Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File:                     _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier:          +VZzvrCtajQ/KKvh1T7tMArgeX46xtZ7ZbTcr9em9Eg=
Subject key identifier:   54:F8:71:B7:2A:9F:52:AB:11:65:B5:E6:33:F2:74:BA:B3:04:65:25
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer:       /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial:       01936331B3D566046554DFA9D98E83C50DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number:          06C2
Signing time:             Mon 25 Nov 2024 12:00:21 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:21 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:21 +0000
Files and hashes:         1: 1R3jpIfthzSXKUY4x5lBxEwKJuA.roa (hash: JSndcIwp63jpBG4l9NCLkkDupDZQ0s08lf+D7QQ0NS0=)
                          2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: wOyU1VYYdEvIxCTbc0kBm7cAFT30XlHExuliTXp1SfY=)
                          3: x3J_JCSJsXEjbN5DwV8U0lj_C_w.roa (hash: yD+sHfhiUJLr03Jh3O5bJ9ni3JeGiwET3sSdSdiNNEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:31:b3:d5:66:04:65:54:df:a9:d9:8e:83:c5:0d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
        Validity
            Not Before: Nov 25 12:00:21 2024 GMT
            Not After : Nov 26 12:00:21 2024 GMT
        Subject: CN=54f871b72a9f52ab1165b5e633f274bab3046525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:61:a8:f6:e2:42:b8:73:8b:f9:ad:2a:68:
                    f1:ac:d7:bd:20:d0:d7:a4:47:b6:45:8d:58:35:6c:
                    46:f4:37:87:0e:48:42:1a:d3:1f:a7:57:78:76:d0:
                    61:84:2f:6e:d2:67:f3:87:f5:03:e7:ee:8a:0f:0d:
                    55:74:f5:f7:dd:c3:62:57:53:95:e2:14:24:90:b4:
                    f4:c4:82:a8:45:39:59:6b:e9:ab:4a:fa:cc:a5:2d:
                    fd:3d:54:2a:2c:23:e3:03:73:64:8f:5e:1f:26:8a:
                    f4:b5:8d:b0:79:2e:de:7d:57:c9:16:30:f5:d9:4d:
                    ac:0d:d2:3f:8d:c8:ad:9c:2e:03:cf:c2:77:7f:bf:
                    bb:18:d5:41:51:4d:15:f9:c5:6e:1c:b5:20:8c:bf:
                    89:94:d4:bd:87:b3:58:5d:36:59:0d:7f:b8:6f:00:
                    31:4a:d9:8f:e4:4e:c8:36:e0:2b:09:66:84:48:96:
                    cc:65:54:02:72:72:18:b6:bd:59:c6:43:4c:fa:69:
                    b8:70:f6:c8:3a:5d:bd:07:eb:83:be:db:86:aa:34:
                    0b:16:6c:7f:34:03:17:22:4a:a1:ba:47:92:b4:db:
                    f2:ef:0e:38:21:43:e8:ba:45:05:1c:d0:01:34:51:
                    8d:dc:9b:85:db:4e:d3:ba:3b:9b:eb:0f:df:b7:9a:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:71:B7:2A:9F:52:AB:11:65:B5:E6:33:F2:74:BA:B3:04:65:25
            X509v3 Authority Key Identifier:
                keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e8:f0:23:c4:92:e4:9f:15:5a:0c:54:b0:fe:8f:58:d7:fa:
         dc:36:44:3f:b6:32:9d:f3:e7:de:95:6a:de:87:66:60:8c:53:
         75:47:f0:d4:b9:62:80:ff:54:3b:06:a9:7f:a6:c6:e2:d2:f2:
         8e:9a:9f:eb:4a:fd:30:2f:bf:8f:eb:34:25:41:33:de:33:0f:
         bf:3d:52:06:5b:f1:65:74:e9:f1:a2:a7:ec:18:56:b2:1d:48:
         12:bf:20:2a:12:33:a1:fc:ff:cc:ab:3c:c1:85:55:4c:f7:9c:
         7a:7a:6f:5a:6f:55:b1:c5:fc:8b:9a:4a:c1:62:4b:84:80:0f:
         c0:63:e4:9a:c4:96:3a:cf:03:66:8a:91:94:2a:80:5b:39:2e:
         c6:4d:43:94:1c:9b:37:dd:42:57:72:34:91:89:78:1b:26:cd:
         f2:6d:71:af:e8:86:2c:81:2f:8a:52:01:b3:fb:89:44:a5:00:
         f1:1e:64:10:d0:79:e2:75:4b:7c:b4:bb:d2:1a:13:26:11:fd:
         1e:94:71:5d:5c:97:fa:c9:19:73:4e:5d:c0:2e:52:2e:6e:ce:
         18:64:d5:d3:b6:85:36:35:f5:a1:05:f2:6a:ae:27:c7:d2:27:
         ab:3e:8b:9b:b9:8b:90:39:ba:e4:6f:8a:0f:12:18:6b:91:c5:
         13:38:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:16:43 2024 by rpki-client on console-fra.rpki-client.org