Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File:                     0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier:          dYTFTB+oxlEmpO4uOu01+uIts4H3wFycBuItTxJBZiE=
Subject key identifier:   40:92:28:8F:B7:78:23:87:B4:E9:FE:FF:BD:78:33:72:6D:38:4C:91
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer:       /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial:       0193520773234218E18E5A16EF016106B622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number:          06FB
Signing time:             Fri 22 Nov 2024 04:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:40 +0000
Files and hashes:         1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: I/P1JOWm+9OfS6IVsLerwo3yO2qLmctWCpqlR5e+mFU=)
                          2: 8MGxGzHz6CinAh02_ZqJb98AzDk.roa (hash: soIHb2Di+E0RSPOBlNxRdHSFI3T6DGafG+gbX2ko4AQ=)
                          3: NLcfFwJr3A92HjLrSaAInfGD2nY.roa (hash: 8gqwjnd5sMrdbBV66f1gxSmXusaW2IvLXzHfu/Ge27E=)
                          4: PX-K-MMDGBbFoV65uJkojcPxvyE.roa (hash: sjpgixjd7hCeJC1dwK5Z3kqnqmiVX5cmwqZKcl6gvLE=)
                          5: RTJ55pvu26SiZPLcCjcbm-pPC08.roa (hash: BoDwANXSc6GfV4NpWRJyR6uqWPLgNaNplekiSmuEMZg=)
                          6: V4nQnWpv7TEmYCd2YZC6VSiwBDw.roa (hash: 4ZBTxeYN0Gz6vzGybBTPap8wm+PkHtlNTvNUhbk89oI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:73:23:42:18:e1:8e:5a:16:ef:01:61:06:b6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
        Validity
            Not Before: Nov 22 04:00:40 2024 GMT
            Not After : Nov 23 04:00:40 2024 GMT
        Subject: CN=4092288fb7782387b4e9feffbd7833726d384c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:6d:3c:a7:a2:87:bf:5c:df:bd:17:dc:a8:
                    73:7c:bc:b7:9e:a3:d4:84:62:02:72:73:62:34:ee:
                    72:6d:c6:04:41:b4:9b:3d:a6:74:5c:02:e2:cd:d6:
                    a1:39:86:0e:87:39:63:56:c0:55:ba:0a:82:25:6b:
                    3a:2c:6c:27:44:d4:34:66:2b:ee:59:e5:6f:77:40:
                    ba:8d:bb:b5:71:64:07:9d:f2:00:9e:9d:89:18:be:
                    22:d3:82:4a:69:29:f8:6a:14:8d:11:9b:60:eb:0d:
                    98:00:35:93:a7:72:91:a0:ef:5c:cc:d9:10:42:8d:
                    67:a4:8c:3d:61:3f:ab:2e:02:e3:8e:7b:ce:19:47:
                    a0:42:0f:83:2a:8f:22:e1:7c:92:83:10:75:83:c1:
                    8d:04:3d:cb:9c:79:b7:e1:f0:ea:88:6f:a0:02:4c:
                    61:f1:06:89:f5:a9:bc:4b:c4:f3:4e:a3:d5:56:e6:
                    dd:a4:cf:e1:aa:b5:cc:25:cc:d9:88:f1:2a:d6:9a:
                    83:d6:4b:59:ba:37:a7:f7:e5:1b:f2:b5:29:81:7f:
                    ec:ce:96:e7:e8:e6:3e:28:79:31:28:69:ff:78:26:
                    6d:c8:4a:02:04:13:1f:77:78:aa:10:a4:f0:4e:f1:
                    b3:90:3d:87:30:ef:c8:2d:58:d1:f6:d0:33:5d:b8:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:92:28:8F:B7:78:23:87:B4:E9:FE:FF:BD:78:33:72:6D:38:4C:91
            X509v3 Authority Key Identifier:
                keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:db:15:0d:fd:6c:df:96:59:25:16:42:e3:81:79:21:80:
         a5:0d:34:fc:cc:97:25:2a:c9:70:a7:6d:e9:08:b9:94:f5:e5:
         5f:e0:46:c7:d6:31:4a:ac:ff:5d:a2:97:06:a2:e6:3b:19:4d:
         44:63:9e:4a:91:c9:f0:57:55:93:8c:3a:7c:59:e8:1a:d8:1e:
         32:a0:15:fa:ef:6d:85:91:a6:42:1f:08:49:13:8b:cc:6d:79:
         56:ea:cf:49:6f:ce:2c:76:23:bd:9b:ce:55:f4:88:e3:ea:59:
         13:b0:fd:e3:58:25:09:1f:2d:4c:f6:8f:42:f3:20:37:df:b8:
         27:9d:85:0e:5c:fd:1a:d5:2d:5c:bb:18:4c:e9:21:38:49:f5:
         15:00:37:52:8c:20:bc:70:3a:2b:72:69:22:e5:56:eb:24:24:
         fd:5d:bd:0f:95:6e:4d:75:a9:47:ae:49:9e:08:f9:3e:92:ec:
         37:82:e8:ae:9c:c3:9a:b2:e4:e2:f1:88:ce:79:c5:c8:7a:6f:
         8b:56:d4:da:4a:9b:37:83:9c:a4:17:d8:5c:67:12:7a:10:0f:
         40:aa:d2:63:86:27:d0:ab:7f:2a:1a:c2:10:f4:aa:5b:bb:51:
         5e:38:30:91:79:31:dd:9c:18:f7:cc:fb:1d:96:b7:64:8f:09:
         75:6f:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:09 2024 by rpki-client on console-fra.rpki-client.org