Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          eV8+KsC67+2o+66/eW4MJyzRv5pAjKpCJ4FFDsm0mfk=
Subject key identifier:   DB:8B:EE:60:94:CF:26:33:40:1F:7B:4F:4F:A0:F2:E3:5C:3A:6E:29
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       01936632AD58994CCBC824BF473C18982A78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0714
Signing time:             Tue 26 Nov 2024 02:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 02:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 02:00:17 +0000
Files and hashes:         1: C-x-mFplfMYsG8UHTEQ1W0yWMDU.roa (hash: +rG/NTtMEMzcFW9dHX0Dw1uq6d0iTIJZ+yHQlfpQ0YM=)
                          2: EJSsHLYzJT39mPFyHtwBihZFs18.roa (hash: M8wt7W2lDiBfSNzt9ymUH/9Ah9RShJYJV/7CQkF8qcQ=)
                          3: Rolr2baB-MgkMT6zkumr5wY16Ng.roa (hash: H2lf79QWpEDnvJeCoc2pKBaiFHru26PK2FTQuJlC0aM=)
                          4: hHMa_VVzWNX0yUS8GLoAZQ92dhw.roa (hash: wKSgcdUNez8LyBt5+EnQIOjkHPyqOeDQqJxcCnniCK4=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: neewSk12r4iyP1MpktyeWvcLJkWZPQU934FaLGO76Jw=)
                          6: zt5_vqdq6MSwkfhrn2MtEX60Hw4.roa (hash: GnvHr13R1Hp9loaIJhANZd2Jf/9Zalmyth2nmyIlPTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:32:ad:58:99:4c:cb:c8:24:bf:47:3c:18:98:2a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Nov 26 02:00:17 2024 GMT
            Not After : Nov 27 02:00:17 2024 GMT
        Subject: CN=db8bee6094cf2633401f7b4f4fa0f2e35c3a6e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:3f:ad:69:ff:f6:5d:20:da:07:a2:af:78:
                    d9:4e:2d:21:89:62:06:fa:4c:58:60:ce:86:3f:2b:
                    60:26:4e:38:4c:c2:8f:bf:2f:87:be:d3:98:7f:90:
                    a0:1a:91:26:21:fc:09:a4:33:f6:a4:6b:e2:3d:b6:
                    65:6e:43:36:fc:68:08:d0:2b:7f:48:93:75:f0:7d:
                    f6:eb:9d:77:ae:82:8a:d8:58:52:e6:72:f9:02:c8:
                    58:eb:dd:c4:50:4c:a1:b8:b9:aa:e4:4a:44:7b:ce:
                    ce:30:20:4a:41:01:76:07:bf:e2:e3:fc:1d:3f:c9:
                    e7:f8:be:8a:cf:ed:9a:3a:3b:4c:5e:3d:03:c5:74:
                    7a:b1:f1:c5:2d:4b:63:ba:f7:49:96:50:41:30:00:
                    ad:05:da:e8:89:61:5a:9d:f0:e6:f9:99:50:8c:3f:
                    64:70:1d:e7:7f:2c:28:2d:0b:7e:b2:41:63:a6:26:
                    5e:b0:a9:50:33:83:a7:45:76:1e:f2:67:d9:15:2d:
                    c9:f1:84:c4:24:f5:0e:e9:5a:f3:3c:23:0b:31:78:
                    ed:1e:08:c0:19:81:a7:04:ca:eb:2e:0d:d0:cb:50:
                    1a:6c:70:f7:0f:e3:67:9e:94:a1:7b:e1:0a:d1:bc:
                    a0:04:e1:0a:41:3e:89:4d:cd:df:76:a3:5f:01:ea:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8B:EE:60:94:CF:26:33:40:1F:7B:4F:4F:A0:F2:E3:5C:3A:6E:29
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:06:96:5c:ff:e3:4b:f5:e8:32:49:75:1f:f8:39:ea:b4:6d:
         f5:50:6f:64:0a:68:40:11:ef:c2:0e:af:96:0b:97:12:37:2f:
         ed:b5:58:48:17:8f:89:a7:79:5f:62:63:cc:6b:45:ef:cd:55:
         0d:5f:eb:45:eb:ed:e4:97:ff:a2:8b:7e:cd:cd:39:53:ad:c2:
         8d:b3:da:80:a5:b9:51:f3:fc:50:04:c3:02:f6:eb:f6:f8:34:
         74:b4:10:29:e4:d2:20:fb:58:77:63:f1:21:3b:d6:d3:5e:21:
         ce:e6:26:ee:0e:5c:3e:70:17:ea:83:06:fc:ca:28:bf:22:51:
         b8:67:aa:13:ef:17:8c:7e:c2:14:77:f7:86:e0:11:12:e3:3d:
         9d:57:8a:48:da:bc:e0:c4:f1:e5:1e:f0:a5:4f:83:04:d8:18:
         10:ea:f4:ff:52:b5:33:5e:59:97:83:a3:5d:d2:51:56:f4:0a:
         4b:43:e2:67:a0:fd:02:6b:5f:b7:86:06:ee:89:e0:03:e9:8f:
         b7:9e:66:fc:9e:ae:4c:ef:b2:85:3d:28:9e:30:c7:49:1a:38:
         c7:d2:47:6d:c6:df:c7:70:bc:2d:21:98:08:57:ba:04:d9:0e:
         46:e1:a5:09:0d:6b:30:1b:ba:e8:96:13:a4:c9:85:82:30:39:
         40:f4:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:16:49 2024 by rpki-client on console-fra.rpki-client.org