Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File:                     B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier:          nDQ+HQnmaOY09VH3XE95o2Ml/3HYGz5hO5Muigi790E=
Subject key identifier:   49:34:85:61:BA:EE:D7:2C:26:11:98:A5:BB:C0:C7:B2:E1:4C:84:C1
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer:       /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial:       01940646648670760EE35A2EFC726108A917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number:          0C8A
Signing time:             Fri 27 Dec 2024 04:01:03 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:03 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:03 +0000
Files and hashes:         1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: fQmF1Gdfh/mXfoc3pLukDzLDIvKBWPmdEyDFA/vqBos=)
                          2: Uu1J__-yTKvR63rlTd24AnmAO80.roa (hash: zugdrnBohGQp/KEN0uLVP7ptm+kQznKGEzlATfccX2I=)
                          3: kHhR6XXw5W4OrK3DDWGkt6y3LqQ.roa (hash: SnsZrKOJ+51083mkqFkmUXyLNlZFwWd3H0I4nDouxCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:64:86:70:76:0e:e3:5a:2e:fc:72:61:08:a9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
        Validity
            Not Before: Dec 27 04:01:03 2024 GMT
            Not After : Dec 28 04:01:03 2024 GMT
        Subject: CN=49348561baeed72c261198a5bbc0c7b2e14c84c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:0f:12:8a:b3:36:53:8a:f4:cc:6e:c8:88:
                    51:62:75:62:6f:68:51:74:37:35:79:c6:57:6f:41:
                    74:85:62:81:a6:ef:b3:8e:bc:5a:74:d9:32:2a:a9:
                    88:2d:f1:27:b9:b8:13:29:5b:d0:34:3a:07:2f:31:
                    57:e6:db:38:9a:57:25:20:31:5a:c7:b3:30:c2:f5:
                    b1:7e:69:19:c5:d2:6e:09:3c:bc:4b:19:ec:f7:ef:
                    68:88:49:f2:7d:0b:60:a7:a3:91:0c:79:b7:56:ac:
                    fd:40:06:4f:7f:be:e7:51:c6:b3:62:40:35:21:e5:
                    b0:de:92:bd:77:7e:6b:f6:42:62:89:2c:03:de:78:
                    b6:42:46:93:8f:b4:a5:76:d0:a1:4c:8c:cc:22:c6:
                    2d:8d:f5:c3:ae:5e:4c:19:2a:75:37:38:a0:74:43:
                    67:c4:4a:da:8e:6e:e2:83:ab:34:fe:4e:6d:ac:bd:
                    9f:2d:9f:d5:22:87:73:8a:c5:7e:3f:82:67:fe:3c:
                    22:0e:39:17:a9:75:5e:d3:6b:29:1a:c7:9e:1e:23:
                    28:5f:ef:4c:14:72:04:7d:e0:ed:0b:8f:b8:3a:db:
                    b8:66:46:93:9b:54:f3:11:0d:f2:8f:14:09:1a:2f:
                    bb:9d:5f:d4:0d:76:fb:73:1b:5f:b2:ee:60:22:74:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:34:85:61:BA:EE:D7:2C:26:11:98:A5:BB:C0:C7:B2:E1:4C:84:C1
            X509v3 Authority Key Identifier:
                keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f1:02:27:63:c7:52:5d:b8:70:fd:fa:b5:08:a2:62:45:d3:
         2b:28:12:33:8c:28:bc:c4:20:99:d2:c4:32:fa:83:33:05:f0:
         72:a7:ab:57:2b:ec:cb:c4:26:5b:e9:aa:e1:e3:a3:ef:4d:bf:
         3d:c6:7e:cb:be:82:3b:22:ca:09:18:9a:d2:1a:24:38:53:d1:
         7c:0c:12:31:e2:86:49:37:c0:e7:61:35:eb:3d:32:0e:a0:01:
         8a:98:51:3f:64:d8:3f:41:25:74:49:86:b4:0d:26:75:48:08:
         5c:74:65:fc:4a:3e:67:74:84:b7:27:52:54:f4:14:4d:ed:5d:
         f7:d1:26:b7:bf:72:4a:0b:6c:a3:2d:d1:e7:21:94:2e:80:95:
         fa:61:bc:24:88:40:d2:68:43:ab:72:6c:84:7a:62:7e:8d:3f:
         e9:32:89:65:02:76:7a:5d:79:68:82:c9:ca:2b:3e:ea:ac:32:
         9c:b4:dc:17:40:71:38:76:12:b5:45:62:07:6a:9c:42:68:28:
         bd:4f:8d:94:31:d3:b3:13:db:46:22:40:d0:8c:dc:3e:3b:5a:
         a3:5c:33:f2:6f:b2:5e:d3:ff:bc:b9:99:19:89:ea:02:eb:cc:
         32:6a:e8:b0:1c:ed:6a:71:54:bf:99:cd:a9:b5:de:b3:ee:5a:
         06:b5:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:49:34 2024 by rpki-client on console-ams.rpki-client.org