Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File:                     mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier:          58xbOkruAqNwarfiNs6A51rvTt3JEQKlfjfZdFnOSLE=
Subject key identifier:   E0:E0:67:5B:51:18:AB:28:C0:C6:15:B0:E5:EC:22:CC:47:45:47:06
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer:       /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial:       01935162BEC118DFF89A525398D77AEB6FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number:          04CB
Signing time:             Fri 22 Nov 2024 01:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:46 +0000
Files and hashes:         1: 1QYdW1CUi3lP5JgZnnCz5Vw4Y6A.roa (hash: pGKES0Uz6KNO8UHtbUeKIhZvH7HwIvArEwYhURIS8NI=)
                          2: LmQ5QFvr12louAOsisdeK0Wn8X8.roa (hash: 0YvaypcJiCqC8Pr2sLafMCRqx1mRweLEsMkJOI/U6N4=)
                          3: MmuQlKUnQwLbZbYCrSiguroi58A.roa (hash: EtsX9ZXlhvaDxLhkSFcLbf0KAVpTDmjaRIoEmPeQEnE=)
                          4: bsRLm6ishuGZZLj5rwlAxXyDNwE.roa (hash: F/a3bpJIbymN+L760hZ7eBsLKowBc4bgezkZlmHGkWo=)
                          5: jDFCxnkLzS4FMFKisncoKIYKliw.roa (hash: hs9Ep3SwMRgsMB3vq1Cmd1Wk8EAzo0RFuiqoaA6PdBU=)
                          6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: AqlZJNsjUXsgh8hcXUisUANrxS31apZON+vMP2HO+p0=)
                          7: o25xEG7aL65n1z8XBE99M3Bf-_g.roa (hash: ohNGWjjtm1xdjaCPM1oQwUFOJ4eJ49JtocASO0nJkfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:be:c1:18:df:f8:9a:52:53:98:d7:7a:eb:6f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
        Validity
            Not Before: Nov 22 01:00:46 2024 GMT
            Not After : Nov 23 01:00:46 2024 GMT
        Subject: CN=e0e0675b5118ab28c0c615b0e5ec22cc47454706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:23:d2:4a:0a:05:5f:6b:6b:09:19:5f:8b:
                    89:65:6d:e9:f9:9c:65:f9:7c:2b:9e:8d:fe:d7:5e:
                    e7:41:27:4f:06:ed:00:00:49:a9:5a:1f:15:f8:bf:
                    57:fc:7f:23:1b:59:c2:d1:74:15:d9:e2:97:94:50:
                    c9:48:ae:86:66:9e:ef:db:7c:53:95:97:8b:1a:12:
                    ca:ec:4c:a1:ca:c0:9b:2e:82:29:31:ed:84:fd:df:
                    99:3f:87:fa:99:fa:58:80:08:b5:93:9a:7a:f1:f0:
                    f9:d3:a4:ee:59:3c:57:da:ba:fd:d2:1f:85:cc:35:
                    d8:47:ee:f0:2c:1b:d5:8c:d2:a4:8b:e2:88:f9:fb:
                    39:f5:45:94:0c:01:70:fd:68:c8:63:f3:0a:2b:64:
                    4d:68:16:20:f2:cb:a0:48:cb:d2:00:0b:40:82:6f:
                    e8:79:77:1e:42:3c:c7:af:67:9f:c1:93:5f:3b:73:
                    e3:6b:ec:01:e1:d4:3d:d9:ba:13:42:7e:7c:e2:a7:
                    99:d9:76:f9:2c:ff:fc:d1:ad:ef:09:50:15:e0:f6:
                    89:61:53:6e:c6:c8:19:6e:16:3f:a6:b3:aa:f1:da:
                    30:f3:2f:b9:5a:37:a5:be:96:61:e7:ca:82:4e:b2:
                    23:0c:82:69:93:5a:74:93:47:b3:d2:ff:03:3e:bb:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E0:67:5B:51:18:AB:28:C0:C6:15:B0:E5:EC:22:CC:47:45:47:06
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:94:8c:cb:77:ea:19:91:02:b8:03:01:c4:84:0f:05:ad:
         04:61:f3:82:8b:88:e1:96:57:87:f6:8e:8c:dc:2d:21:e1:40:
         ab:a4:71:3e:78:1d:83:57:88:d5:ec:0d:6e:ea:dd:37:e7:95:
         bd:54:a2:db:f8:7e:39:19:2d:17:2d:53:e3:64:05:60:db:aa:
         f6:bd:0c:01:31:07:c2:e1:f3:35:93:68:54:3e:bf:2e:b8:91:
         be:38:ef:87:b9:21:13:b7:a2:46:d2:8d:89:3a:22:fb:9c:fa:
         0f:2e:e4:d9:4b:72:c9:9b:9d:4f:26:ab:fe:2b:8d:dd:c4:23:
         ed:ad:55:28:8b:8d:c0:0d:d5:25:dd:04:33:ec:2a:95:27:88:
         b8:0b:c3:e0:ac:91:49:e0:62:f3:e3:a2:bd:de:fc:df:7d:18:
         f9:35:01:93:ba:c5:e3:2a:48:57:24:d9:8d:52:31:5b:86:14:
         1e:75:75:88:19:de:cb:c1:fc:10:3d:a0:45:37:cf:31:49:de:
         1f:4b:21:56:43:3a:f8:fe:d3:d6:24:7f:40:8b:98:3d:de:60:
         58:f3:e7:fc:d3:46:d5:30:ee:3f:b3:4f:af:ab:6b:67:92:67:
         6d:78:3e:53:97:c9:01:08:e1:6d:91:6a:e9:42:66:06:a0:41:
         8b:1c:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:38 2024 by rpki-client on console-fra.rpki-client.org