Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File:                     1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier:          da/kS3ouy6gHhuvoPnM9sBqDWdguE6f070z0HSrXJgs=
Subject key identifier:   13:EA:DC:86:A5:FB:77:3C:B0:C8:DF:0F:C4:E8:43:73:03:B6:24:AD
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       019352E2BCDEB3267AD3176286429D1FC430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 08:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:11 +0000
Files and hashes:         1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: VoLOaoKznFP0lfAVY8ytoZBHAbHIluZw60J98ScuCNo=)
                          2: 8LaVb48_zsjKcNUv9R5lHWFdW2I.roa (hash: nFxJY7cQ5BSIgvRvXN5Dp6/dQtDDVBcSLiTPV6vnR0U=)
                          3: FGsrFdvbGIDOAaUa5SP7Rkoy1jk.roa (hash: MOCAZ/ifaUCNd8a2OXxGVgW0FYrtcfXG0dctHGyr1uo=)
                          4: g_Gb0yAN5l79ylWQ-IatEnoK8iI.roa (hash: sR1Rhne2RDzjcUBFtA2iuc/uJF10YsTWLwSyffw1R7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:bc:de:b3:26:7a:d3:17:62:86:42:9d:1f:c4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: Nov 22 08:00:11 2024 GMT
            Not After : Nov 23 08:00:11 2024 GMT
        Subject: CN=13eadc86a5fb773cb0c8df0fc4e8437303b624ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:04:8d:16:39:6e:e7:9c:51:b2:10:e3:a2:
                    76:75:61:f1:0b:e1:e7:3c:ad:ff:a5:db:c6:6f:0d:
                    5b:1a:4e:8d:88:67:71:e4:3d:c2:95:ce:47:3f:f8:
                    4a:23:06:03:6c:65:42:dc:09:0a:60:f1:a5:4e:4d:
                    3e:46:4a:0f:66:ac:59:d0:a7:99:c1:9a:c4:8c:23:
                    0e:7c:bd:3e:bb:40:73:1b:fa:8e:ad:b2:6c:c4:bb:
                    0f:29:14:42:13:70:85:25:94:ac:cc:13:72:78:c0:
                    55:ec:4b:25:fc:57:50:2f:c1:f4:6a:01:7a:69:b5:
                    96:88:b1:61:1d:e9:e1:fd:7b:c7:a9:f6:80:69:e0:
                    43:91:e7:26:3f:35:dd:ff:3e:77:3b:d1:1a:8f:e1:
                    93:eb:24:b3:a5:3d:e5:9c:ef:5e:2d:42:c3:15:9a:
                    53:67:1e:04:db:5b:3b:9c:04:aa:fc:1e:cb:43:57:
                    a9:cd:82:15:e7:ce:33:f0:39:a8:2a:ec:5c:96:22:
                    b1:34:fd:d9:75:b2:2c:f8:58:0e:bf:b8:b7:da:a2:
                    f7:da:4f:e5:07:1a:d3:89:06:eb:b1:40:d6:87:e8:
                    50:75:47:88:b2:e4:d2:77:34:26:d7:6e:e7:85:94:
                    33:c9:52:9d:6d:92:15:36:1d:02:3a:d5:08:f1:78:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EA:DC:86:A5:FB:77:3C:B0:C8:DF:0F:C4:E8:43:73:03:B6:24:AD
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:53:30:2a:70:70:a6:87:03:d3:7d:29:8c:8b:88:da:ec:
         b8:a3:46:c7:a6:00:57:fb:0e:20:7e:6f:b9:81:2f:39:89:7b:
         6a:7d:3c:f9:ff:fc:d6:c8:44:40:19:b7:61:ce:9c:79:00:3b:
         8a:8f:f7:dd:39:b7:fd:dc:5e:d2:78:ae:7f:c8:d1:7c:2c:47:
         90:4a:4c:ef:ea:d5:44:2a:36:3c:5f:bb:35:ee:17:dc:22:02:
         13:3e:6d:d4:8a:a3:19:f2:95:16:5a:a7:ec:e0:99:f2:3e:f7:
         ee:90:9e:db:f4:4e:4b:30:b5:7e:ae:bc:ad:59:93:e8:93:3e:
         e6:c0:4e:ad:c2:17:a9:e4:28:cc:71:5b:15:59:bb:42:03:21:
         eb:f8:df:58:89:5c:c8:fb:bb:1e:fb:5e:90:0e:16:03:e3:83:
         5b:83:d5:7a:c8:c9:82:74:8f:98:3a:37:01:bd:f0:02:a8:dc:
         eb:90:14:db:c2:55:a4:dd:d8:16:c7:99:49:5a:46:71:47:3a:
         fb:16:92:e2:1d:17:99:0c:c7:58:10:6f:b3:a6:90:dc:d8:d0:
         d8:27:58:7b:4c:9d:75:df:ab:3f:12:d4:a5:4c:c5:ae:26:c4:
         08:da:c6:cd:5a:07:d8:94:0f:45:0c:d6:9b:f8:79:fb:c8:75:
         94:94:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:14:27 2024 by rpki-client on console-fra.rpki-client.org