Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          Tb5wX+oHxKesi6QQNqW+cIf3cY5ZbxdtQmBURzup7MY=
Subject key identifier:   E8:05:5C:4E:44:A4:26:75:BF:A2:6D:6E:EB:12:23:67:65:D2:AE:72
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       019355089C949BAD93FB23AA0B1D0FD10042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 18:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:47 +0000
Files and hashes:         1: 316DO8hgulAuueGgb6KKI8WsLIQ.roa (hash: LZWxX1V+i7hqSdb5bG20V0c8UH4/krVTwPZoPY8T1NM=)
                          2: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: CU6QzsKyiM3AtglPPUMBPw2Ok8WdrpLEEykHsML/73Y=)
                          3: MdaygczUUW5OCis_Ts2QU56a61A.roa (hash: b/8pLUrQKgdVKMkXSNmrO83y/ZMfhdahbdOz/QRGVe0=)
                          4: nmZ4J_s7_VifTjLBUbr2LeCgHJc.roa (hash: yvovLEVPrxwtQ4bnRFx8EfDKI/g4lHIFbZx6dqianVk=)
                          5: uwnOoSAPK75RVzGI9-xJ0ccygG0.roa (hash: MZwydemFfIiyxfdvDNMWEsXHohSwyj1eWRSxp67+Ano=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:9c:94:9b:ad:93:fb:23:aa:0b:1d:0f:d1:00:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Nov 22 18:00:47 2024 GMT
            Not After : Nov 23 18:00:47 2024 GMT
        Subject: CN=e8055c4e44a42675bfa26d6eeb12236765d2ae72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:b2:91:8e:cd:17:b8:8d:4b:c4:b3:8c:53:
                    12:5b:7b:29:ec:ed:d0:85:50:b3:a7:3b:21:3d:f7:
                    b4:48:d7:e4:d0:f3:03:e8:55:1f:55:c7:b0:dc:55:
                    a0:10:09:59:d6:ba:d9:91:84:85:56:f8:ef:fc:be:
                    f7:eb:68:78:f4:7e:5a:96:67:91:d9:28:f9:fb:f3:
                    ad:f2:1f:13:58:76:26:85:ef:16:cd:92:35:cb:d1:
                    b9:bf:69:9e:e4:cb:3f:74:e7:4a:d9:29:e7:0d:9b:
                    f6:9e:96:0e:0c:f9:e6:5f:14:de:01:fa:ff:09:89:
                    83:33:5e:fe:a0:70:56:91:fc:fc:56:44:47:e8:3a:
                    7b:ab:54:2d:8d:2e:43:0a:e9:06:5f:e6:50:45:56:
                    38:99:15:39:7e:92:18:7a:de:3d:18:7d:b4:16:33:
                    ae:aa:f8:5d:dd:a3:8b:97:16:8d:ad:78:f7:46:fd:
                    92:32:e6:9f:2c:a5:07:0b:89:dd:f0:7f:89:44:ea:
                    96:5e:2c:46:04:38:85:d5:5a:8c:55:1b:53:f4:38:
                    98:00:e0:c4:f9:83:a9:56:e4:2e:c1:c2:72:98:50:
                    c2:66:99:62:77:fa:33:77:21:18:69:6c:8f:91:1f:
                    99:18:a5:ab:a0:f8:76:68:e8:5f:df:4b:78:8b:a4:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:5C:4E:44:A4:26:75:BF:A2:6D:6E:EB:12:23:67:65:D2:AE:72
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b1:c5:9e:0b:00:b2:e6:19:1f:85:14:7a:b1:be:d3:2c:c0:
         ff:84:8c:2f:d1:9e:c6:0c:69:5d:34:b2:49:58:a1:5b:80:77:
         ba:f9:25:db:97:af:31:43:5e:a6:58:a3:aa:14:29:7c:15:be:
         06:ae:66:a9:7b:72:e3:e2:07:e0:d2:1e:82:d7:33:4a:9a:22:
         03:c0:38:d4:fb:5f:a2:88:15:5b:82:34:c6:0b:e1:5c:93:f6:
         52:d4:57:cf:88:93:be:3c:0a:95:92:d1:4a:bb:30:29:c9:65:
         49:93:06:f8:56:6a:6e:0a:57:1b:66:a4:a5:e7:ed:a5:a4:07:
         64:11:2b:d8:69:e4:5f:68:f4:77:ab:02:5e:fc:b8:56:7d:01:
         68:7a:a3:01:d6:2f:73:1e:43:e9:a4:92:fd:43:2b:2a:27:b7:
         ff:90:5b:b7:27:5a:8c:93:92:d1:7a:f3:a9:bd:90:18:4e:b5:
         cb:24:e6:1e:c8:ff:e1:99:68:a7:1c:64:81:bf:81:c5:1f:b1:
         b2:df:71:2f:c3:d5:32:9a:a6:8e:53:cd:1f:8f:b3:8b:0b:0c:
         8c:9e:ac:55:82:69:aa:4c:46:5f:82:d2:7c:7b:ee:e2:fb:8f:
         bd:44:8b:22:b7:00:f2:40:3e:de:a6:58:06:2a:56:a6:bc:03:
         74:64:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:41 2024 by rpki-client on console-ams.rpki-client.org