Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File:                     cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier:          DSu4oBNcNSYTJmg/Mp8zfUvqeKO/p5M0iW/mcDPYPJ0=
Subject key identifier:   D4:92:B6:AB:80:D8:D8:DB:A7:B4:AB:90:FC:A7:E7:DA:00:75:86:36
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer:       /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial:       019357D2354D59A97AB748D2075C8FABA229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number:          0377
Signing time:             Sat 23 Nov 2024 07:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:14 +0000
Files and hashes:         1: aluq5CoDcSgM-Q_dy7TdGaOQJOk.roa (hash: lLja1UiXN53YcqFzhXVvoDvXi/dh2XIR/2sHYelOVAQ=)
                          2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: lo+wKbGndMvmsDF51rmOawpq401huRAXGxJVh8ENCdg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:35:4d:59:a9:7a:b7:48:d2:07:5c:8f:ab:a2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
        Validity
            Not Before: Nov 23 07:00:14 2024 GMT
            Not After : Nov 24 07:00:14 2024 GMT
        Subject: CN=d492b6ab80d8d8dba7b4ab90fca7e7da00758636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:fd:b5:5d:b4:78:6b:c9:46:f0:d3:35:f9:
                    51:90:aa:7b:1c:51:10:9a:6b:26:19:e9:71:82:3f:
                    38:9c:99:3c:cd:b1:ee:9c:26:39:b1:6e:05:73:96:
                    e1:57:25:d8:63:24:14:90:c5:d7:c8:ac:6b:40:50:
                    76:86:27:0f:31:6a:f3:1c:50:08:fc:6c:13:21:05:
                    8d:40:1d:60:4f:a8:01:7d:2d:98:4b:d4:65:6a:13:
                    0b:ab:56:50:1a:fb:11:50:14:3c:22:41:6c:56:71:
                    d7:49:bf:2f:ca:3a:58:3b:17:4b:2b:b4:2b:fa:bb:
                    d1:8c:01:65:76:8e:10:ca:32:ff:9c:a1:6b:1f:ae:
                    9a:6a:ae:2d:25:44:54:23:67:bc:c6:a9:ad:70:12:
                    bb:5b:af:8a:2e:d4:2c:c0:0c:31:7c:f3:a5:48:ba:
                    b9:a1:ce:e9:5c:ad:5d:ed:6f:46:d1:fa:ec:ea:86:
                    8e:7c:61:22:43:ec:48:13:07:ab:1a:ef:9b:b0:d7:
                    02:8d:dc:81:a8:62:47:96:52:50:fe:9c:e2:d5:f0:
                    8c:48:22:81:85:ef:05:dc:90:53:91:99:17:05:5b:
                    ce:bb:40:4d:5b:f1:cc:19:69:bb:56:14:c6:14:fe:
                    c2:15:56:9b:8d:00:e1:83:f5:59:5b:6e:a8:06:3f:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:92:B6:AB:80:D8:D8:DB:A7:B4:AB:90:FC:A7:E7:DA:00:75:86:36
            X509v3 Authority Key Identifier:
                keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c2:5a:20:62:21:8a:80:62:ea:54:80:6b:ec:bd:90:88:83:
         11:93:73:71:1c:44:ef:bd:3d:f6:4b:a7:71:1a:bf:37:56:b3:
         72:ad:d8:aa:c2:7c:cc:d4:41:da:e4:0b:63:db:6b:5c:ee:e2:
         2b:ae:d2:9a:0f:2f:1b:b3:ba:e9:f2:37:1f:c5:aa:92:90:4c:
         26:18:b7:0f:e3:7e:d6:d9:33:05:81:d3:ea:d1:39:3d:29:93:
         40:c2:8c:ed:e6:2c:8c:0c:f8:b2:b3:6f:7a:d1:73:e1:6d:04:
         ca:89:97:73:de:e5:1d:e8:df:55:30:c5:cd:9e:4a:c8:fc:00:
         34:e5:05:5b:ed:95:68:e6:5d:aa:1d:28:bb:27:47:44:7a:82:
         67:cf:8d:51:ff:c7:43:48:44:28:94:62:f9:13:bd:23:f0:04:
         a1:00:8f:0a:70:4e:e3:d5:12:d2:db:45:44:16:76:86:02:fe:
         f0:8b:7d:b3:8f:e9:51:87:77:d8:c9:8a:f7:76:c5:94:d4:cb:
         92:97:2f:67:e3:9e:b5:33:67:b0:6c:ff:74:26:ed:d1:2e:ca:
         48:95:7b:74:99:5c:02:29:e2:c6:bf:71:25:13:30:fe:fc:46:
         a0:ab:8d:99:ab:63:6b:66:c3:e1:5c:7c:8e:00:51:c3:fd:60:
         ce:f6:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:11:33 2024 by rpki-client on console-ams.rpki-client.org