Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          WID2NR8mNOBdeP7b6fRy2djmSW+0SHr9BxBppwqpeIM=
Subject key identifier:   97:66:53:11:EE:D1:55:CE:BC:2B:11:9F:92:4D:A2:32:4E:80:0F:FF
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       0193523E14DE40619F3D2C6952980156CEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          1309
Signing time:             Fri 22 Nov 2024 05:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:20 +0000
Files and hashes:         1: 6CSS6ACD01Uyu0Ib4jOAYQlVy40.roa (hash: iFL/SOPvwl8/dXsSaHSwMljVTaH3gL/IeqQwhNzMbsQ=)
                          2: BrX0BVR8mXz9lz_W622YZCmAV7c.roa (hash: fTGrWzN/R3ilDjWBw0FD9/Lx/zP2JwxI22Oum77TpoA=)
                          3: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: /RlbQgc2yOwkL74IOztUXDzRnizt5ohEJXnouvKSkuU=)
                          4: KpHgHMa5WTLcdBM8bjg1lhr09Jk.roa (hash: u0lOlJmYMVwuBR9/H12aj2zIopBt8mnZro8TI7SMsm4=)
                          5: Lq5jenOAHkD5ODAX-u-RTzyq9pk.roa (hash: H/Y9g2zpPLwumOub0xf0xLU7Nc0pyv0X4vFSJfyHZbU=)
                          6: UVfuc6gRyjDxq787j0RLpFkjycw.roa (hash: AyhlazS6ILOIc2i62xQ12iWtPWDvrlDUVaTzIfJh/UU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:14:de:40:61:9f:3d:2c:69:52:98:01:56:ce:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Nov 22 05:00:20 2024 GMT
            Not After : Nov 23 05:00:20 2024 GMT
        Subject: CN=97665311eed155cebc2b119f924da2324e800fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:5a:f2:4d:37:87:e7:3f:27:ea:44:21:d9:
                    fd:64:20:87:d4:c7:e8:d2:d7:e2:b2:11:6b:b8:d6:
                    b5:e3:b9:00:ef:3e:1e:70:ab:08:d4:e3:51:41:6a:
                    69:3d:34:04:a3:ec:42:1b:d0:96:45:1d:28:7e:71:
                    f6:5b:03:e0:6a:8c:1e:4b:7d:10:76:e3:b1:ab:f8:
                    57:9c:db:57:f8:6e:fd:d8:aa:8b:ab:10:e0:ea:1d:
                    14:ee:96:ef:3b:d8:5a:91:03:35:45:d2:70:39:a2:
                    eb:1b:cd:ce:1e:a1:f9:e9:80:4e:99:1e:df:17:6a:
                    8d:87:02:e7:03:80:33:ab:d5:2c:04:8c:e3:b7:2b:
                    07:29:98:0a:8a:55:66:bf:9a:b9:be:ef:df:a2:d1:
                    36:a6:72:ef:55:45:02:b7:72:48:5e:b3:51:0d:4d:
                    05:e3:ae:b3:54:b4:31:39:ba:f7:30:f9:56:15:2d:
                    c2:e7:97:32:12:06:b1:0f:bd:cc:66:ee:ad:5f:5d:
                    d6:93:be:b7:42:3d:98:ad:3e:8e:6e:37:e1:d8:af:
                    96:fa:db:16:c4:b9:72:ab:ee:ce:96:91:6a:1a:72:
                    36:e0:c6:c7:72:28:5f:c6:0d:d9:c4:a1:3a:1d:35:
                    20:8c:17:bc:c5:58:3b:19:0a:40:55:bc:3d:af:f3:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:66:53:11:EE:D1:55:CE:BC:2B:11:9F:92:4D:A2:32:4E:80:0F:FF
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:2a:c1:f3:08:e7:59:92:bb:d2:78:de:3d:e5:94:aa:e0:
         ee:a3:61:93:22:0a:17:51:08:d5:29:72:86:82:1a:50:da:ba:
         7f:51:92:0e:ce:05:6a:c1:29:b7:ce:fa:02:4a:f8:f3:5b:61:
         e4:cb:1c:91:b4:9b:a1:11:1f:28:77:64:5e:59:9a:28:97:2e:
         dd:7e:24:cb:9d:55:8e:4b:2a:01:d5:76:b8:74:52:06:ae:5d:
         9a:8c:8e:dc:3a:95:38:3b:fa:c7:16:8a:ee:72:a6:aa:be:a0:
         86:57:98:b1:bb:e9:6e:dd:4f:8e:35:27:3e:bc:1a:dc:34:bc:
         58:d1:53:da:71:ea:f4:22:09:ba:9e:6c:0f:3e:12:76:34:8e:
         bc:86:07:9b:29:03:23:ef:8e:c4:d3:65:f0:4c:b5:60:b9:59:
         9c:41:ea:87:7f:4c:1e:23:c1:2f:8f:d5:cf:04:34:60:8a:45:
         af:70:06:51:76:d2:63:7b:03:fa:57:04:f2:69:d8:de:c5:71:
         4a:e9:bb:92:34:1f:e6:b5:b3:2c:6b:29:6c:ed:00:49:0d:e3:
         9e:9b:91:af:0c:f1:65:79:13:b8:90:30:fe:a0:b2:51:d6:5b:
         b7:63:2a:81:a4:7e:2a:94:4a:35:63:99:4e:48:0a:9d:20:50:
         c3:0d:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:20 2024 by rpki-client on console-ams.rpki-client.org