Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File:                     o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier:          dpF2YXrTgW59LKEIAStm9+Y1UznIsxA6Cb+h72okH9s=
Subject key identifier:   B4:2D:E2:0D:DF:A5:E7:51:4F:1B:9D:77:E2:C0:56:BC:90:AC:CC:C4
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer:       /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial:       01936A46979338A8BE02F591355A905C0EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number:          1015
Signing time:             Tue 26 Nov 2024 21:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:31 +0000
Files and hashes:         1: Qml9SyeRjUOWuE1hVRihuu0Lo7M.roa (hash: jbkxw2b8mChEmY5mQNvVNj64jOKLZrqSeqANgR2IIJ0=)
                          2: guBY5axYg6fQaqviS0rbcHGzcm0.roa (hash: RG9zrPmkYfp0eq4Y/LDfyKXSYM0KVej4LePIS3gFDkI=)
                          3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: ARdOyLmIO4FdbHNgfaBcVkRfTiH7y88VyM4hcVmeaGI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:97:93:38:a8:be:02:f5:91:35:5a:90:5c:0e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
        Validity
            Not Before: Nov 26 21:00:31 2024 GMT
            Not After : Nov 27 21:00:31 2024 GMT
        Subject: CN=b42de20ddfa5e7514f1b9d77e2c056bc90acccc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:5a:ed:fb:a1:e6:d2:e8:a7:e4:3b:fe:0a:
                    ce:43:88:1e:51:42:84:78:9d:94:07:68:aa:f3:45:
                    63:51:22:23:c9:15:91:fa:6a:56:65:f2:0a:f5:17:
                    2b:50:ca:a9:29:92:73:a3:e6:73:e9:12:e6:88:c8:
                    ab:aa:99:14:62:5b:49:11:27:9f:72:49:3e:e2:0c:
                    32:c9:d8:1d:09:d1:c6:ac:30:15:ef:ec:89:bd:db:
                    0e:f5:34:f1:05:7c:8e:7e:5b:52:17:00:d8:6a:30:
                    a0:9e:9a:8e:98:fc:c6:b0:c7:70:9a:fc:c8:88:bb:
                    5d:a4:e0:fd:28:f6:18:75:bc:2f:73:c6:5b:48:a7:
                    d1:1d:bd:e6:cb:4e:0f:64:a2:fa:e1:3d:98:84:a1:
                    e8:ec:1c:57:e9:8e:b0:59:93:84:0e:0b:d7:05:bf:
                    78:35:3f:87:6e:5e:a8:b3:48:07:23:c4:1e:a0:6c:
                    23:af:b6:c1:04:2f:98:44:5e:16:52:18:ca:8c:e0:
                    e2:1c:c8:66:07:54:ee:63:a6:26:5e:5e:3b:d9:10:
                    3d:6e:ff:b8:af:3e:b1:cc:25:a1:45:99:07:38:56:
                    ab:bf:c4:b2:59:79:86:55:b5:15:67:0a:0d:ff:2c:
                    a3:86:9b:3c:17:50:89:b5:5c:a7:2b:28:a2:7d:3c:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:E2:0D:DF:A5:E7:51:4F:1B:9D:77:E2:C0:56:BC:90:AC:CC:C4
            X509v3 Authority Key Identifier:
                keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:5f:80:81:8d:76:44:d2:a1:ea:01:02:67:26:eb:27:c5:
         8b:d1:cf:57:94:02:94:e7:5d:de:76:f5:41:53:59:b0:54:78:
         80:2b:32:5f:e7:1b:91:05:8a:da:72:4f:be:eb:3f:b3:5b:9c:
         09:a6:77:74:6b:0a:01:e0:94:38:5a:80:39:8e:dc:f1:a9:a4:
         bd:87:1f:71:cb:ce:4a:45:ad:c1:87:7e:27:f2:fb:3a:c0:f4:
         ce:b4:1b:7e:d8:45:2b:b7:f3:63:37:72:ae:d7:5b:76:bb:7d:
         d9:84:f6:7c:33:fe:f9:63:48:30:6d:ff:80:a9:08:f3:40:19:
         59:81:07:04:0b:24:2c:ae:7e:f9:cd:dc:a7:c8:07:50:83:ca:
         53:86:ba:dc:aa:02:9d:ff:36:77:bb:a2:06:c6:81:14:a1:0d:
         b2:fd:51:63:f1:a0:12:1b:59:2d:5d:df:f4:f6:4e:2c:c2:5a:
         6d:2f:c9:1f:67:bc:3a:f6:23:7d:01:79:2f:88:bb:57:d9:e2:
         a3:49:15:32:e1:9f:99:78:6e:34:6a:2d:f4:61:d6:22:9e:94:
         43:ee:9a:5f:40:80:7e:f1:aa:4f:cc:73:6d:11:09:f2:1c:d4:
         12:9b:e4:3a:92:90:66:5c:6d:68:0e:a0:e9:21:11:91:a8:87:
         67:00:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:55 2024 by rpki-client on console-ams.rpki-client.org