Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File:                     usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier:          pz+gmjdcbkNfZcNzmGlwquZGyQkEOMcI5cCno6V4vPc=
Subject key identifier:   AA:22:67:5B:25:52:1D:A9:8B:B3:46:87:D5:7B:0D:54:15:A6:96:B2
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer:       /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial:       019356F67EC75E091FE2BBCDF26047EC6A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 03:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:15 +0000
Files and hashes:         1: ngqRTFATKz4xLTvnIwtA9bay5sU.roa (hash: XELDoAGk2HMzbINiiNi3ocAxI62/Eixgc7tCWzWkCh8=)
                          2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: 7FUfNOHdqNGAcJKpZrDlpC23A5CTUSUy/sQRO9QAdwY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:7e:c7:5e:09:1f:e2:bb:cd:f2:60:47:ec:6a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
        Validity
            Not Before: Nov 23 03:00:15 2024 GMT
            Not After : Nov 24 03:00:15 2024 GMT
        Subject: CN=aa22675b25521da98bb34687d57b0d5415a696b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:34:67:96:99:52:d0:a8:ea:ed:02:5a:17:
                    41:ed:5b:0f:1a:e3:86:b3:7c:0a:da:60:c2:a1:59:
                    f4:c0:4e:9a:78:04:be:17:c0:bd:81:93:63:3b:64:
                    55:f5:a7:cd:df:a5:15:b6:33:da:3b:ec:52:53:ac:
                    9c:76:37:ee:18:01:5c:c1:e4:2f:cc:f1:ec:ef:6c:
                    b2:ac:a1:b9:14:2b:d4:bd:a9:c2:8e:4c:bb:ed:94:
                    de:0a:c1:13:cf:41:3f:2e:71:9f:6a:ae:53:cd:68:
                    1d:a3:f1:d5:56:7a:c0:ca:12:55:98:3d:53:01:9d:
                    d9:c0:f5:d1:24:51:80:99:e4:7b:d4:b4:f8:39:0c:
                    61:4d:12:c7:93:aa:8d:7c:3c:e1:69:a2:ed:f9:fa:
                    ea:e1:eb:01:f6:bf:61:ce:81:99:02:5f:75:88:c9:
                    3b:f0:9c:cb:ed:fe:a6:1f:48:e3:a8:58:d5:de:46:
                    af:6a:e3:03:43:74:a1:1b:c7:8f:36:a9:7e:7b:b1:
                    a9:87:51:d4:fc:d7:b7:02:ab:14:01:e2:25:c0:9f:
                    43:bb:0d:e9:dd:4a:ed:7b:a7:ca:58:32:8d:bf:e9:
                    47:2f:7d:4e:2c:7e:bb:9b:24:64:8b:5d:df:18:45:
                    0d:64:17:8f:b8:a8:72:88:6f:c3:a1:0e:ea:5a:c9:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:22:67:5B:25:52:1D:A9:8B:B3:46:87:D5:7B:0D:54:15:A6:96:B2
            X509v3 Authority Key Identifier:
                keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:66:c6:15:e4:7d:6e:a6:96:89:b7:bd:0a:95:13:5d:b3:7b:
         13:40:0c:25:fa:3c:d9:2d:fe:38:a1:4c:f3:33:e5:35:3b:7b:
         75:d5:a8:fe:66:bb:77:ca:ea:bc:10:28:63:e8:0d:76:3c:18:
         1c:7c:4b:88:26:d5:8c:51:e3:b1:0d:21:ec:6b:1a:56:52:aa:
         15:5e:26:ac:f0:0e:89:77:7a:7d:9e:47:28:07:ec:6e:f7:fb:
         a7:ad:77:b1:94:a9:ab:df:bd:68:3f:86:bb:bf:41:75:ad:20:
         f6:fb:1d:40:6b:6a:11:55:43:0f:11:5e:a2:19:79:e5:bd:4d:
         a2:dd:2b:ea:85:c7:5a:9d:e0:49:6b:23:6a:d6:e3:b5:a6:90:
         75:22:d3:d0:1a:77:b6:00:b0:87:c5:61:ee:2b:b9:8f:3f:4c:
         ed:ac:d2:39:98:26:7a:43:d7:f6:e6:ba:69:fd:14:74:0e:51:
         b1:d9:0f:f7:ae:b0:c1:a7:13:b5:d2:98:53:f3:0e:14:25:3f:
         1e:5c:81:81:bf:f1:d2:3c:fc:b0:32:01:d2:21:3f:fc:8d:06:
         2e:02:0a:b3:cd:8b:7e:3d:f1:81:7d:2a:50:83:8a:4b:45:fb:
         e6:52:28:3c:bf:1d:ae:15:88:ca:05:f9:12:91:e8:00:83:78:
         c6:9e:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:08 2024 by rpki-client on console-ams.rpki-client.org