Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
File:                     ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json)
Hash identifier:          FmFAaTu/oOQxrTLFeycZntMc1mzj8A0O4G+WA1M9lP4=
Subject key identifier:   70:6A:BD:BA:9B:CF:10:8A:1C:4E:2F:28:52:E1:C9:23:5B:9E:17:3F
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Certificate issuer:       /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial:       0193549C7318E79FA3A6FDE78D7E90DA1846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
Manifest number:          0362
Signing time:             Fri 22 Nov 2024 16:02:39 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:39 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:39 +0000
Files and hashes:         1: RwBx01bfgDXqP6UQh7iEwARc4Js.roa (hash: M2LvlgQh+UzUchwcLnaJZGIUxCXemd9T1MTl3UadjM0=)
                          2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: TsSlRJ408t3970p3vvGzeBadKfw78nxC9SOoBf0lXDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:73:18:e7:9f:a3:a6:fd:e7:8d:7e:90:da:18:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
        Validity
            Not Before: Nov 22 16:02:39 2024 GMT
            Not After : Nov 23 16:02:39 2024 GMT
        Subject: CN=706abdba9bcf108a1c4e2f2852e1c9235b9e173f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:3a:24:3e:2a:75:96:11:13:82:a4:d7:2b:
                    a2:f0:ac:88:21:06:a0:4f:cc:b4:f0:89:dd:fe:38:
                    14:75:1f:9a:fb:42:1c:8b:8b:47:f7:9c:36:06:58:
                    d4:1e:a2:e0:37:0c:d0:55:eb:5a:25:af:86:1e:cf:
                    be:4c:21:e4:23:9b:20:bd:86:f0:f8:d9:c9:5c:91:
                    8a:ca:88:54:73:c9:7b:e8:b5:55:0f:34:ba:45:3c:
                    ae:d9:2f:67:28:f9:92:5f:4e:f6:23:1f:08:4a:c8:
                    36:ba:e5:46:53:70:5b:bc:50:e5:95:05:6a:3e:22:
                    9f:0f:cd:e7:45:2d:6a:c8:03:ce:e6:c1:2c:b5:0e:
                    02:51:a5:da:eb:5a:e9:b8:d2:f5:e5:97:dd:be:9f:
                    ea:7c:35:93:bc:60:02:0f:a4:08:ce:e3:75:b1:c4:
                    61:db:5b:ce:92:91:3c:b6:99:24:d8:27:bc:56:13:
                    84:9e:fb:44:ed:a0:8f:e1:51:81:0f:12:b2:84:8c:
                    39:27:35:8c:d0:7a:05:e4:30:45:09:51:f5:e4:af:
                    63:ae:d4:55:2d:17:d6:37:f2:b3:d4:99:58:4b:38:
                    04:3a:13:26:7c:1f:21:a6:0e:ad:cc:4f:bb:cc:47:
                    72:f7:cc:e3:72:86:52:15:6b:69:e4:bf:8d:fa:28:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:BD:BA:9B:CF:10:8A:1C:4E:2F:28:52:E1:C9:23:5B:9E:17:3F
            X509v3 Authority Key Identifier:
                keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:ca:5b:41:bf:fe:11:de:fa:b1:83:a6:53:22:f0:e7:f4:
         05:12:0f:96:1d:cb:94:0c:76:28:d1:8e:29:27:0a:aa:b8:69:
         71:29:2b:e5:3f:05:e6:c1:8d:0d:4a:37:be:7f:b3:a3:9f:88:
         ae:73:49:0e:db:f7:1e:06:aa:a1:27:ca:63:b8:2f:99:20:c7:
         01:5c:44:e5:16:3a:16:f5:e7:0e:65:b1:4d:ab:15:e6:ad:fa:
         6e:97:06:0b:9e:10:14:b8:c7:0b:5a:69:93:1e:78:a9:61:80:
         b0:7e:8a:1d:0e:be:62:4c:41:10:a3:e9:e3:18:76:d6:c9:e7:
         89:c8:9f:35:f9:fd:f4:e7:78:cb:89:1e:cb:73:6e:43:be:22:
         76:06:f6:cc:a2:ff:9d:e1:cf:3a:bf:ac:40:b1:a8:03:1d:15:
         fb:d8:38:f6:5b:03:2d:c9:c3:98:b3:63:63:1d:1e:e0:4d:61:
         30:2b:03:0d:73:fc:7b:bc:04:95:fe:6d:e8:7c:e3:44:95:2f:
         f4:f8:d1:eb:83:48:e4:23:36:65:13:c2:c5:e3:57:91:1d:00:
         dc:00:95:a1:73:8f:79:f0:cc:b3:38:9c:6c:3d:3c:86:48:61:
         82:71:f9:e6:45:dc:e3:42:4f:7e:3f:98:f7:af:b7:2a:1d:c6:
         e4:9e:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:11:48 2024 by rpki-client on console-ams.rpki-client.org