Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File:                     MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier:          f4iKpqyYqRxYDBYc++0F/NubPLMI6VmuqFHLthSUaKM=
Subject key identifier:   49:30:01:97:1A:3B:2B:65:EC:76:D8:FD:CE:26:95:1D:C3:BD:DE:C0
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer:       /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial:       019355E4743D7344E4F85F280183858C502B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number:          07DB
Signing time:             Fri 22 Nov 2024 22:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:55 +0000
Files and hashes:         1: 7oW16AEBr0I2Ka3Ga27GnIOouns.roa (hash: ZlJidFjuVkZb2iggUfavtLAgfgeh4vpXDHPP/yLRpE4=)
                          2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: j5FzjjaGi62YuXYID5YUCQWs4FTDv4FT2rgblSAm6f4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:74:3d:73:44:e4:f8:5f:28:01:83:85:8c:50:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
        Validity
            Not Before: Nov 22 22:00:55 2024 GMT
            Not After : Nov 23 22:00:55 2024 GMT
        Subject: CN=493001971a3b2b65ec76d8fdce26951dc3bddec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:3f:65:0e:bd:56:d5:7c:bf:b2:59:95:c3:
                    fb:2f:d5:cd:14:97:4b:69:b1:7c:b2:28:88:6f:15:
                    c8:66:a6:cf:22:df:ad:e5:25:cf:07:5d:3c:44:e2:
                    ab:b9:e9:ad:17:2f:aa:6b:11:ae:b9:16:86:33:40:
                    b3:bb:7d:93:54:ab:75:41:ef:db:83:bc:da:e0:13:
                    43:6a:8d:0c:48:3c:3d:c4:04:21:63:2b:c0:cf:8d:
                    1d:cf:f9:a6:2f:5c:48:ce:b9:63:eb:bb:96:1c:d0:
                    73:89:dc:bd:a3:4f:fc:43:aa:58:ca:5e:4b:36:bc:
                    17:b8:97:ec:b8:5a:39:86:23:9f:3b:2d:e8:da:74:
                    14:ea:42:80:17:18:8d:7a:a2:aa:41:3b:d1:e0:4d:
                    4e:81:a4:cc:75:2b:50:af:22:24:73:e4:da:b6:9b:
                    1a:5f:83:46:ea:ab:07:27:aa:18:6e:51:26:52:46:
                    9e:04:31:aa:95:e7:65:ec:e7:e8:dd:8c:81:f6:52:
                    fd:0c:a0:90:2a:e2:c4:b3:37:32:62:6c:36:9a:9f:
                    92:c2:17:08:97:15:ac:4b:ee:c3:83:cc:19:64:3e:
                    7b:e1:7f:ab:39:07:1c:f7:a5:de:61:0a:d7:b3:e1:
                    c2:c3:ec:3f:3a:06:86:6c:f4:e1:ed:f0:34:05:af:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:01:97:1A:3B:2B:65:EC:76:D8:FD:CE:26:95:1D:C3:BD:DE:C0
            X509v3 Authority Key Identifier:
                keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:45:63:3d:30:09:79:9f:29:b0:0d:3e:cb:12:07:78:72:90:
         4e:ee:f6:04:5f:5f:0c:04:51:18:3d:93:25:b5:7a:5c:be:5f:
         c2:43:50:0c:67:f9:bd:96:2c:78:b3:e9:63:9d:00:aa:90:0f:
         40:50:18:4f:9a:6e:e0:27:9e:38:01:ec:50:bc:c4:c2:fb:89:
         3c:e4:60:ec:5f:8f:34:09:db:ee:7a:92:34:74:3d:1f:64:d9:
         91:f3:3b:ad:b5:79:ca:c2:fd:7c:30:53:43:17:62:ae:3d:9c:
         cf:e9:9a:66:5c:6a:37:78:58:db:32:d0:45:f8:54:2b:b0:5d:
         02:83:3a:8f:39:61:61:68:a0:4b:cc:c2:80:ad:d9:65:51:e7:
         3e:65:a8:f5:22:75:1b:5b:54:8e:f0:7c:54:b0:03:71:69:b6:
         5d:6c:5a:40:33:e6:b0:93:ea:80:4f:65:6c:fc:b2:91:e2:59:
         ad:43:a7:36:6a:e5:c9:2d:34:32:db:22:16:4d:c6:00:46:46:
         17:49:90:53:bd:08:5b:69:23:b5:4a:6e:b9:97:05:2f:c9:42:
         b5:89:1f:6e:6c:ed:ee:8c:0b:01:6c:ba:f1:30:12:36:3b:27:
         49:ab:21:19:bb:87:fe:c3:c4:52:bd:b7:ab:70:62:85:73:c2:
         3a:ae:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:41:56 2024 by rpki-client on console-fra.rpki-client.org