Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File:                     AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier:          oaTqFWAzP+iaqGJSXCrdyFedoEjfHuiOZE39Ma4M1xw=
Subject key identifier:   5C:91:DC:3F:E1:F5:B5:2C:C9:6D:DC:41:24:5C:D7:93:AF:D3:1F:3F
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer:       /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial:       019355AD6E59E289CD9BF2C9F0A39B1EA07E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number:          132B
Signing time:             Fri 22 Nov 2024 21:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:49 +0000
Files and hashes:         1: 2vE6dAIrFWmjX9wUXQLyjcxrpQc.roa (hash: B4kFwbSdbF1t9OB8EnoG0yqieMQZClDok+4cB6L7sNE=)
                          2: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: 83/xS+uz+NLwBPqPPkN5SQJXTtCIJCmSwyEXfi0KHYE=)
                          3: KLQnqLU7MnE1vQ0C3fBZR_wippM.roa (hash: uHteR/ljeWmrkFZklyk5enYp36A5QLg9oQc2huNod+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6e:59:e2:89:cd:9b:f2:c9:f0:a3:9b:1e:a0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
        Validity
            Not Before: Nov 22 21:00:49 2024 GMT
            Not After : Nov 23 21:00:49 2024 GMT
        Subject: CN=5c91dc3fe1f5b52cc96ddc41245cd793afd31f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:cc:58:97:a2:7c:a4:cf:8f:7d:17:d5:c4:
                    26:d2:ad:23:6b:2b:da:ea:73:68:2c:e2:0d:79:8f:
                    25:df:93:1a:1b:5c:19:b5:16:41:ef:e4:97:55:ce:
                    3b:ef:d1:ec:5f:58:e5:7b:2d:99:1b:0e:1a:0f:37:
                    53:ff:53:7b:f7:52:8b:ed:33:0a:96:82:47:e4:4d:
                    e4:c2:79:07:50:c8:cb:21:84:4f:73:a0:bf:8f:cb:
                    76:84:15:25:a9:81:a2:88:d0:98:d3:7c:37:83:85:
                    91:b0:81:e4:b9:1c:0e:fc:19:f6:c1:31:32:05:62:
                    87:33:7b:16:41:8c:88:4c:be:56:0e:04:50:3c:d7:
                    6d:f5:57:5c:81:20:a8:03:cf:87:e1:75:6e:16:50:
                    ef:31:e4:e1:6f:6a:bb:df:a8:88:6a:f4:b8:9e:ec:
                    c7:9a:bb:6d:46:f2:50:91:36:cf:50:e4:56:e7:e6:
                    30:28:a8:96:a7:58:94:b6:f4:e6:5a:a1:fe:31:a9:
                    cc:51:f5:f9:bb:a3:f3:e2:53:d4:b2:07:91:c1:c1:
                    c2:b5:9f:4c:25:b8:1f:bb:7f:8d:4a:bb:f2:a7:1f:
                    cc:43:76:b4:79:e2:03:2c:1a:0d:a6:51:b4:55:05:
                    ab:f2:b7:d1:3d:c2:77:32:46:da:14:43:85:9f:e9:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:91:DC:3F:E1:F5:B5:2C:C9:6D:DC:41:24:5C:D7:93:AF:D3:1F:3F
            X509v3 Authority Key Identifier:
                keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6e:a6:9b:b8:2b:6e:44:c0:1a:7a:8b:14:5a:25:c9:1a:b3:
         4f:e6:30:d3:26:f6:75:40:5c:14:a3:51:95:ce:15:50:57:77:
         fc:ce:35:ca:64:85:b3:eb:5f:df:64:75:e3:05:e4:8e:39:c5:
         57:97:8d:97:f7:73:91:dd:78:fa:13:6a:50:ca:14:13:75:1b:
         9b:78:9f:e4:70:eb:0d:e3:e6:b6:16:0c:5b:cf:b5:ed:c9:a4:
         75:ef:f2:96:15:c1:47:b9:ec:c6:2b:74:28:4e:d4:5e:21:2f:
         be:46:73:b4:42:4b:d6:ea:20:d2:46:a8:54:40:29:bd:c5:32:
         31:f2:bb:6c:d8:ff:36:04:d5:da:fb:5f:a8:2f:ea:b8:a3:7e:
         0e:ba:8f:61:89:e6:0b:98:b3:9d:41:2c:85:ec:09:e9:77:78:
         70:cb:ea:a8:8a:4d:c0:c8:e0:3c:f9:41:a7:3e:16:94:89:64:
         e5:e1:8a:12:85:b8:3c:e1:b6:ff:eb:e2:2d:65:b0:42:c0:a6:
         0a:a7:62:65:71:f3:55:8c:f8:81:6f:ba:29:fe:02:82:1e:84:
         92:f1:ea:ba:37:d7:af:34:7c:89:cd:da:06:e0:73:9e:e0:ed:
         8d:59:eb:89:97:6b:32:ed:01:53:89:03:3d:46:13:5b:ac:ec:
         de:fd:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:29 2024 by rpki-client on console-fra.rpki-client.org