Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File:                     86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier:          JyKIacOvrtx8wQbhWOvZXitVPC23N4+qq0863M+QCmM=
Subject key identifier:   56:43:BE:57:3F:B4:79:11:1B:96:22:9F:21:9B:3C:82:E2:41:6E:83
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer:       /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial:       0193572E14D5B97729BA6F2DA58EC6E74CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 04:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:57 +0000
Files and hashes:         1: 3GzZtT4mleZqSoj4tI9CwzdH39g.roa (hash: 2M1w13eYhRdB/FUNeMIjDH1TJPuelkhK5xw7yDiwklo=)
                          2: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: W3TKBUa+WH6bYp4mCKCCm1YTDg0q8VBvdcW4GpZiJHo=)
                          3: Fa8M-uIzF0MinUfAOUTsZAtlJ9o.roa (hash: jEOaalorcs9tmFUY2wrhp9TXmW2yZSVNxwzEr+KYpXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:14:d5:b9:77:29:ba:6f:2d:a5:8e:c6:e7:4c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
        Validity
            Not Before: Nov 23 04:00:57 2024 GMT
            Not After : Nov 24 04:00:57 2024 GMT
        Subject: CN=5643be573fb479111b96229f219b3c82e2416e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:73:dd:21:2e:19:70:2b:2d:06:53:03:7e:
                    60:32:69:11:40:f5:96:64:ea:70:0b:87:eb:a1:c5:
                    08:ea:dc:82:f9:b9:9e:1d:14:b9:20:5b:1c:d9:a4:
                    fc:cf:8e:cd:de:ef:67:6f:6e:ee:7b:3c:03:73:db:
                    1d:ef:fb:70:b1:9e:03:11:0d:02:69:cd:8f:6b:63:
                    cb:a9:75:3f:3f:f0:2a:1a:8a:f6:7c:73:a0:47:e4:
                    f0:a6:6c:74:c0:3c:2f:ea:7a:46:de:6a:62:08:99:
                    59:03:0b:e3:85:84:02:8e:6e:9e:d6:13:76:36:96:
                    f8:27:00:49:7e:23:42:4a:eb:b4:b6:46:35:ff:a7:
                    17:d3:30:8b:60:a3:a5:9c:e7:e1:b2:aa:c6:7a:c9:
                    49:3c:1e:5d:50:93:30:fc:c1:84:33:ac:78:c6:38:
                    c4:d1:d8:6d:74:da:7e:f3:39:d7:d8:49:50:21:12:
                    17:b0:92:fd:3b:32:f1:d5:e9:b7:9a:5f:fa:95:d3:
                    a0:d4:2c:78:c8:e3:2f:34:ae:67:39:00:ad:f3:66:
                    8e:80:5c:e2:01:cd:bc:64:58:fd:56:10:e7:b4:5a:
                    3e:de:e9:e7:1b:07:a9:ed:6e:4d:8f:db:3d:46:7c:
                    d6:30:4a:23:a1:23:09:48:97:9e:5f:86:ff:58:c8:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:43:BE:57:3F:B4:79:11:1B:96:22:9F:21:9B:3C:82:E2:41:6E:83
            X509v3 Authority Key Identifier:
                keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:a4:fc:dc:36:99:4f:bc:e1:58:1e:05:6c:42:b3:ca:7a:
         75:16:3d:90:46:d6:4b:0e:fc:ba:a9:9c:f5:64:d5:95:4d:56:
         3a:15:bd:8b:98:20:bb:f5:c8:da:4b:e6:59:f7:24:38:a8:44:
         10:c5:a3:56:f3:b0:a1:59:06:4c:0e:d0:12:3a:c0:5f:77:cb:
         5b:0e:8e:ca:28:a8:c2:7a:2c:09:e4:61:0a:db:96:6d:11:e5:
         3d:27:43:b7:5f:52:6d:4a:d4:fb:8b:a0:06:29:98:47:f4:f3:
         44:14:28:cd:2f:25:0a:68:34:ba:3f:d9:ef:6a:3b:eb:77:cc:
         2a:11:c5:54:3e:6c:5e:60:d6:93:d9:b4:15:af:90:93:ff:e0:
         72:ad:ab:17:07:b2:7b:d2:e4:06:15:7f:4d:b1:a3:b0:e6:13:
         7a:e4:f8:42:0c:fd:61:86:3f:0c:57:34:b5:9e:98:e5:6a:fd:
         70:72:39:a1:bf:8d:5c:51:49:3b:f8:44:46:93:c3:37:eb:4f:
         d7:00:72:82:de:38:e3:d2:8d:ce:35:b2:2b:a3:4e:72:2b:30:
         96:64:c5:03:5e:35:36:29:b1:a4:c3:73:24:3b:37:88:c9:b4:
         d2:58:34:6b:34:8c:d9:e3:3f:ef:fe:1c:de:eb:c6:3d:21:9b:
         48:fa:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:05 2024 by rpki-client on console-fra.rpki-client.org