Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File:                     ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier:          N6uXbpP4jecO1kD64eriJyguLz2SnhyKbl7d1fj9hDg=
Subject key identifier:   A9:68:2F:40:6F:33:65:2A:3A:E3:21:4A:0F:CE:37:69:47:F3:9A:32
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       019356F6D146D6C624802CFC0D32628949B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 03:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:36 +0000
Files and hashes:         1: 0dtiP-xxCKyKg4D0duVAF0ikZ9Q.roa (hash: 0JmyQ3RYqvr1rF81i04fY3InAdyS1cLnbQFi3uOCXFM=)
                          2: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: ruV31PlVk9Hgmr7WhM1XvN/Fp1AQPr9gwkqaGkkOvHw=)
                          3: sQ8gskyL-Imc2VtWM8KPVt0wV4g.roa (hash: UUQCzz3SduBR0VgHlMrKJSziTbHmfG7SF+KJxVSsK2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:d1:46:d6:c6:24:80:2c:fc:0d:32:62:89:49:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: Nov 23 03:00:36 2024 GMT
            Not After : Nov 24 03:00:36 2024 GMT
        Subject: CN=a9682f406f33652a3ae3214a0fce376947f39a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:fc:8a:b3:0a:3f:7a:b7:32:6c:13:56:59:
                    02:66:92:02:88:f8:51:e7:e1:b4:7f:81:f8:4a:ac:
                    87:08:fe:16:e8:f5:95:d5:9a:38:4c:b0:6f:4e:a8:
                    ec:17:2c:29:49:35:88:fb:f7:f8:90:e9:89:d9:f2:
                    ab:80:62:e4:e2:bd:f2:89:e8:e8:b6:92:94:97:48:
                    5b:05:c8:f9:9b:f7:c4:14:ad:9f:9f:b6:ba:7f:d9:
                    30:9b:a2:00:4b:00:70:df:d4:aa:c2:e5:f1:bb:f3:
                    18:7b:74:ff:fb:2f:75:69:b1:3b:67:cc:5d:df:55:
                    57:65:56:a7:47:89:18:19:cf:36:97:b0:b1:2e:8c:
                    ce:c4:aa:70:50:b4:5c:4b:8d:ba:e3:14:ef:39:7b:
                    13:d6:69:2a:f8:b2:bf:5c:9b:55:34:c0:4c:c9:03:
                    fe:06:18:37:d0:81:f4:d9:a8:7d:a2:f9:bf:bf:7b:
                    de:46:55:bd:bf:df:19:d0:db:80:34:67:23:c3:3a:
                    6e:61:de:a3:40:53:45:d9:e8:19:b4:0e:bd:45:ab:
                    4a:00:31:6f:e7:a3:8c:c7:c1:ad:4e:49:13:47:af:
                    b4:8b:88:e2:e9:f2:67:45:58:e0:b9:d0:97:4c:7b:
                    8a:23:7d:e4:7e:55:1e:aa:87:a8:f7:60:cb:1c:ab:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:68:2F:40:6F:33:65:2A:3A:E3:21:4A:0F:CE:37:69:47:F3:9A:32
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:43:ba:6a:e0:41:73:0e:f1:36:a3:21:8e:60:b4:92:a1:e1:
         2f:bb:01:46:8e:16:ad:61:13:54:a7:d9:ff:a7:81:06:9d:19:
         1f:eb:d6:81:45:59:4f:24:aa:c9:18:b1:f8:36:5e:d9:4c:fe:
         db:47:c9:f6:81:a7:00:78:da:a5:e1:9c:59:72:81:20:33:5c:
         fd:af:20:02:29:50:d0:41:b9:1c:00:37:5c:d0:88:71:e8:d7:
         20:32:0d:15:8d:c9:95:06:e6:aa:04:c1:b2:59:15:c2:7a:c3:
         c6:f9:dc:06:ca:6c:e8:00:22:f4:7e:6f:29:a6:d4:37:97:ca:
         b6:3e:4d:da:a8:7a:67:50:ee:2a:90:a9:76:0d:07:10:8a:98:
         a3:f1:ed:b8:6e:b9:6d:10:0c:53:96:e1:1b:ec:7c:c7:bd:15:
         85:f5:de:77:0b:81:19:a0:e1:62:41:88:e7:26:8c:f9:43:4e:
         e3:de:b3:99:5f:f3:24:50:fd:02:aa:ed:6c:54:3a:5b:ef:39:
         54:23:47:66:fe:94:96:3c:c1:86:34:68:10:f7:57:45:d2:0d:
         34:69:07:14:50:b3:59:b2:09:20:82:b2:99:2c:f6:48:70:35:
         b0:2b:3f:fe:40:f8:bd:83:c2:09:11:cc:da:13:77:11:7f:52:
         96:37:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:12 2024 by rpki-client on console-fra.rpki-client.org