Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File:                     RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier:          yCrqSmgCRL6mcxZ7bwCMhBXA6VA2c6DEpcwLxxbe6oE=
Subject key identifier:   AC:28:66:6B:2E:E4:35:DD:0B:40:03:09:CF:2B:A7:F0:43:03:DC:9A
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer:       /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial:       0193568ADDDF6BD962B92AAC6A3FD5ED61A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number:          12C4
Signing time:             Sat 23 Nov 2024 01:02:41 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:41 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:41 +0000
Files and hashes:         1: ODcBYTSsaPB0Xfn6LV6WlwTB6eQ.roa (hash: /47Z5TlK8+aEMABMz9Vt6+M+ckJy9FLeCkyy+lkjUq4=)
                          2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: O5PhTWAbBY+K7hiFWBq88g61O+7pCEpoq0n+fzKau/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:dd:df:6b:d9:62:b9:2a:ac:6a:3f:d5:ed:61:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
        Validity
            Not Before: Nov 23 01:02:41 2024 GMT
            Not After : Nov 24 01:02:41 2024 GMT
        Subject: CN=ac28666b2ee435dd0b400309cf2ba7f04303dc9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:23:58:e9:b8:4e:f8:cd:17:37:76:3c:a0:
                    f1:ef:4e:dd:83:e9:59:c4:2e:42:64:23:4b:cf:79:
                    96:8f:b5:69:3e:bd:75:dd:26:e7:4a:12:d4:6c:8c:
                    a0:9e:b5:db:aa:5c:0b:37:3d:3d:00:e7:a2:2f:aa:
                    0f:db:be:67:19:dc:9b:77:0d:ea:18:66:38:be:41:
                    10:a2:6f:e4:73:31:c1:3c:11:e5:2f:1f:e8:e9:87:
                    f7:24:60:e6:d3:66:22:e9:32:0b:a0:5b:7a:06:0b:
                    fd:cc:dc:eb:18:93:c1:06:d2:bc:79:05:3d:40:0b:
                    ac:22:a6:8d:0b:06:92:85:e8:21:9d:69:46:74:65:
                    76:9c:fc:18:49:9f:18:f3:00:e3:56:ba:29:77:71:
                    7f:3b:05:29:4b:64:41:62:e2:d3:c5:c0:f9:38:72:
                    cd:76:a8:7e:e2:d9:75:bf:ec:54:ef:64:45:91:b1:
                    9f:b6:c8:27:57:d6:73:36:10:20:c1:e5:75:e1:58:
                    15:e7:5c:57:d2:68:b9:de:a4:82:27:63:d9:62:da:
                    c6:c2:a5:e4:da:47:f6:ed:e4:09:d8:d1:09:9f:c8:
                    eb:d3:4c:08:36:49:ed:07:f4:e0:dd:fc:4f:8c:c5:
                    1e:07:5a:c5:49:d9:02:15:ac:de:10:3b:c6:6a:20:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:28:66:6B:2E:E4:35:DD:0B:40:03:09:CF:2B:A7:F0:43:03:DC:9A
            X509v3 Authority Key Identifier:
                keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:88:e1:9f:bd:49:4a:fc:8e:6d:92:4a:36:2d:ff:31:25:f3:
         40:41:b8:d9:40:50:bc:4a:a4:f2:2d:ab:ee:71:c3:59:bd:a9:
         eb:f2:88:22:3b:14:67:c8:81:36:b0:98:22:48:2b:e4:9e:0a:
         48:fc:84:9e:92:bc:e5:c5:8d:8f:0a:3c:7d:01:1f:df:39:d8:
         ca:80:02:13:2b:02:0d:33:6a:61:63:6d:02:e5:74:e8:c4:7f:
         6d:c1:3e:ed:d1:8f:c8:ff:13:d1:5f:43:e8:1f:14:d6:64:da:
         22:95:f7:62:b7:b8:76:cc:59:de:a2:34:29:4c:dc:01:0f:26:
         0f:c0:fd:e4:57:18:31:83:c3:bc:21:a8:c3:f0:3f:dd:25:df:
         87:b0:16:3e:4e:f4:cb:77:d9:65:e6:7f:0e:38:7c:01:5f:99:
         d1:a7:80:29:06:38:a6:21:b8:f6:1a:b0:9c:25:a1:8e:f5:c6:
         26:fe:7e:86:d1:ae:82:07:92:3f:ff:be:d8:73:ac:01:ac:18:
         dd:6c:49:75:eb:70:d9:2d:50:ef:c3:26:15:3e:b2:6c:3d:d5:
         7e:65:9a:b3:52:66:f9:78:91:94:0b:7a:83:41:5a:bf:96:e1:
         82:ec:6e:19:e3:25:39:2d:53:8c:97:1a:25:df:0b:7b:ea:f0:
         25:b3:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:55 2024 by rpki-client on console-fra.rpki-client.org