Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File:                     OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier:          WVX1CARDqWqZl4U/8ClgFcPo6savQ4jnb/QkOnH5Q8c=
Subject key identifier:   6D:7F:A4:BE:E1:BC:EE:C6:8A:DF:0C:D2:45:C0:6C:E2:97:2E:E2:11
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer:       /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial:       019369D8B88A50D4A5BF1FED62DA3593E07B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number:          1380
Signing time:             Tue 26 Nov 2024 19:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:30 +0000
Files and hashes:         1: 1-yU0WWovOc6viPUzmhLX2fw7GUo.roa (hash: stjenqmX0LeY9MCpcMmz348bXqXFyMV/qNzJSvD/LJQ=)
                          2: JNCXdQJfTSZxITWTFtmGMHpkG8g.roa (hash: HtAYmC6KeLmr37t6Ye76z9T8BRe7qjufXr8OiDjlVXE=)
                          3: K9UsIDdEVAoBOMM-6-I5AP9pfWU.roa (hash: YO6IWzN3V/aA+z+sPgnlXm//PFSSrT4jTeLUOC5r0Ds=)
                          4: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: ZWQNpb8lnVRXGOCHHOJvTVbTZzojwg3eM0hXsVaQjOM=)
                          5: QfjpDtaPfxK1-ySA4tY7fZcmHBg.roa (hash: 5jl+NlVmfUuAu/5Fp4M/Nesg2o61KZGldvPmvS2GGu4=)
                          6: R3vROmQAOgLbxQ7Imd7i1Ur2G9M.roa (hash: aRDyI1ny3mJEQVg0rObRaJvmoKIvZ0/lhRBL6bfvEZQ=)
                          7: xnZfmAWBdnTCSbljxO6ZKYtSVjM.roa (hash: Qdt5UTClx7ajt4EUW8ugphjro5l46wvfDtIyotmhr1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:b8:8a:50:d4:a5:bf:1f:ed:62:da:35:93:e0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
        Validity
            Not Before: Nov 26 19:00:30 2024 GMT
            Not After : Nov 27 19:00:30 2024 GMT
        Subject: CN=6d7fa4bee1bceec68adf0cd245c06ce2972ee211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f9:cf:6a:75:4f:5b:3d:eb:37:8b:df:f6:cf:
                    10:14:1f:de:01:a2:ba:a8:ac:dd:39:21:78:14:bd:
                    c4:97:0e:8b:ee:98:19:da:b0:db:86:eb:06:9f:25:
                    e3:5a:41:d7:3d:73:5f:0a:7d:41:57:40:31:5c:1c:
                    4c:8e:cc:b1:c3:d4:37:62:b3:e5:d2:ad:f6:1e:6b:
                    3f:cb:d6:78:ed:60:57:7f:1c:71:4b:d1:3b:bc:da:
                    88:84:ff:4b:0f:1a:e2:bc:f9:68:f4:25:75:90:1a:
                    0d:75:c4:22:22:26:17:c8:08:10:08:6d:e0:aa:40:
                    47:17:81:de:bc:a2:ba:b8:2c:8c:4a:7c:ff:8a:bf:
                    b7:3e:72:b0:d7:8b:e1:79:fd:bf:ed:46:41:8c:24:
                    65:43:64:49:32:13:d9:67:ba:24:d6:5d:1d:af:91:
                    6b:80:96:31:3d:9f:39:a7:ad:f2:53:9b:1e:3a:9d:
                    ef:33:c9:9a:ee:97:63:55:91:4e:bc:6f:07:af:0d:
                    00:38:63:ac:07:26:21:29:01:71:f7:40:60:5c:9b:
                    c8:8a:3e:09:cc:88:3e:5c:f1:73:be:a4:1a:6c:e0:
                    ac:25:6b:5b:f7:66:b6:42:cc:fc:4e:51:71:47:a7:
                    48:9f:18:f0:a5:5a:9f:36:ff:66:7a:c2:2e:58:0b:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7F:A4:BE:E1:BC:EE:C6:8A:DF:0C:D2:45:C0:6C:E2:97:2E:E2:11
            X509v3 Authority Key Identifier:
                keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:96:03:ed:93:38:d0:e5:17:42:1b:e9:84:03:e1:cb:d6:
         ea:66:5e:57:e9:53:82:c8:77:8e:ea:7f:db:e1:5a:f0:64:e6:
         4a:e1:03:0d:92:45:33:bb:70:2c:5e:34:f7:0c:9d:19:6a:c4:
         8b:f8:fa:e9:24:8d:a9:bd:ea:d8:86:d1:0e:d0:17:8d:da:a9:
         6e:97:cf:c4:32:41:6c:fb:7f:b9:9c:3b:96:cb:30:ce:db:b1:
         ed:16:df:50:5d:67:62:56:ea:3b:2c:ed:fa:fc:4a:0a:01:b7:
         c6:d8:c5:80:9d:92:d9:f3:8d:83:48:42:c8:9e:27:0c:58:91:
         cb:73:a1:53:8f:1f:05:72:b9:8e:26:ce:6d:24:73:a4:f9:04:
         0c:d8:0a:d7:f5:f8:64:b2:3f:2d:71:9f:a7:4b:66:2d:55:6d:
         84:e9:b2:f5:e5:1c:ed:92:a2:88:dd:10:7f:ba:fe:03:47:c4:
         a9:ad:e1:84:d8:15:2c:c2:56:2f:39:df:52:3a:50:48:16:a6:
         ac:5a:00:6c:9a:1a:fb:c9:98:22:db:a8:50:03:fe:a9:e1:54:
         40:55:3e:b3:b7:46:43:5b:57:60:d4:9e:ed:f5:fe:5a:1a:04:
         ba:d2:fa:e5:35:4c:7c:f9:9c:6c:be:cd:aa:5c:ec:06:83:b0:
         b5:ed:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:18 2024 by rpki-client on console-ams.rpki-client.org