Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File:                     vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier:          TfP5Ns1TVPHZQ9Jye8W88byRGumgNm9dYAWIbvwg7Oc=
Subject key identifier:   26:67:A1:9E:98:21:22:79:91:D1:B6:81:91:DE:D3:80:80:C6:E6:06
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer:       /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial:       019369D999852BB5D08D491B81D05EA341A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number:          0AAB
Signing time:             Tue 26 Nov 2024 19:01:28 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:28 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:28 +0000
Files and hashes:         1: 7CAtnZN2kCaYk4TfY7S3R7RT6EM.roa (hash: 4EboVZRmkpv6QEjrGYeLzLE8DF18L1ltC5dRQvA7YDc=)
                          2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: 3zLcs8OSGVIC7iPKe1zdtCd4UtXr4/OYP1Fapy2g8fM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:99:85:2b:b5:d0:8d:49:1b:81:d0:5e:a3:41:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
        Validity
            Not Before: Nov 26 19:01:28 2024 GMT
            Not After : Nov 27 19:01:28 2024 GMT
        Subject: CN=2667a19e9821227991d1b68191ded38080c6e606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:ae:2f:e7:d6:ab:bb:0d:84:76:e5:0d:2e:
                    81:2e:9c:a3:46:25:ad:cd:9a:33:e0:51:7a:27:4d:
                    30:f7:06:34:35:a6:3e:20:c7:ea:54:a9:b7:bc:2b:
                    3c:d7:ca:8c:57:a1:07:de:f9:90:1c:8f:b7:9b:73:
                    60:f9:f1:d7:90:f7:92:30:30:62:48:22:9c:8e:3c:
                    90:b2:b0:02:64:9c:7a:5c:50:98:28:6c:0b:4b:04:
                    04:48:5e:d3:d4:64:24:7c:66:02:4e:4a:63:4d:72:
                    f9:1f:48:c2:69:3c:60:e4:27:65:d1:da:4e:7c:77:
                    4f:e9:6f:a2:68:53:94:f4:38:fc:d0:cc:d5:6f:cf:
                    2a:21:95:8b:2f:fa:a1:5b:8a:b1:db:87:e7:8e:c2:
                    6b:64:bb:5c:e7:d0:8b:4e:a6:d9:16:14:6e:36:b3:
                    37:76:a5:43:ad:29:e5:36:54:98:ff:d8:9c:5b:b9:
                    cf:07:24:7f:ae:b8:b4:31:1e:35:c6:b5:45:83:42:
                    a1:60:3c:56:b1:47:f9:a0:ce:75:ff:51:ac:c4:2b:
                    32:cb:ca:85:fe:6e:2d:31:5a:8d:8d:c6:bd:cb:e6:
                    d0:6c:d0:66:93:4c:73:85:16:fa:fa:13:98:9f:b5:
                    6f:c4:24:7d:e7:02:05:04:d4:4f:2e:16:ba:04:3e:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:A1:9E:98:21:22:79:91:D1:B6:81:91:DE:D3:80:80:C6:E6:06
            X509v3 Authority Key Identifier:
                keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e9:61:fd:ab:82:b9:7a:21:d9:56:3f:58:bb:03:fb:da:f9:
         fc:25:8b:c1:a2:6f:59:ee:8e:e3:ad:b5:11:00:d3:ae:64:61:
         7d:9d:48:fb:73:55:b1:74:8e:63:c9:18:b1:95:46:92:a9:c5:
         0c:8d:1d:13:6f:cf:b8:98:a4:1d:26:35:70:6a:90:67:f3:44:
         7d:3c:0f:1c:70:32:28:c5:34:53:fc:ad:6b:bf:bc:97:2d:17:
         60:5b:7b:82:73:85:78:03:a9:47:44:cf:b4:68:67:af:27:5a:
         72:59:7d:56:da:92:5b:3d:de:06:d4:20:3f:8e:23:88:82:b5:
         44:63:3f:c6:76:24:a3:17:4f:78:7d:8b:89:00:d3:b1:42:fd:
         2c:1e:93:c5:d0:83:45:59:67:38:e6:d0:33:a1:6c:0a:68:44:
         b5:e0:95:a4:82:12:4b:88:16:3c:11:96:1c:98:c2:6e:fe:d8:
         d0:ec:84:43:a1:2b:11:26:d4:f0:60:62:2b:ae:58:8a:b5:50:
         7d:37:32:d8:2c:51:6f:07:c5:c2:ec:4d:35:f6:99:47:44:57:
         1f:c9:98:d1:77:f6:3f:a5:a5:29:54:9e:b9:6c:46:88:e3:87:
         f6:37:f3:db:60:aa:9b:ae:d7:e1:6e:f9:9e:da:1d:4d:41:af:
         18:89:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:19 2024 by rpki-client on console-fra.rpki-client.org