Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File:                     r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier:          j7eNTy0oFbY1e165zP8NioGDrDY+cjH9qllKY7tEA0A=
Subject key identifier:   B8:FC:8F:D6:12:86:42:0A:32:74:E5:38:B5:05:25:21:94:37:D5:E0
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer:       /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial:       01935351146D8EE36EA5E67BDA7F233F248E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number:          0309
Signing time:             Fri 22 Nov 2024 10:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:42 +0000
Files and hashes:         1: EbwR9JA4SDam4UXqbCqw_6cZbjo.roa (hash: Ty82QmSeeq+OzywETSVJFwNVNCoUH0+Wa4syD26gNEo=)
                          2: fLBUbre_tBOKpaBgj8NQayTpAGs.roa (hash: QElFa5vh49nT8ewppz4g6LuYyh4105WXU/GmnLryLx8=)
                          3: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: //fPihO2vRLESvSTb1FZ2Qe0Ba8ajlT/O/MSbvb/1Yg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:14:6d:8e:e3:6e:a5:e6:7b:da:7f:23:3f:24:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
        Validity
            Not Before: Nov 22 10:00:42 2024 GMT
            Not After : Nov 23 10:00:42 2024 GMT
        Subject: CN=b8fc8fd61286420a3274e538b50525219437d5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:40:c6:af:a1:6d:1c:b6:ef:39:2d:cc:c3:
                    09:49:d1:ba:f6:0c:1f:d0:d4:eb:bd:96:63:a5:ad:
                    b1:75:6e:5a:c1:00:27:15:e8:96:42:c3:f2:28:31:
                    ba:ea:16:37:f6:42:7a:0f:bf:44:5c:eb:15:de:76:
                    26:e2:5a:f8:b7:ac:eb:7a:6b:cb:5e:32:5f:f6:64:
                    4a:7b:82:cd:3b:ea:f1:ce:bf:19:f2:07:93:68:63:
                    aa:a7:57:63:ec:8a:6d:35:3f:79:53:fe:7b:44:9e:
                    ea:fb:d3:ff:96:5a:41:f6:a7:b4:81:9d:aa:16:05:
                    12:ee:89:85:41:f3:de:1c:44:72:6f:79:85:bd:47:
                    af:a9:e6:40:c5:de:6b:0c:19:32:e0:26:f9:5f:09:
                    6c:18:8a:5a:53:50:90:2f:66:38:7d:5c:da:63:66:
                    ff:b8:54:a8:00:ab:cd:c7:82:d8:2b:e7:11:53:e7:
                    25:ce:09:fd:69:8f:96:63:2e:ae:08:ca:24:e5:f3:
                    16:85:f4:c9:ae:4e:85:10:a3:6b:8e:4e:21:2f:29:
                    2c:3c:d7:1d:e0:b4:29:99:e8:67:7f:eb:23:40:81:
                    8f:f2:b2:db:29:7d:e3:16:39:ee:17:9f:65:97:19:
                    80:54:c3:94:9c:e8:52:d8:da:a4:e6:68:ae:6a:9c:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FC:8F:D6:12:86:42:0A:32:74:E5:38:B5:05:25:21:94:37:D5:E0
            X509v3 Authority Key Identifier:
                keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6e:43:e7:3c:c6:a0:09:31:f1:77:d6:5a:f9:d7:c3:79:ff:
         3f:80:2d:42:58:70:b0:df:30:1b:95:8d:37:f9:6e:fb:8f:88:
         61:30:e5:7e:59:54:7c:b1:42:53:45:11:78:65:b4:85:1e:67:
         8f:41:df:ab:a4:01:c0:05:6c:d7:9b:bd:fb:70:f5:3a:22:cc:
         1c:12:5a:cc:fd:34:39:92:cf:c0:ff:d3:35:6d:0f:c7:0b:8c:
         8e:71:e9:ff:3b:1d:0e:cf:59:07:8e:3a:53:3d:ab:00:cc:fc:
         e6:fe:93:8e:73:60:75:08:5b:ec:7b:2a:14:74:94:e1:c1:e8:
         6f:63:1c:8a:a3:7e:2a:96:87:2c:b9:4b:d6:40:b9:5d:d3:6d:
         9e:18:b3:ac:b4:9d:ec:3c:09:b0:83:15:08:b4:41:55:f9:97:
         8e:31:78:e3:72:06:2a:7a:31:f3:dc:cc:1a:d5:10:9c:d0:14:
         df:39:01:3a:e4:8f:d4:d3:11:2c:bd:84:4a:dd:c4:69:5d:aa:
         88:e0:c5:a8:cd:2e:d7:c6:eb:0c:9b:06:5f:50:f9:d3:1b:5d:
         90:3d:2d:37:6a:e3:66:f2:f6:7e:16:e9:00:81:a1:85:1b:8a:
         6d:1c:95:3b:c3:a4:f0:b9:50:cf:02:b1:49:d0:60:be:09:a1:
         ff:d3:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:57 2024 by rpki-client on console-ams.rpki-client.org