Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File:                     aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier:          7fRddaDpppzJoHzGS/YoEMIe0zPQcM6Tavc6mWlaY+c=
Subject key identifier:   1B:E5:19:FE:6C:CA:34:66:0A:F2:12:F1:D4:5B:DE:AC:09:1B:40:EC
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer:       /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial:       019356893049F99FADADA9E73E9A74AD90D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number:          1252
Signing time:             Sat 23 Nov 2024 01:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:51 +0000
Files and hashes:         1: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: n2qHD000hn4D1ML7hncWz3DGgxTydoW/YcZhYx2U8HQ=)
                          2: vahYQiIJRc4iXB-AYGMHx9PnP0w.roa (hash: 8WEbRmzg7ZtqhQ0oz9Y/Ixno+S4zG7fMNLcdlT+sQU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:30:49:f9:9f:ad:ad:a9:e7:3e:9a:74:ad:90:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
        Validity
            Not Before: Nov 23 01:00:51 2024 GMT
            Not After : Nov 24 01:00:51 2024 GMT
        Subject: CN=1be519fe6cca34660af212f1d45bdeac091b40ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:2c:fd:68:75:44:62:b0:74:4b:45:62:f0:
                    0e:72:7f:6a:91:7b:6f:ee:49:69:8a:6e:8d:24:1b:
                    d8:1d:d6:31:85:c1:ca:d3:be:4e:85:6b:cb:6a:15:
                    62:df:08:6a:e5:8d:81:e0:74:be:e2:f6:4b:7c:af:
                    c2:7d:9d:cc:00:f7:9a:2e:a8:24:42:00:a8:72:86:
                    fa:fc:e8:4d:90:6f:e4:3a:2c:ad:d2:8c:d6:a8:19:
                    c2:25:18:ea:84:09:1d:28:c9:45:63:40:92:82:e5:
                    c8:c6:6c:16:74:9c:da:f6:34:b6:b9:12:83:0f:23:
                    52:7b:48:b4:63:e5:bf:cb:8b:c1:8a:9f:44:a8:c8:
                    1d:65:b3:3e:d0:81:0f:50:fb:1d:9a:a0:4a:f1:bd:
                    51:01:13:a2:6b:fa:d4:bd:e3:b5:79:75:38:76:75:
                    38:de:ff:f6:b0:43:e8:23:88:90:7e:7b:dd:c9:fb:
                    25:54:de:b4:05:b0:f6:cc:6c:23:09:e6:28:96:89:
                    37:67:a4:2d:75:4b:b0:a6:0a:95:6c:df:95:b0:5b:
                    48:82:fa:de:4b:b9:6e:8a:1e:0e:41:0f:ea:4d:52:
                    30:9d:31:6f:a8:94:35:2b:23:86:3c:ae:b0:85:74:
                    e7:09:9f:72:05:e4:e8:7b:75:56:3a:50:a2:2a:de:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:19:FE:6C:CA:34:66:0A:F2:12:F1:D4:5B:DE:AC:09:1B:40:EC
            X509v3 Authority Key Identifier:
                keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:05:2b:5f:10:a7:58:2c:26:65:ac:e3:87:ed:60:8d:7e:
         07:80:14:50:4f:1c:40:9e:c1:fb:0c:01:90:b1:9f:db:04:09:
         65:6d:f2:8e:3c:df:a0:ea:9f:1b:f0:0b:3c:21:56:5e:6f:59:
         27:f1:49:32:d5:b5:28:d2:44:33:cc:05:c0:52:94:c0:4c:89:
         14:d4:c1:11:e5:f7:59:51:5e:e3:09:31:cb:bf:42:81:78:be:
         54:83:0f:71:77:39:c0:35:b6:23:a0:10:77:4d:7e:81:1d:86:
         aa:a2:84:c2:89:64:b0:09:29:60:9d:b1:a0:a2:08:77:05:4a:
         3f:ca:ab:f7:56:9b:76:eb:33:76:5a:5f:a8:33:6b:ec:20:1b:
         51:4e:ee:9d:47:ed:48:27:a4:45:c3:b0:4b:94:0f:5f:ad:89:
         d7:f0:35:1a:60:e7:84:ae:ee:d4:d7:e6:ff:5f:f6:7f:a8:a0:
         77:f9:12:de:99:68:df:c4:5a:f1:9d:42:60:c1:9a:bc:e7:c7:
         22:d6:8f:d1:bc:e8:63:0f:cd:73:95:58:12:8b:8c:dc:89:7b:
         48:fc:18:27:91:76:17:b7:70:9f:05:87:b5:ac:b4:0b:1c:8f:
         6b:17:62:99:90:7d:c0:0e:f7:67:05:ca:1c:69:c5:77:fa:5d:
         5f:e1:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:27 2024 by rpki-client on console-fra.rpki-client.org