Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File:                     p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier:          edbnuCxeBeAfCqusngoOowv42eDq788s/wtUElMMZ8A=
Subject key identifier:   75:8A:90:8C:B9:E9:D8:9A:BC:A1:10:D0:9D:8E:D6:4E:74:A1:32:18
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       019352750424590BB7CC9CA2741E413B53E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number:          0AF2
Signing time:             Fri 22 Nov 2024 06:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:20 +0000
Files and hashes:         1: 7xAcmo220oCYc6gaudf4mxgJx1M.roa (hash: zweiLRIChZgxvn1lL8CGIVywv+/wxSDhmEu7DizOmRI=)
                          2: DjpiK-idFi9Jj0jLfFes12qpNkw.roa (hash: p0j5AZyoRZ2m5AglnY2IwDKOgCTmoKmDLzax7CQJo9I=)
                          3: TteCBq_FU6OzYxaEQHjFaGVPWHw.roa (hash: hQMDD3EWk9pWkeFYORgR3VdYIvHSGnLWH1OKy8EHgxY=)
                          4: bnxGWJgkPqd_WZXb6kcQAxnWsQ4.roa (hash: lHB//2jMJK0Rlw3CATfwKOIgzWwYcpOhYEmhkN+X3aY=)
                          5: cD818lkQO-1Wu10LA_LvgD76Y_Y.roa (hash: rUyxcMcVJQWkq84OVNwzqkYtyTOS2SWxoXeO0KHF9UE=)
                          6: eGOoeHdRM4MXkUTJfeE2wlJSuaU.roa (hash: Dz5uG8huimTPFasoTIt8FIEB5NsbsUTHehM8UtbhkOY=)
                          7: lMwdxLB2aYNUiUDzPIrGiTLw6o0.roa (hash: +e941d5JqkU73awJvrX/JDw/R6fViyjAoFYp/d21f4U=)
                          8: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: mrlMAi75dFXhIcatuzVnS38WGUTpgPJnr7OyPzuUUmc=)
                          9: sDbQELwdqGsekMU_dQv2V7Vfov4.roa (hash: FcIF6v2XXYR/R2dybxEJSyASv2XX1egYZJY8wGbVCyU=)
                          10: ytH8aQtAcOdvBqtDKYBg0LxE0f0.roa (hash: 5zz9Iy5Rw0SOMGzRpjJgWquWO9+jEkUF8anl1sq0FcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:04:24:59:0b:b7:cc:9c:a2:74:1e:41:3b:53:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: Nov 22 06:00:20 2024 GMT
            Not After : Nov 23 06:00:20 2024 GMT
        Subject: CN=758a908cb9e9d89abca110d09d8ed64e74a13218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:f4:ac:73:d0:fe:16:95:89:3a:bc:f4:e1:
                    98:3e:86:59:9b:8d:90:04:84:9c:80:d8:32:3a:e9:
                    4d:d8:96:40:4a:09:76:1a:7d:b2:de:4e:3d:59:2b:
                    73:02:b2:d8:43:57:ee:91:2e:ab:e4:05:65:92:ab:
                    9a:ee:d6:c6:93:c2:9c:6a:70:5e:0c:13:a1:89:51:
                    ef:e9:7f:6a:15:22:9d:5a:c6:a4:70:07:27:1c:e0:
                    35:c2:3b:0d:dd:d0:a2:dc:b9:84:4a:da:f4:c4:32:
                    6c:53:08:3c:63:0b:58:62:b3:7c:6e:1f:10:65:c2:
                    9c:d5:8f:65:67:ab:81:67:2f:1c:b4:91:7c:c0:95:
                    6a:21:75:32:a3:a0:8e:86:0f:6f:4c:20:c2:e2:14:
                    d3:2a:62:a8:35:e8:d6:ab:c5:ba:1b:d2:92:5a:a3:
                    c0:5a:c1:7f:d7:37:80:91:19:78:5a:fe:3f:70:10:
                    35:31:03:20:ef:5f:c0:4b:cc:1b:3a:a3:99:e8:64:
                    96:38:8c:d5:17:42:5c:b2:65:9b:6f:cd:a7:ab:32:
                    08:5c:97:6f:92:05:f9:61:66:3b:5f:61:14:b5:6f:
                    ec:3d:cd:43:81:15:eb:77:18:d8:0a:84:47:e6:c5:
                    c5:97:ca:58:c3:43:c1:16:e7:99:11:25:eb:3f:43:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8A:90:8C:B9:E9:D8:9A:BC:A1:10:D0:9D:8E:D6:4E:74:A1:32:18
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:33:5c:f3:46:f8:ca:70:ab:a8:61:0b:e3:23:43:06:f5:d8:
         5f:2e:2d:e7:66:45:b2:f8:5b:87:ec:7b:11:ae:dd:77:7c:d2:
         91:36:67:be:d4:46:f8:9b:ed:4a:02:b7:90:b3:6d:f1:fa:ff:
         3b:56:cd:f1:e2:53:10:6b:52:52:3d:38:22:34:a4:f5:7e:de:
         2e:27:c7:7a:66:f7:2e:b2:28:17:92:83:73:c4:ab:13:d5:19:
         bc:d3:79:11:7f:54:1e:0f:67:63:de:fd:2e:3c:b9:b2:70:57:
         d9:91:c1:6a:8a:3a:e9:eb:e7:eb:06:3f:ae:99:05:61:be:2b:
         dc:83:a4:9f:15:f0:20:d5:6f:5c:e9:f4:00:f1:f2:66:25:3d:
         dd:59:8e:b5:44:3c:be:97:c6:73:cc:72:5a:83:14:bc:6b:16:
         60:82:52:43:f5:f6:96:43:2f:71:1d:2f:29:90:23:6b:f4:fb:
         ff:b3:e5:21:94:e8:66:f3:87:0b:99:c5:d3:48:6c:bf:cd:2d:
         94:11:db:fd:cf:2f:95:6c:c3:bb:95:f5:8d:a9:83:0c:79:38:
         84:93:b9:42:fa:87:bb:01:e2:b5:bb:a2:6d:e4:35:26:e8:d8:
         96:33:20:39:fb:2f:b4:c2:50:0f:34:17:d0:09:2e:06:91:34:
         56:0d:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:00 2024 by rpki-client on console-fra.rpki-client.org