Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File:                     8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier:          gQROboIQefDl7h4nj0xBRJ9EGHUE67ZB0Ob0q8WsACQ=
Subject key identifier:   95:77:E4:FB:B5:A3:C3:B1:63:ED:1C:9A:21:F6:D7:E6:FD:23:76:05
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer:       /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial:       01935689DE996117EA128C2BC3BAF4B3CCAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number:          0A67
Signing time:             Sat 23 Nov 2024 01:01:36 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:36 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:36 +0000
Files and hashes:         1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 7YESJekggHJdjv13eRoeVRQiR/CqJeds26Y/lCFLflE=)
                          2: Wa0jF6YwMQbMWcykXcmNQdHQ-Wo.roa (hash: DSveJZwFZRFPdwWAG6bEQIB2qAhSXGs6IEXa44LHKIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:de:99:61:17:ea:12:8c:2b:c3:ba:f4:b3:cc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
        Validity
            Not Before: Nov 23 01:01:36 2024 GMT
            Not After : Nov 24 01:01:36 2024 GMT
        Subject: CN=9577e4fbb5a3c3b163ed1c9a21f6d7e6fd237605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:a2:0b:36:7a:0c:96:ef:e3:90:b4:2e:02:
                    d5:b7:77:a5:eb:cc:22:aa:4c:10:10:8c:c7:db:f2:
                    c5:60:16:6b:87:68:5d:a9:e9:96:74:22:2a:11:f6:
                    6d:c7:7e:b8:6b:89:c3:8c:4f:77:1c:61:54:79:21:
                    63:0a:0f:9d:94:25:54:3c:d9:03:70:cc:79:4e:42:
                    65:88:c0:f7:e6:ab:5d:97:e5:72:9a:27:65:c4:82:
                    4c:58:fa:0f:93:a2:0a:67:a1:fb:15:12:8e:bc:e0:
                    b5:09:c7:d3:01:6d:fe:6e:10:57:4e:bd:45:c4:35:
                    f6:e5:b2:91:06:6c:75:76:6d:98:6c:09:6e:42:b5:
                    3a:a1:fc:0a:fa:a2:01:24:51:95:ae:1a:38:c8:45:
                    44:e6:bb:60:1a:04:f6:08:da:7b:61:c4:9c:5d:a5:
                    53:89:52:a4:24:bb:63:8d:81:25:8f:a4:e6:dc:b4:
                    60:c3:c8:5e:07:21:42:9e:29:01:2d:4f:dd:f7:04:
                    2e:df:c7:2d:e5:dc:89:3f:19:fd:9e:ce:25:73:df:
                    d6:ef:4b:dc:4c:ea:c0:ae:16:4e:7c:96:44:c8:87:
                    31:46:c7:7c:70:b0:6c:f4:e1:69:76:05:f4:34:4b:
                    cd:ba:2f:d1:f6:13:b8:41:96:ac:a8:dd:bf:49:9a:
                    68:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:E4:FB:B5:A3:C3:B1:63:ED:1C:9A:21:F6:D7:E6:FD:23:76:05
            X509v3 Authority Key Identifier:
                keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:46:72:6c:52:3c:89:0f:24:62:98:52:b4:7a:f3:f1:f1:
         14:dd:d5:22:bf:5d:6c:9c:30:1b:8c:b5:50:6a:38:9f:fb:76:
         69:45:72:f0:05:e7:99:35:4f:5c:40:07:33:a1:cf:5c:a9:70:
         0e:61:d3:42:42:7f:57:46:6e:6b:4b:0b:4a:ff:d6:91:4a:67:
         c2:dd:10:f2:3f:5e:40:03:f5:1f:cb:ef:84:13:d5:a6:5a:95:
         27:96:fc:10:a9:52:5b:2d:05:2d:e7:8e:36:00:1b:93:30:84:
         08:a8:02:4c:21:30:83:f9:80:58:15:48:41:c6:e5:0e:9a:2e:
         24:03:6b:ca:2c:76:5f:9d:32:eb:7b:17:59:de:48:b2:b9:07:
         27:c4:7d:90:9c:ea:05:40:2e:01:5d:00:5e:89:4d:ba:fb:4b:
         f8:12:2e:61:64:a7:58:41:76:f7:f5:7a:7e:35:1b:ed:8b:22:
         e9:9d:18:e8:41:6b:f6:8a:f6:75:58:9b:b4:a0:64:34:12:4a:
         79:c9:c1:81:bd:90:6d:81:77:00:ee:af:ed:15:20:bc:49:72:
         b2:a6:41:a4:2f:1f:bc:c6:21:5c:0f:82:bc:ff:d0:4c:69:d7:
         85:f2:a0:d9:cf:5c:43:91:62:9b:de:b1:f4:95:7e:ae:e8:7b:
         b6:fd:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:34 2024 by rpki-client on console-ams.rpki-client.org