Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File:                     zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier:          +searcxuL3hX7WOKEWKcW1G2jfF1/apvR3uMURKeUtM=
Subject key identifier:   69:4F:27:B5:CE:57:7A:60:0D:44:D8:3A:DB:E2:14:9F:DD:F0:8F:98
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       019352AE9ABEA006CBBB0595A78B06708768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 07:03:14 +0000
Manifest this update:     Fri 22 Nov 2024 07:03:14 +0000
Manifest next update:     Sat 23 Nov 2024 07:03:14 +0000
Files and hashes:         1: 0xHjVSZdRfrStkMzArdqdZbKInA.roa (hash: QcW+K87diU5BkEN/PvkZJcP6sfhBwWdtE+/6h6H/nQk=)
                          2: 6GjqnuCuDVv_J-V6e1fcSAZNM8Y.roa (hash: +2ZrqdKMGq4za9nf9hc6i6aIsUE79Pri6Ng9W87kHR4=)
                          3: V-WztWpNQN3v70M5nFo3CeYonfo.roa (hash: sb09Cdd8d53Y4vQ3YKix/zgsSHBlBJmxWU03hD1ua9Y=)
                          4: X5WodBu3Me40y58jT9DgXkn1quI.roa (hash: 3Ux0oyp+2KFx72lcCbMaI/bInQzpCCbNZvrymtK0yVM=)
                          5: XWSuYIY-y_Sya5OxmXkQqjup0gc.roa (hash: 9QVWsqoBncVVxPPAkJC0HV52oWAgLzg1gTvmGQ68mTI=)
                          6: kL9QonV4wN-kpc9dHdgV56YtQl4.roa (hash: wDwu1ONeglr5+9PFg3ggzb7lNzthhjoc891qfzymJV4=)
                          7: mYcpzNPDBX_MC14MZpRFwBuQFW0.roa (hash: 1IRYr7sXLXl6b6ffdA9wcVI9nCBPOO3s6yuWRC+ZNaI=)
                          8: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: X62W/Ue35KpOAqimsg6fhCtxNbvRbH9HXokeJQCv7EM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:9a:be:a0:06:cb:bb:05:95:a7:8b:06:70:87:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: Nov 22 07:03:14 2024 GMT
            Not After : Nov 23 07:03:14 2024 GMT
        Subject: CN=694f27b5ce577a600d44d83adbe2149fddf08f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:f7:97:bd:54:ad:2d:2b:15:15:46:db:83:
                    e5:f7:92:e9:37:7a:27:9e:2f:8a:bf:4e:23:76:b5:
                    b6:c9:b0:3b:f3:b2:1e:b3:93:8a:ba:9d:b9:7b:24:
                    fb:44:ce:04:61:53:e9:da:93:a1:18:27:04:01:03:
                    ac:7b:2c:66:cb:fc:33:f6:a8:c5:78:4f:e8:0c:24:
                    cd:09:3a:9c:36:9c:89:58:88:72:37:bd:99:f2:32:
                    81:b6:38:f8:97:e8:6e:31:6b:fc:12:27:12:72:b7:
                    68:66:3d:a9:88:4b:ab:87:eb:4d:be:29:a3:b5:24:
                    e6:24:6e:08:8f:d9:ed:e8:30:58:21:58:ce:93:65:
                    8d:10:8d:bc:b9:b5:cb:78:72:90:29:de:98:f5:fc:
                    88:f1:31:e1:f4:de:2c:1e:f6:e0:6b:c4:36:7f:6e:
                    be:86:d1:22:b5:a6:cf:20:ff:17:a4:af:0f:10:3d:
                    67:d4:ea:9a:15:60:76:4e:fa:13:0f:73:b3:e2:0e:
                    30:30:15:c8:6d:c0:b1:06:aa:8e:af:09:01:de:f1:
                    8f:43:76:b4:51:0e:76:1f:c4:c3:58:f8:94:8a:87:
                    c8:e8:8e:b4:b3:95:c8:59:ff:a9:b5:f3:d8:a9:38:
                    95:69:63:79:f6:37:98:3b:04:8c:38:99:51:cd:81:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:27:B5:CE:57:7A:60:0D:44:D8:3A:DB:E2:14:9F:DD:F0:8F:98
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:81:0f:c7:89:52:4c:a6:f5:13:6e:9f:c2:79:6f:b5:9f:3f:
         63:76:af:6c:18:13:d0:4f:1a:e2:ea:b8:30:99:2d:62:1f:d5:
         a0:0a:4b:18:4e:4c:fa:38:01:8e:d0:99:0c:23:8b:37:5b:a0:
         62:ae:ac:ed:b7:14:dd:2a:49:f7:e2:66:a1:44:cd:74:27:b3:
         0e:e7:ab:96:52:73:df:9a:09:07:e6:82:4d:e6:f6:4a:f8:e3:
         e3:1a:1a:ed:47:34:26:5b:b4:86:cc:f9:b3:cb:7a:32:98:22:
         5c:54:16:43:04:52:6a:6a:89:4f:d5:13:88:87:d3:4d:e6:f9:
         39:a7:81:32:0e:64:bd:82:43:db:63:cc:e5:ae:3f:c3:20:93:
         23:6a:e9:f4:3f:5a:25:51:f5:88:6c:fa:26:4b:a4:99:c9:70:
         3d:bc:0a:53:47:9a:49:aa:ae:3e:c4:20:2e:84:79:e2:10:63:
         d8:ce:41:47:b2:07:26:a4:0b:97:43:5b:1d:3d:3c:69:2e:83:
         d6:01:71:8b:7d:bd:db:29:85:0a:93:18:19:dd:e9:08:a0:40:
         85:cc:a6:79:9e:6a:0c:63:5e:f7:9e:7e:8d:96:c4:45:64:d1:
         fd:5a:51:8a:c3:55:80:7d:e5:99:aa:e5:1e:52:4d:8c:f7:07:
         52:67:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:32 2024 by rpki-client on console-ams.rpki-client.org