Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File:                     g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier:          Mf3ulrLFLCXIhrEtvWw5va9T0eL9gaffglmWOftomQ0=
Subject key identifier:   E5:48:34:98:53:BB:BA:DC:2A:82:CB:9C:03:6C:27:E0:51:49:04:1E
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer:       /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial:       0193568A83CDAA5B71ED85C509053E1967CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number:          1078
Signing time:             Sat 23 Nov 2024 01:02:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:18 +0000
Files and hashes:         1: Ze1TzAqOHzC9xIMI6tCu5IkarEc.roa (hash: 0gb1IWas0dJYZEHVnQ8Cxf/hG3A1UdUGthCbKLCLQwA=)
                          2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: MpYexe4KcjR3qRULUs06XKq0pF+1EJPcgPnFNJin0YM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:83:cd:aa:5b:71:ed:85:c5:09:05:3e:19:67:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
        Validity
            Not Before: Nov 23 01:02:18 2024 GMT
            Not After : Nov 24 01:02:18 2024 GMT
        Subject: CN=e548349853bbbadc2a82cb9c036c27e05149041e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:31:3c:8b:71:b8:97:b5:5d:c4:7c:35:c0:07:
                    cb:a9:5b:76:8c:42:fc:29:e9:e8:eb:53:ba:fa:30:
                    88:f1:d8:2f:ab:ea:4a:7f:8f:7b:29:e0:42:bf:d3:
                    4c:41:e8:a0:0c:16:8f:5e:9a:77:64:72:6e:5b:6b:
                    b3:19:7d:7e:6c:58:3e:33:34:d0:3d:08:eb:dd:d1:
                    9f:65:73:4f:23:2c:dd:52:38:e6:51:4a:ff:4b:ee:
                    9f:2d:e1:38:2a:6c:f9:86:55:ec:4f:d5:4f:92:6d:
                    18:9c:0b:cb:46:e5:0b:c0:e8:41:6a:76:e9:71:4b:
                    a7:56:12:00:ec:53:91:10:8f:72:9b:2a:30:5f:97:
                    fb:85:d3:0a:3e:8f:d2:f9:ed:ab:b2:99:16:44:49:
                    3e:5e:f0:6f:61:32:e5:e8:91:f6:42:39:d0:f8:5c:
                    e8:fd:4c:e3:ff:62:55:a9:c3:37:a9:3c:b7:dc:3b:
                    27:aa:9f:f0:56:4c:80:02:9c:6f:2f:fa:60:3a:98:
                    5d:16:bd:19:46:ca:86:6d:e6:3d:a1:4e:e1:4a:ce:
                    bc:68:90:be:0c:4b:6a:f1:95:95:d3:31:82:a6:2d:
                    f8:a9:c1:7a:05:49:dd:9e:c3:ee:f6:8f:1e:f8:85:
                    c3:29:71:f9:99:1d:e4:1e:eb:f4:42:37:f0:e8:b9:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:34:98:53:BB:BA:DC:2A:82:CB:9C:03:6C:27:E0:51:49:04:1E
            X509v3 Authority Key Identifier:
                keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:cd:fb:3b:a9:52:a4:49:92:d1:77:ef:01:8b:1f:99:1f:
         4c:72:fc:ea:4c:f5:53:96:50:94:0d:9c:de:f4:a1:cd:01:05:
         80:10:92:c7:60:b9:29:7b:c1:3d:f0:04:6d:78:56:14:fd:ce:
         2b:98:12:24:0e:f4:9d:16:53:d6:2c:4d:9a:02:45:1b:f5:1e:
         70:19:b8:6c:74:05:82:72:42:2b:63:37:3e:37:ca:0e:d7:90:
         12:b5:1d:4b:dc:ec:a8:ea:15:e0:13:67:16:e4:db:7a:f5:a5:
         3f:20:4f:a1:f6:c3:eb:aa:41:de:7f:2a:69:12:9b:00:df:3b:
         75:5a:0a:31:97:6c:a9:8a:ea:7e:15:a2:4f:fc:5a:60:88:e1:
         84:5d:58:02:b0:22:52:82:31:1e:2c:6b:b3:da:55:93:9f:71:
         76:22:18:23:13:68:81:f2:03:93:a8:5d:c2:d2:9f:4f:23:c9:
         86:27:85:09:2c:b8:4c:40:59:24:24:07:1e:23:07:79:80:06:
         ca:5d:06:2c:35:13:e8:25:8b:54:5d:73:04:ce:35:26:5c:11:
         5a:f7:45:bb:9f:4d:54:8c:dc:b0:14:f8:97:7e:23:b3:22:3a:
         c3:5b:c0:a7:eb:b7:7e:e2:c8:0d:82:f5:49:d2:9c:44:cf:58:
         83:29:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:32 2024 by rpki-client on console-ams.rpki-client.org