Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
File:                     xRCtRomJb7hQznkP3-NE1MAnpa4.mft (raw, json)
Hash identifier:          eWBuH9pV02nb/2RWXVWu9fLxzmBOJM4gLV0RzTs2Q6M=
Subject key identifier:   84:4C:BD:16:CD:2A:56:F7:69:F4:59:27:D0:38:D0:42:9F:F0:0F:3B
Authority key identifier: C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Certificate issuer:       /CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Certificate serial:       01935688D59F97FBDFB1689A49823FF3FD7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:28 +0000
Files and hashes:         1: 9G5_vAvVVb2oivzsRt_Hjuv2mQE.roa (hash: 1ayxXcBbYCNa31LxzB6y4ysDFrYBbzC2GxU/fCpaPdU=)
                          2: xRCtRomJb7hQznkP3-NE1MAnpa4.crl (hash: vwOxlmsCjIVoQcLLc89H9YirqKq5JILx2RBhTkQUy0k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:d5:9f:97:fb:df:b1:68:9a:49:82:3f:f3:fd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
        Validity
            Not Before: Nov 23 01:00:28 2024 GMT
            Not After : Nov 24 01:00:28 2024 GMT
        Subject: CN=844cbd16cd2a56f769f45927d038d0429ff00f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:7d:99:00:cf:3c:09:2c:4f:03:2f:81:65:
                    49:47:d7:ea:e0:7a:ca:d7:3f:83:30:26:6b:cf:78:
                    7d:ff:6a:f2:f5:66:93:e7:a6:1d:41:b8:1a:43:5d:
                    59:e0:9b:9a:b2:7a:a1:99:ba:48:b1:25:ce:e1:02:
                    c2:25:90:1b:21:f6:c6:33:f5:50:97:6a:3c:6d:aa:
                    30:83:01:02:90:e2:3f:80:d6:33:85:a8:cd:5f:24:
                    ef:dd:6d:c3:4b:44:48:8f:17:88:a4:1a:8e:98:53:
                    f4:29:a2:5b:c0:f8:66:b2:9a:2f:43:2a:b9:ed:33:
                    47:1f:25:51:60:76:b8:d4:4a:0d:72:22:9c:72:7e:
                    13:ed:a4:5e:2d:48:f7:52:26:d4:fa:1a:c5:e1:54:
                    48:d5:22:8f:4b:44:ef:5f:58:5e:06:0e:32:bf:1e:
                    cf:9f:af:7d:cf:31:6e:d3:cf:d5:e1:ca:75:f2:00:
                    71:ed:ca:c7:a4:32:f4:ca:c4:7c:e2:44:08:48:4f:
                    32:25:c3:d5:69:f8:f0:97:d3:d7:54:21:01:45:f2:
                    34:6b:c6:da:28:a5:b5:36:30:55:14:e6:1e:ee:67:
                    44:11:1f:34:33:0e:87:aa:57:92:0c:c4:99:dd:3f:
                    33:80:fc:7d:d6:d8:42:26:51:ed:7d:ee:8b:c6:a3:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4C:BD:16:CD:2A:56:F7:69:F4:59:27:D0:38:D0:42:9F:F0:0F:3B
            X509v3 Authority Key Identifier:
                keyid:C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:24:b6:02:a1:e0:3b:9f:da:2a:6d:05:69:24:ed:eb:7b:
         66:36:6b:66:33:c6:13:e6:38:1c:53:c7:30:cc:f0:2f:a0:42:
         51:a7:37:f9:76:df:59:52:74:cd:e2:dd:f8:ea:9c:74:c0:36:
         c0:2c:2e:73:fe:15:9a:e5:1b:38:c0:f2:39:2d:33:e6:69:b0:
         c6:fa:39:9b:9b:39:6a:ef:ff:60:57:d4:26:c3:ab:49:20:73:
         29:92:ae:1a:91:9a:89:06:58:2c:ef:12:f4:96:b2:7f:46:eb:
         b3:a4:69:69:34:cc:09:09:e5:fc:1f:1b:ab:fe:23:aa:ec:1b:
         59:70:90:9f:a2:e4:89:6d:83:e0:5c:01:4c:ee:6c:49:9f:3b:
         26:63:7d:3a:ae:fa:0d:a3:b3:3d:b5:4f:1f:5b:15:b8:6f:88:
         9f:7c:a0:74:88:04:c0:34:3c:e6:69:19:60:18:7b:17:97:8c:
         54:05:79:53:ad:77:bd:20:84:b2:a1:2d:5a:fb:6c:ef:8d:9b:
         32:8f:43:4a:08:fd:64:f7:9e:29:b3:96:67:6a:4e:b5:5d:20:
         16:dc:59:f9:f6:da:ac:e1:84:00:10:d5:f1:3c:24:de:86:ef:
         7c:30:33:42:34:b0:e4:56:0f:4a:ac:b9:3d:f6:6f:04:c6:ff:
         63:e6:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:33 2024 by rpki-client on console-ams.rpki-client.org