Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          QXqEWdzD9CbTFbVTLbapjt/9R6E7OvN+z5fIzpw6DhA=
Subject key identifier:   1F:F9:F8:5C:11:83:EF:5C:4E:9B:C6:D0:91:81:D8:3D:B6:D6:C8:EC
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       0193538808E3C1139511CB2E0BFEDE8C0BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          137D
Signing time:             Fri 22 Nov 2024 11:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:44 +0000
Files and hashes:         1: 0IRXch5xrrymMlZRrLL9p8N1T8s.roa (hash: XwUArmz80Z2+gw5eaoBDvNOJyGQpQlf8BxfeRsllcgw=)
                          2: 0IeTzmJpmWKZc6xvxa4RlAmm0rI.roa (hash: exXD7RfrRpSX/Uur6huQ59W/6TI/6ineX+S84OjGr/k=)
                          3: IgzCQvY9BfdX_PNz7GdTvDXaAQM.roa (hash: QQ1tAF1gXPo11EWRq9Ik/x7mxCepKz+Xw2RUEEvVRDw=)
                          4: JxN8aFVykcA-39CGItS6YlnUJ5o.roa (hash: m2bFYD3CJSZqj8xisMrB71iYAunnSfsJx/hUNW1cUjY=)
                          5: YqbCfbjfBbQY7aiSewNCscdQdgY.roa (hash: Y+/2NfmHz0hITKTKf7ajHO278OF3qroahj/vgxfDBAw=)
                          6: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: N87LbC+KVJkGPn1EZK5SjZpL6+zO871VMAiHNMtwt6M=)
                          7: x4PnlupFTtlXun3V7bBaO7KWIGM.roa (hash: pm0pdKJVpq+6BkbabE1HetYHidWqEqctUcgBNhXrjKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:88:08:e3:c1:13:95:11:cb:2e:0b:fe:de:8c:0b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Nov 22 11:00:44 2024 GMT
            Not After : Nov 23 11:00:44 2024 GMT
        Subject: CN=1ff9f85c1183ef5c4e9bc6d09181d83db6d6c8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:4e:0f:dc:e5:7d:14:4e:46:83:a4:80:4f:
                    05:e0:07:1b:55:c8:e7:a8:8d:0b:bf:6e:8d:ef:50:
                    77:7b:64:e1:b6:c9:f8:13:00:d3:ec:bb:8b:8f:62:
                    63:b8:f8:be:53:f3:e6:e8:22:97:bc:4c:b4:dc:23:
                    ba:c8:07:66:5f:f2:e4:87:ba:ea:60:0d:14:a3:2d:
                    ea:22:80:76:0f:c4:ad:e7:69:75:ab:55:f2:e3:0c:
                    d6:07:a3:67:78:e1:27:29:65:cb:a3:63:0e:e4:f8:
                    ba:a7:5e:29:c9:eb:61:ec:7b:42:cf:40:3f:5f:90:
                    8f:36:92:82:22:3f:e6:a9:17:84:79:ef:38:a1:6f:
                    dd:50:fc:97:95:a6:d3:d7:f7:37:2f:66:22:c2:18:
                    42:e0:ab:50:9b:51:d1:e4:14:da:5b:1c:f6:1d:a9:
                    79:f6:74:50:71:dc:7d:72:7c:9c:dd:a5:cb:fa:5d:
                    23:71:c6:43:3b:43:41:b0:72:80:62:68:8f:6e:33:
                    d6:b8:85:c4:6d:2f:8b:92:c6:7f:d3:00:3f:0c:5b:
                    54:98:42:d5:1e:48:8a:77:de:2d:77:ae:25:0a:43:
                    ef:cc:f6:f3:dc:0a:05:ad:16:36:92:05:12:53:2b:
                    6c:a8:0f:ee:ba:d8:88:ea:75:81:f3:46:47:bf:9f:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F9:F8:5C:11:83:EF:5C:4E:9B:C6:D0:91:81:D8:3D:B6:D6:C8:EC
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:52:3e:dc:21:32:42:83:3f:a3:42:bb:90:92:a9:07:2a:53:
         28:48:21:58:f3:11:94:1c:2c:ec:27:3f:af:08:1b:7c:0b:81:
         61:e2:14:4a:bf:e5:56:43:d1:88:29:87:ca:f1:0d:9d:7c:59:
         68:ea:06:31:8a:7c:af:de:a8:33:4c:55:18:98:c4:79:a0:02:
         49:9e:2e:4f:78:fc:f5:db:78:eb:b3:34:66:1c:7d:bd:ed:77:
         cc:c2:92:6c:97:18:91:ce:93:9f:52:6c:80:55:26:38:ba:13:
         3a:29:d7:ae:d4:d0:f8:5d:77:7e:df:ac:9a:5a:40:b9:9d:0a:
         2c:e0:f6:a1:1a:11:59:19:95:e1:f8:8b:b0:63:e0:ee:cb:03:
         53:d7:3e:26:c4:f8:23:72:1f:3c:47:e6:5d:66:0f:54:ac:55:
         17:d3:d2:65:d6:89:9b:a9:96:9e:e7:e6:b4:c8:ab:a5:af:37:
         c3:ca:f4:5d:d0:30:cc:1e:4c:96:50:46:ef:7a:c8:6e:9d:d7:
         0e:f0:ca:6d:8b:cc:78:49:77:17:49:2a:42:0f:12:cc:e8:21:
         b0:97:af:48:5f:09:e0:08:48:8f:1d:33:35:9b:89:77:57:dd:
         1c:e1:40:01:c5:13:26:b3:16:4f:90:b3:61:8a:60:4f:13:74:
         a3:22:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:10 2024 by rpki-client on console-fra.rpki-client.org