Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
File:                     SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft (raw, json)
Hash identifier:          MKhgQ4DJd8rTs7DFybCGaPRzDFioMHnfjQ2NAi16Gys=
Subject key identifier:   48:1C:02:72:1D:15:20:C5:08:45:D0:68:64:6D:E6:45:16:9C:F8:2B
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Certificate issuer:       /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial:       019368FD044FB0E134CB30C4353974C5A2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
Manifest number:          12BB
Signing time:             Tue 26 Nov 2024 15:00:32 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:32 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:32 +0000
Files and hashes:         1: SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl (hash: PXBiN88JN8k/yfk+KKqjSqOn8S9hnLfW4v1ypQFPjCQ=)
                          2: W8VDKeAy2osQ0ZGL6fMahX-LEfY.roa (hash: FbgzQF6i0XaPz0OWaLZUUe/Jp4kc2WdYG4vu+rq/ijg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fd:04:4f:b0:e1:34:cb:30:c4:35:39:74:c5:a2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
        Validity
            Not Before: Nov 26 15:00:32 2024 GMT
            Not After : Nov 27 15:00:32 2024 GMT
        Subject: CN=481c02721d1520c50845d068646de645169cf82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:37:3a:85:65:be:ee:47:20:fb:b1:42:44:9d:
                    26:b9:c4:1d:be:ea:89:b0:1a:ff:47:0d:67:40:7b:
                    29:d1:44:fd:b6:b5:0d:14:38:35:24:f4:54:f7:96:
                    98:b8:66:22:7f:f1:06:de:5b:1a:57:9a:c6:55:0c:
                    be:7a:04:cf:bc:8d:9b:93:45:b1:eb:8d:2e:37:d3:
                    66:27:9e:e5:c9:bc:54:d5:52:41:c6:33:bc:28:25:
                    f2:22:43:40:35:7a:01:2e:25:d2:b8:5c:1f:ea:f4:
                    11:6a:95:fa:b1:42:06:5c:31:50:9c:d9:4c:aa:e6:
                    93:d7:08:db:5a:c6:1e:cb:23:83:d8:cc:eb:a0:44:
                    aa:92:c2:82:41:02:e1:1a:47:c9:df:1d:09:72:d4:
                    c9:65:96:e9:f3:85:f5:7f:a4:56:e7:35:b3:b1:4d:
                    86:27:2b:7f:17:45:7b:d6:f6:bf:2c:52:ad:41:10:
                    eb:1b:78:a7:b1:30:11:64:d9:9a:b8:71:4b:64:77:
                    fb:5c:2c:a0:37:2f:25:88:e9:c3:f4:4c:3f:71:b9:
                    82:40:33:d5:a2:7a:ad:c1:c6:ec:56:c1:3e:f0:5c:
                    9f:59:d5:e0:83:45:06:f8:46:b7:78:b3:10:35:d4:
                    f1:68:b7:6a:2f:0b:b0:81:6a:40:4c:9e:fe:41:d5:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:02:72:1D:15:20:C5:08:45:D0:68:64:6D:E6:45:16:9C:F8:2B
            X509v3 Authority Key Identifier:
                keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:74:23:34:56:6a:b8:12:03:27:05:39:25:42:d0:ac:f3:
         3a:03:10:0c:da:be:0a:b6:10:1f:62:47:b9:2f:d4:b0:42:da:
         8d:3d:aa:04:06:c8:0f:36:e5:d2:61:5b:01:48:94:29:41:6e:
         f2:ac:b0:68:a2:41:16:d1:7b:6b:3f:74:23:74:4e:29:0f:8d:
         f8:38:95:9f:4a:11:64:0e:ee:58:19:b3:6f:24:ac:19:15:c4:
         4c:9f:de:f1:ac:10:2f:f2:13:37:73:c4:13:63:5b:97:86:06:
         8a:b7:f2:8a:60:ab:e5:e0:be:49:0c:6d:e2:c8:fb:e9:3a:db:
         16:22:b5:5c:14:52:57:37:a6:88:f3:09:ed:9c:c8:a9:9c:80:
         ea:0d:ff:4d:5d:86:84:49:f5:59:14:4a:00:8c:89:94:ed:78:
         c2:ec:50:d8:f2:96:86:74:92:b9:e9:d2:dc:a0:14:f5:7d:2e:
         65:33:29:cd:d1:36:44:4d:a8:ef:57:12:20:d2:e1:f2:5a:fe:
         f6:3c:44:e8:84:86:75:84:40:03:99:86:13:3b:55:db:fc:71:
         26:92:05:5c:c0:70:9c:f1:a4:17:82:13:f6:46:23:9a:ba:7b:
         3d:1c:e4:21:1b:a6:f5:90:f3:c2:81:b6:24:3a:07:2e:83:4c:
         ec:bf:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:00:15 2024 by rpki-client on console-ams.rpki-client.org