Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File:                     a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier:          THAnQLjdELAkBjcHV1V8s3omMAd0qX9BtvKoGVPF2mc=
Subject key identifier:   4B:4D:D0:73:28:F0:BA:C8:D9:03:C6:F7:B9:13:55:7D:F6:3F:5D:78
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer:       /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial:       019352ADA08239FF4D0305C742D4CA407309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number:          0774
Signing time:             Fri 22 Nov 2024 07:02:10 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:10 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:10 +0000
Files and hashes:         1: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: 9213as4ClUEER4nI0AsPhhNHA2TiaxVierzVcOJ5OEI=)
                          2: zj6xxdt0mpcs-hDyQHF3dyWq-qU.roa (hash: Brjk/iGa+c6w7sEet1EWyjnE1iZhFqj1ftyXEgYyL6E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:a0:82:39:ff:4d:03:05:c7:42:d4:ca:40:73:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
        Validity
            Not Before: Nov 22 07:02:10 2024 GMT
            Not After : Nov 23 07:02:10 2024 GMT
        Subject: CN=4b4dd07328f0bac8d903c6f7b913557df63f5d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:1b:fc:fd:0f:0f:e2:72:a7:8e:d2:58:94:
                    83:56:d6:c2:f1:02:e9:eb:6d:0f:e9:99:ca:5b:8d:
                    f3:8d:8a:ba:6d:ec:ca:b1:95:65:34:3f:45:ff:5c:
                    05:41:19:86:e4:3a:3f:b7:41:16:42:8c:19:2b:80:
                    40:3e:1c:7a:a0:dd:03:62:5c:90:ff:01:fd:d2:14:
                    b7:58:93:44:ec:aa:a5:aa:87:7f:51:04:81:fc:2a:
                    1f:aa:ae:3f:57:8b:79:36:56:98:5f:a6:bf:16:8c:
                    93:7e:b3:e4:17:84:bd:d3:c8:2e:29:70:69:74:3f:
                    d0:a8:76:ac:bf:9a:ce:e2:9f:8f:cc:ac:26:be:6d:
                    ff:3d:be:51:b2:1a:8a:d4:5b:4c:47:ab:21:b8:0e:
                    cd:4a:22:dd:90:d9:c3:7e:a3:01:71:40:df:8d:6e:
                    9c:79:e3:75:07:fc:bd:f3:da:40:81:27:dc:90:57:
                    f0:7a:6a:e3:eb:6f:2d:bb:08:fa:2c:db:18:b1:6c:
                    21:dc:95:27:6c:82:3c:dd:34:9a:f6:da:15:ff:eb:
                    13:b1:3b:8b:58:40:b8:8f:a8:15:2f:2a:8f:01:f9:
                    91:15:d3:41:39:59:a3:80:61:3b:a1:95:ce:07:70:
                    9d:0d:a0:d2:bf:1b:e9:38:e9:65:d0:d4:96:32:41:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4D:D0:73:28:F0:BA:C8:D9:03:C6:F7:B9:13:55:7D:F6:3F:5D:78
            X509v3 Authority Key Identifier:
                keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:53:3d:f3:9a:93:3c:5a:6b:be:39:c1:6d:d4:8a:9f:92:
         04:eb:2d:56:cf:39:a6:34:64:ee:1e:f2:25:9b:64:c7:90:4e:
         5e:17:3e:18:cc:b0:15:93:77:6a:49:18:d5:ec:95:64:d2:c0:
         ea:0a:ef:dd:04:a1:c2:e5:fd:93:ef:07:d4:d0:6f:6e:4b:1c:
         a8:01:5a:57:6b:75:01:17:07:24:50:d8:03:a3:4d:66:e9:94:
         f4:00:8a:3a:6c:48:97:e1:81:6f:0d:9b:1a:ca:57:0a:3d:71:
         bc:1f:f5:c1:db:af:83:4a:36:01:58:43:1c:19:6c:bd:08:7b:
         7f:a0:a0:38:e5:85:db:83:01:5c:1a:32:22:40:dc:7e:96:fa:
         76:66:ef:ef:59:2d:17:5b:74:de:69:97:a8:7d:4e:be:d1:c0:
         d7:d3:f1:a3:ec:06:27:be:c7:62:90:73:80:bb:e4:de:4a:65:
         ab:59:8d:f4:e5:de:b1:1a:75:cb:10:df:28:a6:e3:c1:2d:6a:
         96:ba:a7:86:15:08:4e:f7:16:4c:00:3c:d8:51:d6:52:4b:5c:
         68:44:29:9c:44:72:51:4f:b0:36:9b:22:9f:b4:0c:e9:51:52:
         0f:4b:f3:c0:55:af:21:83:ba:11:aa:4d:ad:64:ef:26:45:f3:
         83:ad:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:47:44 2024 by rpki-client on console-ams.rpki-client.org