Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          WkhMX1ASsQXouwW8+ItF0+oadyw2mfh3FLNZaQsbGms=
Subject key identifier:   3F:C3:1C:20:5C:EA:60:AB:15:B0:2C:FA:A1:1E:D2:EB:99:7B:91:F5
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       0193512C03D752AE468D3207E66BE1E35DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          045F
Signing time:             Fri 22 Nov 2024 00:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:59 +0000
Files and hashes:         1: 7BiVqDRzEzZ5LqfbNuaZe_tSED4.roa (hash: QDQDp66qUB/PS0udUW8HZwiMOu3YUPHCWXgV2/sElsM=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: rqT6ZBiVM3h6oIUfAHasx6FJfc2kTjg8YBsWp+B1tnw=)
                          3: Mhq0b9CnppV0R88KOPXnMHPWfxs.roa (hash: z85ZK1nFXD7UlIp3CULxjdb0VyRDH4NXruRVX5DfU9k=)
                          4: RpZ1L63zaNHGGh4kH23ohNCgaik.roa (hash: k9PjSLfSvLznJaAWQ+EhcCEtI4KgwXydwpfcB+WbWxw=)
                          5: iTF4W_4_PuAZRrqfESmrDhqB5n0.roa (hash: dgFKg/KzvKAndFmxJCB+KnKUYU1Up9+IkOzGeW7LiHo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2c:03:d7:52:ae:46:8d:32:07:e6:6b:e1:e3:5d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Nov 22 00:00:59 2024 GMT
            Not After : Nov 23 00:00:59 2024 GMT
        Subject: CN=3fc31c205cea60ab15b02cfaa11ed2eb997b91f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:c9:78:52:a8:d3:ad:9a:25:cd:95:fb:82:
                    1f:88:17:30:4b:3a:85:6c:49:62:49:03:8a:9c:70:
                    12:46:e4:a8:87:b1:79:5b:60:b0:0b:72:01:d6:f5:
                    36:93:d6:9c:b4:ba:7c:9a:db:a3:13:47:d4:55:39:
                    91:5e:bd:ce:92:d9:34:68:06:e0:69:49:d0:1d:e6:
                    2c:64:d5:71:5e:79:54:d9:92:90:b6:d3:36:28:ca:
                    88:40:12:fb:67:c4:05:3d:b5:76:e2:e9:f8:2b:88:
                    05:04:d7:cc:07:79:09:c3:cf:06:20:c6:b6:80:dc:
                    15:4c:58:47:1a:0f:25:a6:be:d7:53:8e:5b:19:45:
                    fc:6b:01:80:40:69:88:d6:cf:06:e1:5f:f3:c6:d9:
                    61:de:17:97:92:f3:8d:66:1a:01:49:7c:2b:5e:36:
                    2d:d5:a1:5a:bd:2b:63:03:2e:a8:5a:94:c0:09:36:
                    c3:17:a3:7f:fd:3f:4c:2e:b9:a5:b8:a3:54:4b:1a:
                    ae:c8:64:9d:f5:0c:f1:29:8a:f7:1a:6a:3d:d5:e5:
                    74:7d:61:1d:0b:24:d2:a5:ff:6b:bb:6c:fe:2d:62:
                    4c:49:2b:57:91:7a:d7:70:b6:d1:c7:b2:e9:58:4c:
                    22:22:75:23:c3:41:21:d2:34:90:22:7b:b1:12:69:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C3:1C:20:5C:EA:60:AB:15:B0:2C:FA:A1:1E:D2:EB:99:7B:91:F5
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:79:65:62:16:ab:4d:64:8c:79:9f:d4:24:be:46:c1:a2:
         12:02:18:1f:9a:a6:8b:50:de:56:d2:46:8b:9a:cb:82:0f:a1:
         2c:b4:af:11:1a:ba:65:bb:d7:16:e5:18:43:c0:18:16:d2:4a:
         8d:fd:23:bd:48:e3:f5:0c:9d:94:6e:12:1e:06:54:a5:5e:14:
         ab:38:68:a2:96:50:a9:40:ec:da:d8:f8:aa:2e:d0:35:18:44:
         dc:19:2e:73:b9:4c:a6:c0:df:84:fa:3e:5e:0b:10:d1:96:f6:
         91:30:fb:98:79:ac:7d:c1:54:1c:cb:8d:9a:73:93:8f:a5:b2:
         78:6a:26:ac:f6:ed:d7:91:e8:07:e1:be:db:d6:5a:92:f8:3b:
         f5:0f:38:ea:c2:cb:63:50:03:f2:90:7b:82:39:9e:e0:a8:e1:
         ff:7a:52:ad:c5:5c:bc:b5:9e:2c:a6:95:0b:ac:20:df:5d:ee:
         57:1c:f3:2b:c5:1b:26:16:8f:dc:1d:53:29:13:d5:cb:f4:57:
         60:00:7e:6d:36:a5:88:45:d0:1b:8f:07:d5:6a:61:2b:2a:32:
         49:8d:be:10:e4:cc:db:45:11:c4:7c:f1:f7:34:5a:ec:8c:64:
         e4:57:17:c8:25:34:63:d2:fa:c0:36:8d:2c:92:d1:2c:09:bf:
         81:8e:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:19 2024 by rpki-client on console-ams.rpki-client.org