         68:54:43:1d:38:a4:54:8f:25:ce:b2:34:9c:26:5e:d5:b0:41:
         4c:95:08:ce:2b:49:30:f5:7c:76:2c:ea:ce:a4:6b:0b:10:5e:
         bd:bc:a6:0e:f1:b9:05:06:17:4b:ac:1d:69:68:ab:e6:62:fa:
         7d:92:d9:4a:43:f3:ee:75:72:85:36:fa:9e:2b:c8:a4:f9:43:
         8a:11:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:10 2024 by rpki-client on console-fra.rpki-client.org