Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File:                     u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier:          Y0rds/ocQbBdtrNcP9QfSxIYAiSh6x4VGQJWvEIO5Hk=
Subject key identifier:   E9:ED:6C:04:83:F1:2C:35:97:4A:25:47:30:3D:EE:43:C0:E2:B5:A4
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer:       /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial:       0193568B11DE9FDBB5F556508E7DA08BF290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:02:54 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:54 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:54 +0000
Files and hashes:         1: SuThizNxL4uF7FJ_DhoocCFauMA.roa (hash: nPezC9dWynMzFX6tCBrCxGncfyMaTP0xvgQ2tjeEzRY=)
                          2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: FG8HnHXES874T9qW4VWGygDdVjp6JYEGL5FWQ05jUrs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:11:de:9f:db:b5:f5:56:50:8e:7d:a0:8b:f2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
        Validity
            Not Before: Nov 23 01:02:54 2024 GMT
            Not After : Nov 24 01:02:54 2024 GMT
        Subject: CN=e9ed6c0483f12c35974a2547303dee43c0e2b5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:65:e7:23:ff:6a:06:b4:a4:73:43:dc:8c:
                    9b:60:b3:04:6d:08:4c:25:ea:1f:0d:d9:8d:2d:63:
                    6d:99:df:d2:1f:f1:44:e1:1f:06:8d:1b:d4:a8:a6:
                    5e:91:a0:85:57:68:be:cd:9f:45:66:d4:63:06:59:
                    19:ad:00:51:c0:7d:77:1e:09:85:ad:82:f4:23:12:
                    95:dd:56:74:c0:1a:fb:b8:a9:7f:cf:3e:06:ec:df:
                    e9:27:ed:84:b1:ce:db:89:e4:5c:fd:0b:4b:3e:d3:
                    05:2a:0c:f7:a0:b0:34:28:36:26:9d:65:ca:4a:53:
                    7b:0d:b2:03:5e:6a:3b:7e:f3:e0:c4:f3:28:67:48:
                    2a:fe:ef:6f:c4:b5:14:8f:d9:6e:3d:cf:84:1a:51:
                    ac:fb:43:f2:e6:74:52:6e:2e:15:9e:12:92:10:5f:
                    77:c7:98:36:c3:ff:d0:2d:8f:5e:ad:8d:62:ca:f7:
                    f8:87:b1:28:84:a0:99:17:a4:86:ff:ae:a4:c6:76:
                    f6:10:d1:60:23:8b:19:9d:ad:6d:c0:62:17:cb:2b:
                    d4:8d:0c:e0:31:79:57:c4:3a:12:56:9b:7f:20:fd:
                    ef:ad:44:1e:d4:14:00:69:b3:51:20:b3:a5:3a:7d:
                    3a:cc:0e:a2:61:ea:fc:e5:58:a0:9a:da:54:26:d4:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:ED:6C:04:83:F1:2C:35:97:4A:25:47:30:3D:EE:43:C0:E2:B5:A4
            X509v3 Authority Key Identifier:
                keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:cf:69:2a:24:34:36:cb:9b:6b:20:f0:d7:0c:79:14:fb:
         cf:6a:ae:9d:c2:5c:b7:5a:93:42:79:d2:12:7c:c7:29:5d:54:
         c2:2c:1d:49:c6:05:d4:5c:f8:08:f8:d1:fa:bf:cb:d0:0c:2e:
         fe:08:d5:f7:a9:97:59:95:42:46:59:ad:55:99:b6:f9:20:ff:
         80:84:af:f9:3d:ee:b2:4a:68:95:14:1c:86:78:13:b8:99:9c:
         fa:1c:19:b6:3b:c5:49:84:62:38:66:be:05:1b:ff:39:5d:a8:
         3e:b2:c7:b5:0d:c2:ee:a6:b3:35:12:ac:76:a4:b8:c1:c7:00:
         57:58:6d:33:70:dc:e3:a5:dc:c7:02:ca:d3:40:43:33:2c:c8:
         ec:eb:dd:de:24:ea:1a:bd:a5:76:c9:02:78:b6:78:84:2a:58:
         ac:8f:2f:a6:90:e7:56:55:91:1a:38:cc:46:e6:bc:f9:28:23:
         af:8a:f4:4a:3e:57:00:68:55:eb:53:b4:80:d3:8c:9c:9a:79:
         00:9a:6e:4e:4f:ce:76:77:df:7f:5e:f8:a4:43:6e:03:4c:b9:
         7e:a0:10:62:4d:a9:f4:84:8f:51:1f:27:ec:19:25:ae:67:0d:
         3c:a2:41:3b:8e:c4:2b:b6:5d:06:64:bb:06:45:75:30:10:6e:
         dc:36:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:52 2024 by rpki-client on console-ams.rpki-client.org