Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File:                     fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier:          bf4wEVWfv60W7/P5TlUPD/ANBwnpVt7M6X48G3di2gk=
Subject key identifier:   F4:A0:05:2C:EF:A6:C4:D3:34:49:80:45:78:84:46:7B:AC:82:3D:A0
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer:       /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial:       0193579BBFAE4701FEB88A92E6567D6149D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number:          1328
Signing time:             Sat 23 Nov 2024 06:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:45 +0000
Files and hashes:         1: bzBKU6eXwwqqdUb44TjC--f-OGs.roa (hash: N+aQKh7fLRs10CI0m1PR+mgex0T+v81/a1yP3YRoLKs=)
                          2: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: ovFQNBqV4HJIXMn3LwPRDiKJkNwJQwGTzI1lU8v4Q6M=)
                          3: jzCb-yC5oLln-NBurSqRNPEp3vA.roa (hash: rHOT8RTf//rfOIWu/rkXNFvqrubMdl93FU6rJ1q5X8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:bf:ae:47:01:fe:b8:8a:92:e6:56:7d:61:49:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
        Validity
            Not Before: Nov 23 06:00:45 2024 GMT
            Not After : Nov 24 06:00:45 2024 GMT
        Subject: CN=f4a0052cefa6c4d3344980457884467bac823da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:05:c6:db:c8:ce:26:bd:d6:3b:d8:cd:2a:10:
                    c5:80:c4:a4:02:05:40:a6:01:bd:46:1d:12:c9:3e:
                    ad:c0:77:af:23:f4:cf:90:7a:2d:8f:a0:ce:be:29:
                    bd:ca:9e:df:27:55:76:fa:b0:d0:1a:c9:6f:54:9c:
                    73:3d:b2:42:d0:ec:83:a5:60:f3:37:35:4a:5d:5f:
                    1d:7a:3d:1c:e5:1d:2b:61:1d:ea:8d:cd:4b:7d:f9:
                    be:7d:55:93:39:66:9a:4f:53:43:c8:9b:c4:67:be:
                    0f:d5:69:a8:5f:15:04:6f:ce:9b:7b:13:10:bf:f6:
                    d5:83:83:1f:2e:c0:cd:9c:b7:f0:07:46:a2:5c:fe:
                    2d:0c:c6:51:77:d4:ad:40:f5:2d:b3:57:c8:97:1f:
                    16:fb:5d:12:f9:5e:60:b5:da:28:7c:1a:34:04:99:
                    2f:ac:75:d2:89:de:33:da:6f:07:58:9f:36:db:63:
                    ff:98:49:44:8e:e4:d5:a3:ef:0d:b2:3b:21:55:27:
                    19:4e:5a:39:78:7c:25:d0:d8:c5:96:1d:63:ce:77:
                    90:59:02:9f:c2:cc:07:22:44:0a:ae:46:da:e7:35:
                    8c:de:38:3e:5f:e2:a6:eb:74:a3:aa:95:1a:70:c7:
                    65:7a:b0:bd:f5:03:4d:3d:ab:cd:aa:3d:4d:23:d5:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A0:05:2C:EF:A6:C4:D3:34:49:80:45:78:84:46:7B:AC:82:3D:A0
            X509v3 Authority Key Identifier:
                keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:29:7f:58:7c:e5:09:46:32:25:ce:3c:f3:88:b4:6b:18:
         ae:40:5c:d4:91:b0:2c:4b:17:ea:c2:c6:f3:49:b4:3b:b8:50:
         51:f8:63:d8:c7:a2:c3:8f:22:da:f5:b6:f5:9d:f3:fa:19:79:
         4a:da:46:a5:a7:0b:9c:92:7a:ab:2d:a2:e6:45:28:3e:00:78:
         bb:32:f0:7b:67:54:57:dd:12:54:c6:65:6b:d5:b3:f2:2b:c5:
         0e:7b:e9:70:a2:0c:f8:04:cf:94:f0:b8:67:96:4d:22:80:49:
         82:be:7c:1a:aa:e4:42:65:ef:d5:c4:6c:c2:84:a9:61:f4:c5:
         a4:6e:06:88:1b:90:bd:2b:f1:af:5f:0a:ff:87:e4:62:e7:58:
         4b:e1:40:d5:63:45:3a:91:9a:d7:d4:fc:cd:f0:0b:6f:d5:ba:
         e0:09:2b:bd:80:ad:22:08:cb:15:a7:ed:d7:a2:aa:22:c8:f9:
         f6:e5:dd:eb:7d:27:21:91:9c:26:54:35:82:c0:f5:3e:93:f7:
         8b:94:6a:59:17:f8:a0:5d:db:1f:e0:a3:2f:b0:5c:96:a4:d0:
         ed:9b:6b:2f:cf:2f:ad:12:2f:c8:97:fa:8e:ef:af:77:03:65:
         d9:fa:2e:8e:1e:8c:26:32:f3:f2:c0:08:3e:97:ae:b1:76:34:
         fa:ec:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:33 2024 by rpki-client on console-ams.rpki-client.org