Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File:                     ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier:          dNFEETg9jH9EDUdTZssGKpEH30lB43X+9u97sqIYdDg=
Subject key identifier:   7C:55:A3:8F:0C:BA:6D:CD:AC:27:E0:78:8B:5E:A5:2F:C1:D7:64:D9
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer:       /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial:       0191F93487FA891D4B8787B85F234A774D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number:          97
Signing time:             Mon 16 Sep 2024 05:00:54 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:54 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:54 +0000
Files and hashes:         1: Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa (hash: aV9ijG5xbK2AlYOJNT1d1Ex2iHxCo5sGJvE+INOlCs8=)
                          2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: G4RLjtiPoyShHFyCMpH40TqjqE3IITI0Cd6yE/ZiTkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:87:fa:89:1d:4b:87:87:b8:5f:23:4a:77:4d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
        Validity
            Not Before: Sep 16 05:00:54 2024 GMT
            Not After : Sep 17 05:00:54 2024 GMT
        Subject: CN=7c55a38f0cba6dcdac27e0788b5ea52fc1d764d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:d7:5f:b9:34:00:fb:cc:f6:43:4e:a3:bd:
                    c3:21:6f:1b:04:49:ca:43:7a:79:93:d5:c4:39:fc:
                    5a:52:98:8a:4a:66:ff:f4:84:49:66:ab:5d:8e:04:
                    b3:48:08:22:d1:e7:a0:73:60:cd:b9:1e:8a:ab:6d:
                    09:af:23:87:89:00:ed:73:44:11:7a:05:87:a2:4e:
                    8f:1e:63:06:a7:23:d5:20:8b:92:2a:c8:fd:8e:dc:
                    00:9e:f0:64:d4:b9:49:7a:78:c5:f1:ec:b5:f1:a1:
                    bd:4c:cc:1a:c0:63:bb:22:74:67:bd:bb:1b:e2:1f:
                    21:1e:49:3f:64:76:43:6f:f0:54:76:23:d8:9b:19:
                    fb:68:36:f0:87:cb:07:4b:ab:ca:62:5a:b3:55:35:
                    62:c6:f6:6f:5f:94:08:7e:58:46:6b:b2:f9:6f:3f:
                    01:52:d7:59:d8:e4:3e:e1:33:de:49:61:a8:b8:27:
                    ba:6f:4c:63:da:c9:bf:82:66:72:f2:98:cb:f3:2d:
                    6f:75:ee:87:e0:c9:da:c4:3d:11:0e:f9:26:db:78:
                    ef:49:fa:5e:18:31:7c:8c:64:f0:be:b3:13:3f:ae:
                    a6:28:73:dc:ff:0c:2b:f5:f7:40:d9:ac:78:5c:64:
                    69:00:0f:72:0c:aa:56:3f:34:ff:da:29:bd:2e:f9:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:55:A3:8F:0C:BA:6D:CD:AC:27:E0:78:8B:5E:A5:2F:C1:D7:64:D9
            X509v3 Authority Key Identifier:
                keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:4a:ef:ad:2e:d0:c0:e3:96:a1:3b:97:38:46:85:4b:3c:
         e5:76:03:2c:72:be:2d:ec:11:66:35:b8:97:e9:1a:56:bb:d1:
         a6:50:45:ad:f7:0c:96:9a:d9:3a:57:f9:0d:6d:3f:22:80:73:
         e5:f3:25:87:3a:69:f8:f3:22:e1:21:b1:8d:4d:e9:24:01:8f:
         d2:38:12:13:45:58:b0:16:11:b5:05:9d:f7:1a:be:53:fb:a3:
         a3:12:59:ed:30:41:13:eb:32:4e:52:d5:68:57:10:ec:27:dc:
         23:2a:bf:5d:8b:10:a8:53:75:44:ec:dd:9d:c9:96:66:e2:00:
         a3:d4:ad:1f:de:15:ac:d8:97:b1:f2:38:d8:98:d8:54:3b:72:
         ef:40:39:69:34:5c:f7:98:e2:f2:13:ea:13:52:29:5f:d3:86:
         76:ee:3d:a6:4d:3b:ee:d3:ab:06:be:c0:ec:c8:25:66:80:e7:
         36:be:b2:da:01:37:b4:10:4c:2a:5f:09:1f:ac:95:e3:b8:19:
         b4:05:1d:67:97:ce:61:47:bd:26:36:18:62:09:d2:b9:45:f3:
         76:01:f0:61:86:30:df:b2:40:d9:13:d3:b2:36:26:5d:c8:af:
         21:b4:5e:be:0e:22:93:c9:25:9a:31:1d:60:db:50:4e:0d:7a:
         31:38:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:50 2024 by rpki-client on console-fra.rpki-client.org