Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File:                     T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier:          /xDK6EV+3ZdpQ6mE6MVDRCypsW7FOl5/xK+pmKwhB/I=
Subject key identifier:   96:D7:58:FD:61:57:BB:E9:2C:8A:45:98:07:AD:2B:10:33:A9:AC:77
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer:       /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial:       0193568A564DF4825EEB58197E316DE64251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number:          04BA
Signing time:             Sat 23 Nov 2024 01:02:06 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:06 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:06 +0000
Files and hashes:         1: EOSy5HG_SON3zsMLWnhueB_2ym0.roa (hash: K4wplQTjAtBbYCLAvtD1Og5hueubziKqhhO2pn/EI8Q=)
                          2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: E4y28q0r5mgwSIG2T0L1InSw4oLypBeoUPexJc+ux4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:56:4d:f4:82:5e:eb:58:19:7e:31:6d:e6:42:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
        Validity
            Not Before: Nov 23 01:02:06 2024 GMT
            Not After : Nov 24 01:02:06 2024 GMT
        Subject: CN=96d758fd6157bbe92c8a459807ad2b1033a9ac77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:b2:f7:9c:95:5c:70:80:b1:c5:21:84:4e:
                    f7:87:51:14:56:ce:7c:ba:67:c8:45:2c:96:20:c8:
                    b3:04:60:80:59:68:b7:4e:25:11:19:a5:d6:45:02:
                    03:fb:e0:80:bf:33:f9:d9:32:9f:2c:79:b3:13:11:
                    c8:76:cc:30:b8:c0:28:1a:0d:64:d9:6b:c0:47:1d:
                    c5:f3:75:0c:7c:37:ab:b2:12:5f:b5:6b:86:c3:31:
                    e1:b5:d6:9a:67:3b:48:49:54:f3:e3:0f:b5:91:ff:
                    cb:18:a4:82:f4:87:1d:84:bb:f9:81:e8:fb:ce:fc:
                    a4:da:13:9f:d1:ae:0d:80:f0:a0:c5:26:48:4c:04:
                    7c:60:6e:ae:6c:8e:43:a4:90:fb:26:04:65:00:1e:
                    73:68:2a:c3:96:9f:ed:0e:d3:f7:c3:41:9a:4d:5a:
                    85:f7:98:bd:b8:4f:23:ca:10:bf:8d:18:28:9c:c1:
                    d5:df:6f:18:d2:1e:b9:c0:6f:a3:6b:81:75:cd:31:
                    1a:dd:74:86:d3:45:42:15:26:e0:cc:b9:db:8d:6f:
                    7f:49:bd:44:18:b9:51:1f:3b:63:5b:f7:b6:5f:22:
                    3a:bd:5a:de:db:81:77:11:26:92:d2:0a:ec:58:58:
                    e2:b9:42:d1:d6:40:60:0b:81:3b:5c:f8:39:47:d8:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:58:FD:61:57:BB:E9:2C:8A:45:98:07:AD:2B:10:33:A9:AC:77
            X509v3 Authority Key Identifier:
                keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:14:29:c3:3e:79:83:a6:51:59:4b:3b:b7:af:24:5b:10:
         22:d7:98:bc:c4:31:5f:5d:fd:4e:f1:41:ec:b1:f2:4a:8a:0d:
         20:a6:3c:77:29:c5:f1:1b:30:f9:e7:fb:3f:00:9d:85:b8:ce:
         97:04:97:b2:e9:4c:6a:25:b2:d3:3e:d9:66:15:0e:9f:0f:bd:
         28:85:45:2f:45:8c:00:71:57:76:ac:c2:00:24:fd:92:5a:22:
         62:91:f8:8a:2a:5a:95:e5:c3:17:2c:44:76:1b:a4:38:7c:e0:
         a0:67:0a:15:5f:e0:5f:2e:ad:75:7a:b3:7b:88:1b:59:20:ea:
         95:c3:4d:9b:b4:f5:c7:25:ce:2a:a0:e1:30:04:66:bc:b7:ff:
         8e:e7:54:52:d8:65:2c:1e:09:07:50:e2:7a:81:e2:ed:b8:a8:
         86:db:0b:53:b1:a4:12:f0:1c:33:c9:ff:30:80:aa:8e:7f:7c:
         5b:11:57:12:dd:30:37:f2:94:34:84:44:1c:e6:a8:cb:72:73:
         23:de:c5:be:9b:18:fc:c8:06:0c:76:25:6e:8b:60:0f:8f:5c:
         55:65:08:27:6a:84:31:6e:97:38:35:75:c2:4c:e6:02:e5:d8:
         46:98:fc:2e:3b:97:8b:9b:92:93:67:f9:b9:20:87:76:3c:b3:
         0e:56:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:32 2024 by rpki-client on console-fra.rpki-client.org