Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File:                     AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier:          yqeYd9EpExiX6rnuERMtqUm02NKZIzYa+Z0TRSd3Dks=
Subject key identifier:   8F:B1:1E:77:69:14:08:62:B9:F8:42:8E:AF:98:38:2E:E9:3C:72:C7
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer:       /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial:       0193549C23DB5F41483F4901C392A393BA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number:          1301
Signing time:             Fri 22 Nov 2024 16:02:19 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:19 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:19 +0000
Files and hashes:         1: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: 7TSj5ZkNO4o6KsCcPGQeZ1llDogN4C2OEboJe+oXvqo=)
                          2: FtlbV_rxSnCNqW8kBXXCQ4NjpHc.roa (hash: gF4D1ulcjV1DkZUPHBEpr1TlhF34x1rjAXBanlr4vX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:23:db:5f:41:48:3f:49:01:c3:92:a3:93:ba:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
        Validity
            Not Before: Nov 22 16:02:19 2024 GMT
            Not After : Nov 23 16:02:19 2024 GMT
        Subject: CN=8fb11e7769140862b9f8428eaf98382ee93c72c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:36:d5:d9:46:9b:7c:f1:98:f4:9f:e9:ba:
                    9e:8c:d2:c4:ad:66:45:e2:7e:ad:e6:64:46:6f:4a:
                    41:3e:3d:fd:90:e8:ae:c7:d4:3b:de:2a:72:9c:bc:
                    6b:29:8b:46:bc:0b:3e:bf:ca:c7:33:c7:ce:64:90:
                    b5:32:5d:43:e9:67:23:2b:33:17:97:76:d8:e6:14:
                    f1:26:8e:f4:32:65:3a:6a:3e:17:26:75:03:1f:35:
                    bf:8a:e3:69:8b:b0:bb:67:b2:1c:92:a6:a5:10:aa:
                    86:da:c8:5a:24:e7:a2:9c:d6:cc:66:cb:94:4a:02:
                    8e:0c:23:2a:7d:e9:a4:7f:e6:78:ed:b5:01:58:79:
                    f4:5e:4b:0d:d5:8c:6c:13:b0:ed:b0:3d:66:98:6e:
                    c8:42:a0:49:66:fb:2e:2c:64:79:17:c0:a5:27:43:
                    2d:e6:35:89:a4:0d:17:d9:af:3d:d8:73:d2:b4:3e:
                    85:34:9c:b2:46:22:73:6f:ed:b3:70:9d:0d:ef:16:
                    18:4d:6b:db:09:e3:a6:ef:10:8d:a0:c3:6e:3d:c8:
                    06:ce:71:dc:e5:a5:35:49:72:f5:eb:ed:84:18:ba:
                    ca:8e:24:e5:fa:ec:aa:8c:a9:b0:6c:5d:cc:f2:01:
                    e6:9d:d6:b7:9f:f9:d0:e4:e0:45:fe:88:21:b0:2e:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B1:1E:77:69:14:08:62:B9:F8:42:8E:AF:98:38:2E:E9:3C:72:C7
            X509v3 Authority Key Identifier:
                keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:9c:0d:04:0c:74:f9:1f:37:12:bc:32:2c:fc:14:a1:60:
         57:52:b9:83:78:c7:b8:b5:fe:21:fb:91:12:04:4e:30:b2:8a:
         0b:8e:92:a2:17:65:ce:22:63:6f:a0:de:71:31:34:06:09:e0:
         9b:8d:5f:30:83:80:31:e2:a3:54:c5:c7:47:3f:8b:06:b6:7d:
         0c:9c:bf:c4:c8:92:47:35:0b:1f:6a:ab:05:59:d0:5d:80:23:
         66:94:a6:a2:ca:c3:4b:3a:d9:b7:2f:aa:1f:6e:29:1a:0e:cd:
         47:be:48:8a:63:bb:9b:29:5d:fc:60:b1:2d:1f:51:11:77:d5:
         85:db:86:40:4f:1f:3f:9d:05:7c:f8:15:d1:44:a7:7d:49:ca:
         b5:80:f3:c3:86:ce:13:91:5d:0c:d1:05:be:95:4f:79:9b:aa:
         cc:cd:32:36:ef:1a:6b:29:26:dd:7f:df:61:f7:e0:31:1a:8b:
         91:ee:63:13:e4:4d:b5:e3:49:41:e3:ed:b0:fb:57:65:38:7b:
         46:a6:3d:02:8a:da:09:9c:73:9c:65:ed:5e:62:c1:3b:dc:87:
         12:f5:d7:25:16:3c:18:f9:4f:12:ba:cb:36:c3:f5:23:6e:b1:
         5d:fb:d1:f1:8a:18:32:40:fd:38:09:84:52:72:d4:8c:3a:7c:
         e8:98:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:14 2024 by rpki-client on console-ams.rpki-client.org