Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          32tyVtIws79nof3nys6I5s5xDQR+NL3G/OFGxnZBvCI=
Subject key identifier:   B2:BB:69:3E:6A:D3:0B:96:0F:82:C4:33:CA:61:73:9A:1F:51:A9:E6
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       0193512B6236E7D99BD9D7AAEFACA2DD62B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          0447
Signing time:             Fri 22 Nov 2024 00:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:17 +0000
Files and hashes:         1: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: 9zLATUMAUOPpO9NGeqjA3m6Sasymz88FtL+bakdbHwQ=)
                          2: zNVeuYcfosYiRl_0ABM50taY5Q4.roa (hash: uZBgeuujkq6hf38ZK3Mk/v4c2bTDg/rpKD3JnrwQpuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:62:36:e7:d9:9b:d9:d7:aa:ef:ac:a2:dd:62:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: Nov 22 00:00:17 2024 GMT
            Not After : Nov 23 00:00:17 2024 GMT
        Subject: CN=b2bb693e6ad30b960f82c433ca61739a1f51a9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:dd:e1:0e:16:af:14:3a:7d:82:75:3e:7a:
                    a8:5d:85:63:8e:3e:9a:9c:ef:ae:f7:80:bb:68:68:
                    e1:2b:c7:5a:fd:14:83:27:12:7a:a9:ab:ba:47:c2:
                    aa:a2:4f:2a:e9:31:8f:01:83:60:06:46:c9:56:be:
                    ed:b3:ea:e2:df:e9:60:74:d0:8e:76:26:75:a2:08:
                    d5:aa:5f:bb:27:9d:46:65:f5:9d:c6:6b:10:7f:db:
                    90:38:53:35:15:6e:1e:ad:3e:f6:2f:4e:ee:d4:83:
                    c5:69:75:ab:d6:53:21:e3:f2:67:3f:58:7f:e4:72:
                    d8:ab:28:f9:8c:55:21:1b:59:c5:3f:e7:b3:64:f8:
                    49:b9:db:c2:be:3b:09:bd:4b:98:83:34:05:8f:cf:
                    c7:9b:35:f2:0f:ce:4b:fb:eb:7f:49:88:b8:94:1d:
                    e4:f5:82:46:4c:ee:13:e3:27:36:cc:28:6a:73:8e:
                    28:e2:f9:d2:55:6a:a9:bf:26:ca:08:ac:cc:87:34:
                    9a:07:aa:9d:23:f0:f4:f6:3f:40:ed:16:b8:01:04:
                    6b:4c:8a:5b:11:be:b6:36:8e:c2:46:d2:6b:06:dd:
                    91:9a:13:b6:21:08:1b:b2:12:b3:e9:ae:6e:65:3a:
                    92:0e:25:57:24:22:81:7b:6c:5d:c1:2e:cf:21:09:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BB:69:3E:6A:D3:0B:96:0F:82:C4:33:CA:61:73:9A:1F:51:A9:E6
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:13:cc:f8:d9:89:bd:18:08:59:f3:02:4f:98:00:61:a6:
         4f:6b:b1:3a:d6:0a:ba:bb:0a:a6:8b:d0:e5:67:ea:7d:cd:92:
         88:2e:30:47:2c:c4:57:14:61:17:8e:13:04:d3:09:6d:5f:d7:
         19:1d:e6:d7:bb:30:71:8c:d2:da:59:96:cc:8d:98:fc:0f:cd:
         25:15:a8:df:e4:15:91:77:6a:17:ec:82:e7:77:67:ea:46:7d:
         f6:ff:98:38:25:10:23:2a:36:98:79:44:96:8c:f4:03:3b:a7:
         cc:e6:37:c9:a5:3f:2d:02:b9:dc:d7:33:5f:3b:9b:f2:30:df:
         63:c1:94:5f:ac:f8:02:a2:2b:f6:25:fb:68:72:e3:e6:a8:3d:
         a8:fb:bf:00:5e:d0:23:9c:92:b3:db:3f:ef:8e:39:4c:3d:71:
         5c:70:54:fe:54:db:4f:7f:98:03:83:68:41:59:32:d6:e0:e2:
         4c:44:65:aa:dd:3e:31:85:3b:e9:87:be:9d:2a:73:95:29:a9:
         d2:d5:72:7b:f8:ea:69:48:3f:ec:f5:e8:73:f3:22:95:86:59:
         57:68:65:f7:8e:37:f6:9b:d9:ef:41:7b:e5:92:2f:10:43:f7:
         6a:e6:39:c5:74:cd:61:29:76:54:56:9c:8c:d4:c5:d8:26:ec:
         75:d7:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:10 2024 by rpki-client on console-fra.rpki-client.org