Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
File:                     xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json)
Hash identifier:          UfIoXuuBKiZBsbFdllqrtTQXWQSNamaG0fL/F1MSHKU=
Subject key identifier:   92:31:07:5F:63:E5:68:F7:D5:94:18:5F:A0:AB:47:D6:F6:2B:D4:BB
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       019356F6FA595551262813D0C5E3A7B45501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 03:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:46 +0000
Files and hashes:         1: 1RwS_fALTwgj2nYw4UzokfpoEes.roa (hash: 7I9sW+KMnjVioOsM/x9kvwecKMQ4RuUodvgXXeyuA4I=)
                          2: F4nAwWoc7AY6rAAzVNjAD6LtuEQ.roa (hash: USB7votBZnFPhIAC15OHKrvXOXQepI0snTupHyIzvVQ=)
                          3: ouJpfJbchWU6U6sgBZuUxXCULsE.roa (hash: LIyE+lHXMR+QVJw3cAOXmSc+hJIgFMXccoDSifp8eXQ=)
                          4: poxmtDYR7ti9a7u3bYB-59Fu5iQ.roa (hash: Bh9luk93Ef4KzKcg62KO2kZl5y/QGvjfYdFOc3DluFg=)
                          5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: TYIbHaprwpu4hWjfvFTBEefP8+5GUOeqg11hSmlf7lg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:fa:59:55:51:26:28:13:d0:c5:e3:a7:b4:55:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Nov 23 03:00:46 2024 GMT
            Not After : Nov 24 03:00:46 2024 GMT
        Subject: CN=9231075f63e568f7d594185fa0ab47d6f62bd4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:a2:50:b5:b1:27:d6:81:f1:21:e9:02:78:
                    dd:22:61:a9:dd:6a:c3:59:41:23:01:ff:b1:11:13:
                    d0:ba:2e:b4:9e:ba:04:88:79:01:bf:71:4b:da:01:
                    ec:71:5b:ec:9d:67:86:c7:46:9c:46:6a:e6:91:a3:
                    94:db:53:e1:d4:b6:e2:28:1e:d1:b0:71:05:ef:35:
                    35:9c:39:0b:35:21:82:40:c0:f8:d0:88:d7:92:ec:
                    13:39:16:93:6e:cf:ec:19:19:03:0c:22:5e:0e:03:
                    e2:59:35:20:7d:33:13:e6:55:d4:5a:c6:49:ce:07:
                    33:0b:d5:49:6c:84:00:56:07:b0:69:4f:b9:82:65:
                    d6:72:ab:96:15:1e:1c:b9:cd:e2:a3:9b:13:ae:61:
                    6a:87:03:2b:f2:52:2b:27:3c:bd:dd:d7:71:d6:55:
                    46:f9:eb:c8:04:57:f1:26:0a:b8:d1:c0:2f:15:ca:
                    04:f5:0a:ef:d1:5c:ea:5e:05:9c:bf:a5:9d:73:5c:
                    05:b8:d2:cf:99:de:a5:96:6d:11:97:50:e5:54:a9:
                    46:71:7b:d6:6e:8e:1e:34:a5:65:41:59:a1:fd:fb:
                    a1:dc:03:e3:22:4f:5b:b1:48:a2:08:0a:45:26:0e:
                    86:45:6c:76:aa:0b:4c:7a:61:4c:83:bb:a8:19:1f:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:07:5F:63:E5:68:F7:D5:94:18:5F:A0:AB:47:D6:F6:2B:D4:BB
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:99:b1:60:aa:ee:54:c1:3e:b7:92:88:79:8e:39:b8:6a:
         fb:12:aa:cd:30:89:9f:ed:29:40:f0:33:f6:de:2e:d8:a7:cb:
         6c:0c:eb:cf:be:3b:69:51:89:0a:bb:c4:57:07:f9:e0:66:c0:
         4d:6a:e4:50:70:23:59:75:ed:44:aa:2b:8d:8f:47:cf:4d:ff:
         9b:81:b0:2b:b3:ef:7a:e5:11:ed:96:95:44:b5:35:e3:68:48:
         50:f5:5c:09:5b:80:e6:5c:29:4d:74:a4:7a:13:f3:4e:92:6e:
         50:47:85:ad:ea:e0:0d:6e:05:9e:94:d0:fb:7d:31:ab:5b:ad:
         3f:9e:c2:9a:10:6e:7d:9c:e3:aa:58:fd:9b:8d:a1:fb:01:42:
         a9:8b:b6:94:04:0a:ee:12:8d:fd:bf:e8:70:dd:bd:ae:31:02:
         13:48:78:99:a8:e9:47:d5:a6:54:be:7f:2f:98:db:2e:1e:0d:
         2e:7a:b9:53:33:b9:c5:6c:d9:4c:60:fe:f9:de:7a:b3:d0:46:
         0c:34:9f:da:5f:7b:1b:dc:46:74:d0:cd:c4:14:ad:c6:17:bc:
         c7:57:c1:15:42:73:25:bd:1b:86:cf:37:32:b0:c2:00:70:35:
         bc:50:9f:22:ba:bf:76:07:6d:f5:c7:a0:3d:3e:55:5c:01:3a:
         3a:a5:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:20 2024 by rpki-client on console-fra.rpki-client.org