Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File:                     PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier:          Wu/HAOkZSn5NDO+x9629GU7ROT34hmhzD0mIC3nxZZs=
Subject key identifier:   FC:97:DC:02:63:47:BA:E0:5E:C2:34:3C:37:69:8C:5E:3C:36:94:F6
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer:       /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial:       019353BEFA636BFE1FE5159AF677B93CF902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number:          0251
Signing time:             Fri 22 Nov 2024 12:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:45 +0000
Files and hashes:         1: 9NE76IikFTwAkTyDCCKrSeG9Pfk.roa (hash: 7c8fDsuY1fGey1bF9sm0j3DM8bkDcr2ESfsaRPP7P5A=)
                          2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: IaGH7YgLDVIGeCDXlu1907u8W0N6CmGvWGyMIafjSqs=)
                          3: _F6TNT3UUhlaSwJzhLdsN1a7spg.roa (hash: uqTIEPPhxt4e2fZ+ImCv3FZ0kxLwOFuJ0lRsm9SQU3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:fa:63:6b:fe:1f:e5:15:9a:f6:77:b9:3c:f9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
        Validity
            Not Before: Nov 22 12:00:45 2024 GMT
            Not After : Nov 23 12:00:45 2024 GMT
        Subject: CN=fc97dc026347bae05ec2343c37698c5e3c3694f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:f1:13:8a:7a:08:87:e2:59:34:66:ab:35:
                    71:b4:ae:7c:27:e0:24:70:03:83:a3:02:27:ba:0d:
                    0e:49:e9:57:31:f9:03:f8:f8:76:44:ea:22:55:52:
                    a3:38:ee:f2:dc:f5:74:a4:b0:fd:aa:45:4d:a0:bd:
                    30:68:39:bf:59:b9:aa:19:72:a2:ae:88:18:15:29:
                    b5:6b:90:34:02:e1:78:51:49:99:bb:5a:94:f3:72:
                    19:e3:f1:75:98:41:5b:b4:d9:22:b1:a0:32:1d:dc:
                    96:73:1a:37:42:56:ad:b1:b1:10:59:b9:d2:91:8b:
                    38:af:47:69:f8:ec:1d:df:76:54:ef:38:9b:8c:ec:
                    6e:73:f9:99:b8:83:ce:bb:91:57:84:48:f4:78:0c:
                    b1:84:ab:6a:69:8b:00:5d:c3:01:38:36:e8:60:fb:
                    fd:97:30:c5:3b:e3:e3:7b:2f:9c:55:22:56:67:80:
                    12:12:d6:e3:f5:c1:49:c9:29:81:15:2b:02:cd:5b:
                    7e:19:f5:42:09:a7:f8:35:3b:d1:93:09:e2:11:8a:
                    5f:7f:fd:a3:b3:ab:e0:38:4a:a9:49:36:54:0a:04:
                    9c:71:2b:32:39:87:2e:9d:31:bc:95:1f:e1:66:f3:
                    c4:ca:cc:e5:2a:e7:d5:97:f6:8a:fe:d5:08:8d:80:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:DC:02:63:47:BA:E0:5E:C2:34:3C:37:69:8C:5E:3C:36:94:F6
            X509v3 Authority Key Identifier:
                keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:20:21:47:b8:9c:cb:7f:a4:fd:42:8b:71:02:5b:d7:a8:
         c9:34:ea:03:62:2f:98:13:ea:a5:7d:23:39:63:62:c8:6b:6a:
         e1:44:cf:86:3c:e2:8e:08:ba:b1:fe:1e:b5:a5:c6:86:53:f5:
         da:85:a6:00:d8:9a:cc:77:a3:6e:cb:b8:76:06:3b:e4:cd:7c:
         8e:1b:91:19:dd:45:23:a4:f8:ab:ad:29:c3:32:dd:68:a5:e6:
         ea:2c:10:5d:d5:92:16:97:87:30:37:3a:92:55:be:93:6f:c8:
         93:4b:36:db:cd:50:02:07:08:99:e6:12:ed:c6:75:6c:81:f5:
         02:55:76:15:35:09:1c:e8:e5:74:1b:3c:ea:bf:a4:be:63:73:
         ec:2c:86:9f:ad:1a:3e:65:21:b7:6a:2b:73:ab:78:63:7a:49:
         69:d7:c2:1b:d5:e2:a4:d8:eb:59:1c:ab:7d:c8:bd:88:76:88:
         3d:38:f1:56:a5:29:cf:75:1c:69:50:b0:e2:4c:43:df:4f:05:
         9d:6b:67:34:3d:12:ad:34:27:63:eb:69:ac:4f:ae:d9:f7:81:
         34:05:d3:7c:52:32:51:75:90:c5:2e:c2:80:63:38:f1:c1:07:
         e4:ac:2f:ea:a4:47:5b:be:51:70:db:0f:38:cc:72:ec:f4:4f:
         26:cc:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:14 2024 by rpki-client on console-fra.rpki-client.org