Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File:                     G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier:          2Z4+91c40XoB/HRBrwjqCsO/ZLmFxpY+1sB9K39OjBE=
Subject key identifier:   F3:FA:89:D6:ED:31:B7:3F:DE:72:C3:CE:3F:C3:8C:FD:34:F1:B7:C1
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer:       /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial:       0193587907956C49C453276AA0FEE09C9D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:02:26 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:26 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:26 +0000
Files and hashes:         1: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: CnpFsK/VMlPwwwUC5AAKZTYm3vIbQ6QH4zzFelEC9TY=)
                          2: y02pMvabXiUHXfszzuw4tsQ9f3Y.roa (hash: TnjAyIua6I2FKkaCX+4CimLwOool++Dsd02yEVGqYjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:07:95:6c:49:c4:53:27:6a:a0:fe:e0:9c:9d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
        Validity
            Not Before: Nov 23 10:02:26 2024 GMT
            Not After : Nov 24 10:02:26 2024 GMT
        Subject: CN=f3fa89d6ed31b73fde72c3ce3fc38cfd34f1b7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:24:ba:6a:0b:b7:f1:22:a2:d0:48:6d:aa:
                    75:70:fe:94:d4:48:c7:31:2f:b2:1c:10:d8:be:6e:
                    8e:45:a8:9e:2d:9d:c7:53:88:a9:02:3b:0c:99:f2:
                    56:5b:19:83:8f:72:4a:6b:25:3a:fa:d6:c3:3b:3d:
                    cf:30:9c:8d:59:6c:72:6f:89:d1:63:e7:84:a7:8a:
                    4c:5e:47:fa:a0:19:5a:fb:03:fb:a3:fd:58:8a:42:
                    83:4a:76:09:0e:67:e6:0e:00:b2:fb:40:b0:ee:4f:
                    32:c9:0d:6e:ea:b2:af:1f:de:b0:c3:5b:c5:35:42:
                    67:ea:28:8c:f8:54:87:b7:89:b9:dd:dc:df:62:4a:
                    f2:55:11:c3:73:b1:0c:da:ed:03:44:ef:d3:c7:89:
                    c3:01:b4:fc:aa:54:e3:d9:fa:27:6a:0a:0d:1a:5c:
                    14:18:35:72:24:93:a0:dd:54:6e:fc:4b:39:8e:63:
                    6f:79:da:d4:02:72:9b:dc:e6:80:f6:24:0e:56:05:
                    ac:d1:9c:fe:a3:02:59:53:ba:0d:1a:d2:6a:f7:51:
                    27:03:b2:21:89:65:8b:2c:8e:ba:84:8b:ef:5a:26:
                    d1:64:a2:bf:b3:a6:20:d4:46:80:55:02:36:12:08:
                    d8:44:39:59:e3:d0:8b:7a:04:32:ad:1d:c9:38:4b:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FA:89:D6:ED:31:B7:3F:DE:72:C3:CE:3F:C3:8C:FD:34:F1:B7:C1
            X509v3 Authority Key Identifier:
                keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:39:16:d8:d0:34:28:b0:ad:44:c5:4d:f4:bd:4b:3b:bd:
         75:18:d8:18:df:75:45:9b:a3:cb:ea:19:da:c0:63:cd:84:41:
         50:88:6c:ad:3a:d9:00:67:1d:be:bd:56:85:0b:87:ab:9a:ec:
         6b:be:30:42:aa:36:dd:8e:a9:6c:0a:c4:0d:53:2f:e2:96:d5:
         93:a1:e7:4b:5d:1e:1b:74:38:1a:05:68:80:5d:3f:49:d7:d4:
         33:3b:67:f3:db:6d:5b:e9:f0:e1:b8:ed:f7:ff:9a:85:e0:4d:
         80:3d:30:dd:85:e0:de:78:98:bc:d4:22:a1:af:5d:5c:e8:49:
         fb:a0:66:46:10:48:56:bb:c0:00:8b:04:94:e0:38:00:f6:2e:
         04:72:38:45:96:87:7a:d8:bf:76:8a:31:d2:f5:33:46:c3:1e:
         58:6c:be:7d:ab:e3:95:e5:84:1f:6b:3e:98:56:34:06:82:c3:
         0d:18:d4:6d:74:f2:34:4a:3e:71:37:e8:12:37:41:ec:c6:ca:
         ee:78:f9:ec:17:e9:81:a3:4f:57:12:d9:ca:20:f7:0d:30:9d:
         d7:78:06:80:89:2c:ad:77:56:76:b1:2e:59:21:64:a6:0d:a3:
         30:b6:75:47:5a:ff:8e:0e:3a:41:a9:46:6d:53:e7:35:37:dd:
         20:48:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:18 2024 by rpki-client on console-fra.rpki-client.org