Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
File:                     S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json)
Hash identifier:          eb0qaTDNm2PqrjRzmxRq6TR143GpDuZ2iIU8UW5EXQY=
Subject key identifier:   45:E3:BD:DC:E5:86:3F:2E:73:87:E6:BC:0B:DC:A8:B7:0C:A9:17:DE
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Certificate issuer:       /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial:       0193579B9403161B677A201E8FB74A3D1A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
Manifest number:          1378
Signing time:             Sat 23 Nov 2024 06:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:33 +0000
Files and hashes:         1: 5mw6sUz8PjLmnmu6txDsnPEk550.roa (hash: 7cTqbcDxUOcVK6V2YP0EwHaeU0+/ZZvMf9tF+qm4Mg8=)
                          2: 6H60Ac8hDNGLpGNYctYmI3V8sQg.roa (hash: JowiaJ7ktcuHTx4uxLJWvGmK+5UTRNmZDnA1aye/SBY=)
                          3: PjFGyXRC86d2JT6mNbHO50oltUA.roa (hash: BDa4aWY3+TMbXWg8ZJ5+4eIRVaav49K7+nH4fXp+K7E=)
                          4: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: BEGvCi+k/slxaw7N75JIE/cWL58g65hijVBQ1T9chp0=)
                          5: TV11QskFyavmc2vxUWd8vEsxUCg.roa (hash: TGLBv7HeWCDCozS8KERxWCGcCVOmi08gShoH5+byp9w=)
                          6: YNaRnG0WMe3eCezDK2WeHX_RwTI.roa (hash: 9mgjfek658viNXrWk4sfKzdvJBwGADVNlq6xw09RfUU=)
                          7: aMkslMPtuerO9mVgj5xsm7a5u_Y.roa (hash: 7CGHjHkpVwmT9e7e6R+zM5hnthZnRRKuiThNT8P8ODQ=)
                          8: oLfOosc_Iv6jYWQIuXpk48MV2xM.roa (hash: 2GzI2vaH1PEsWJGLVZWLiedk/1usMwZwzCplor480SA=)
                          9: xELBAY4ItUggjkRyQUchLZrVR6A.roa (hash: sRpheBhvwlfQO9eUst+BEphBonCXM+48ypdudzT/xS0=)
                          10: z9B5t2Lc0yKAbGzdM3WcDZDYpgM.roa (hash: vog2YPRJzG4cxdVT4Mdh/LHjej1umXCCIVDzF4N2B0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:94:03:16:1b:67:7a:20:1e:8f:b7:4a:3d:1a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
        Validity
            Not Before: Nov 23 06:00:33 2024 GMT
            Not After : Nov 24 06:00:33 2024 GMT
        Subject: CN=45e3bddce5863f2e7387e6bc0bdca8b70ca917de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:35:d5:9a:48:e7:26:4a:9f:91:dd:2f:7b:
                    9f:6e:ef:2c:c1:e9:d4:e4:45:83:e3:09:e3:8f:f0:
                    2e:cc:f5:44:e1:98:f2:70:2e:44:b1:13:5b:4f:6a:
                    6a:77:42:bc:3b:dc:18:fa:2f:ec:e6:53:1b:d2:ae:
                    a3:dd:95:39:ec:aa:91:da:77:ca:27:ee:d1:cc:1e:
                    be:a6:07:14:7d:2c:35:02:8a:09:54:80:7f:c9:cf:
                    c6:06:65:6d:8f:2e:9e:cb:3c:4a:95:60:2d:6d:5a:
                    bf:50:7e:f0:5c:6a:dc:6a:65:ee:22:4a:fd:b9:f4:
                    f6:e4:81:7f:98:b3:e0:da:f7:f4:56:5c:c1:61:f3:
                    aa:41:f9:d9:30:b0:3d:3e:0a:48:5b:8a:1a:06:2c:
                    fc:22:7d:8f:95:d2:bd:8d:a3:14:ab:f2:b3:8e:4c:
                    47:a1:1f:c3:b1:f9:6f:5f:28:aa:92:d6:ca:13:80:
                    93:94:e7:77:73:1f:2e:a5:03:ce:d2:22:f1:83:4f:
                    61:22:8e:06:5d:f5:3c:24:24:c2:68:4f:be:ae:95:
                    cf:b2:16:4e:66:12:57:72:77:b0:63:8f:1b:bf:78:
                    59:6c:7b:94:99:d2:84:81:53:e9:65:77:33:f9:de:
                    f3:a1:dc:13:a8:b7:ae:a4:ef:df:d1:58:33:1b:b4:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:BD:DC:E5:86:3F:2E:73:87:E6:BC:0B:DC:A8:B7:0C:A9:17:DE
            X509v3 Authority Key Identifier:
                keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fc:eb:e8:13:8e:2d:ba:2a:48:ee:da:2e:f5:3b:32:a1:50:
         2a:1b:54:e3:6a:0e:26:71:dd:3c:f9:c8:cf:80:1d:57:80:70:
         56:63:20:5e:73:ea:c9:15:3b:1a:4a:7d:e6:99:3e:bd:41:9a:
         3a:b7:08:4f:8f:61:a8:fa:40:0e:0d:a5:c6:fb:e4:a5:de:6e:
         de:bc:87:2a:d8:92:6f:af:90:3e:3f:67:8b:9f:6e:2c:39:ac:
         73:03:11:06:5a:bd:1b:20:9e:43:90:6c:fc:75:af:5e:e9:b0:
         18:28:a3:6c:79:11:c8:23:5a:8a:23:e9:6f:40:54:60:a2:be:
         49:3c:be:82:8e:8d:e6:7e:6b:12:f9:6e:58:47:8f:34:38:e5:
         0f:8c:58:20:38:89:db:ab:94:52:1c:33:e6:36:cc:ea:df:3f:
         a2:84:9c:66:a4:2f:ea:21:54:07:fc:78:49:92:6c:fa:c4:87:
         23:c4:3f:2f:60:fe:d0:d9:a6:72:fc:4c:08:89:10:7e:d8:97:
         dd:45:9f:b0:82:95:38:83:b4:55:34:f1:ff:88:e6:b3:6d:30:
         24:2c:e4:a4:03:2c:7e:7e:4d:d8:4b:58:21:aa:ea:1e:73:d5:
         1b:19:eb:0e:bc:1e:ab:ec:b6:2a:da:e0:b0:3b:f2:1f:d7:77:
         90:11:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:45 2024 by rpki-client on console-fra.rpki-client.org