Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          F8V+s0IlL7pxYLenT2rGHSpYfj0by78hElgGBKgrfy4=
Subject key identifier:   AB:CE:85:B3:A3:9C:44:68:A8:5A:69:BE:A9:4B:8F:6C:F8:CC:19:82
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       019369DAF0841146EF9CAF388E24FAF83FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          12E1
Signing time:             Tue 26 Nov 2024 19:02:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:56 +0000
Files and hashes:         1: HH3C6uyvny3f5cfRSuRRrkTn7p0.roa (hash: wnanHcSIIw4WAf2yQ80glIUxw8YiiGVuFVegnEF7FWU=)
                          2: Hm_uOgEjUaf6MEOksmA-bctlQ64.roa (hash: 2FAXPYRM6gUJBa6wWY2y2Hc3tfOPe8lg+XjBJr1ag9E=)
                          3: QKjL7c8aw4P0vsZdcQq-PPUzYTw.roa (hash: PGNVDC77WjV4vz5ZxuBC2ntRUiArKxehwhqNnskrQWw=)
                          4: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: cuFYUA4O4JWGOGCkW4dY3Kd5TnzG/VrD4L6fAxZbng0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f0:84:11:46:ef:9c:af:38:8e:24:fa:f8:3f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: Nov 26 19:02:56 2024 GMT
            Not After : Nov 27 19:02:56 2024 GMT
        Subject: CN=abce85b3a39c4468a85a69bea94b8f6cf8cc1982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:26:5e:55:59:db:4a:3c:e0:38:db:19:63:f3:
                    aa:34:e2:c5:9f:47:8f:42:a8:1f:70:c4:fb:de:54:
                    6b:6b:6e:3a:1a:c9:bc:82:fd:d4:1f:41:ad:6b:d4:
                    45:30:c2:46:d0:52:72:66:c8:67:a6:d8:85:47:e3:
                    40:59:44:f7:81:9b:5d:65:2d:71:d9:11:eb:62:ec:
                    57:e0:9b:4c:19:a5:f1:ad:1b:97:0c:18:c9:d7:ad:
                    17:c8:97:8e:e8:2b:ac:58:7e:d0:7e:61:db:62:a1:
                    a2:26:c7:7e:89:a7:09:70:15:d4:af:bc:76:fb:4b:
                    2c:65:d8:61:e8:6f:58:4d:e1:d9:e2:f7:be:93:3b:
                    7c:2a:20:58:8f:a4:2a:57:dc:e9:63:88:11:d4:fd:
                    cb:8d:08:de:0a:6c:64:ee:aa:77:7f:23:21:01:7b:
                    88:27:a5:6c:d8:87:17:28:5a:86:f5:19:ed:ed:fb:
                    e4:ab:07:19:bd:d3:a5:55:0a:cb:f2:e3:72:ef:17:
                    c2:91:45:c3:42:f6:91:a9:41:9d:bc:54:61:11:40:
                    89:9c:e2:c0:13:b4:bf:3f:4a:95:9b:b7:9e:20:d1:
                    31:52:20:da:eb:bd:65:b6:00:7a:87:39:a5:9b:63:
                    c2:4a:cc:be:0e:3e:eb:ca:ee:c3:9f:60:45:24:b7:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CE:85:B3:A3:9C:44:68:A8:5A:69:BE:A9:4B:8F:6C:F8:CC:19:82
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:81:ff:b1:b0:0f:d9:2d:7d:63:fa:c1:be:06:71:02:1a:41:
         5b:9f:43:0d:0c:30:ec:a3:f8:d8:98:74:18:7b:21:1e:6a:72:
         23:4a:d6:e9:96:00:10:36:ff:40:99:5a:e6:13:65:bf:3c:57:
         be:d6:50:d1:fa:28:8b:da:5e:1c:03:da:32:85:b2:b8:04:a2:
         83:a0:9d:f4:8c:31:6f:70:80:2f:7a:ed:c9:a5:be:df:af:7a:
         d2:96:0b:bc:eb:05:40:f7:65:6f:ea:a0:40:de:5d:9f:04:19:
         26:b0:d4:63:85:39:b9:19:21:2c:30:f3:a3:a2:24:50:7c:f4:
         c0:44:50:e5:16:cf:a6:21:83:f3:49:91:35:29:d3:e0:af:c8:
         5d:5a:e3:05:93:db:f6:35:11:d2:2d:89:92:94:e8:92:36:82:
         9e:71:ae:a9:0a:c6:9b:18:fe:94:91:70:a8:72:45:ae:07:50:
         9a:c7:fb:d2:66:eb:3e:9a:3b:f2:d9:86:10:c2:7e:d8:c3:7d:
         ae:d8:18:35:22:db:c2:42:03:64:43:f6:ad:f3:2d:15:22:98:
         01:a4:81:4c:47:69:30:14:54:20:97:e7:5a:87:d0:48:16:90:
         6e:f1:88:79:85:63:90:f1:72:b1:be:09:d2:92:c1:b5:b2:25:
         be:ec:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:04 2024 by rpki-client on console-fra.rpki-client.org