Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File:                     I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier:          QjnEGsik8az9hHKRJ7V4BdlHUVl6b/9rID/6if0Am2k=
Subject key identifier:   CD:FA:AB:79:44:5C:34:BC:E1:37:07:9E:24:D0:4E:A6:68:E0:81:4A
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer:       /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial:       019368C608D5D6F49F74A26332F5B97B18B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number:          1384
Signing time:             Tue 26 Nov 2024 14:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:29 +0000
Files and hashes:         1: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: LElUxDdktJPW9S/zsz5XhASFokSvE0c5WM7YrU0vLbw=)
                          2: wod9IJxJVpChaZCWnkJo7-bJYzc.roa (hash: uqsAMP0Mw8hUJAtQ+oyzS0FYk8UeBZoUZTO6PuCFr1g=)
                          3: wsSi5LmY7syySz7XZQTOR492a3A.roa (hash: e0mIxpFjae9aAS60OemvViD2kxOMCVB4IF/I02zWLww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:08:d5:d6:f4:9f:74:a2:63:32:f5:b9:7b:18:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
        Validity
            Not Before: Nov 26 14:00:29 2024 GMT
            Not After : Nov 27 14:00:29 2024 GMT
        Subject: CN=cdfaab79445c34bce137079e24d04ea668e0814a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:9c:ee:ab:6a:c2:92:0e:d8:e1:3c:1a:31:
                    d9:04:ab:c0:b0:b5:b4:24:36:84:ea:59:b8:1e:4e:
                    e7:3f:d1:49:06:a0:8c:24:37:98:a3:38:c9:23:50:
                    57:7b:64:64:5d:e5:a1:43:d5:22:fb:50:0c:08:47:
                    dc:7b:e8:a4:7b:4c:92:7e:8c:d7:e7:08:46:d8:53:
                    a6:f4:73:b4:18:cd:25:b5:cd:73:c8:0e:e3:8d:e0:
                    b5:4c:5e:a1:69:06:11:02:96:b8:fe:79:b0:6c:56:
                    fa:18:37:c7:58:f4:b2:5e:dc:c2:7a:f1:f5:d8:0d:
                    35:81:cd:0d:9a:e5:03:2f:84:3f:d2:bc:8c:0e:bc:
                    20:29:60:b6:fa:e6:56:27:4f:5c:57:04:23:a2:0f:
                    63:b5:fb:2e:6b:37:3b:36:00:b3:b4:d0:50:a2:1c:
                    c2:32:7e:41:a6:3d:5b:69:77:79:e4:ab:6f:bd:86:
                    07:5f:c3:68:e0:81:00:a5:0c:1c:51:40:6a:ef:6a:
                    a8:94:07:a0:1c:b0:48:9e:bb:cf:d5:b7:2a:61:16:
                    c6:fa:53:a2:d3:8a:6b:21:65:1d:ce:45:8a:4e:36:
                    9b:bf:11:8d:2a:3f:f8:8d:a6:84:02:33:f3:9d:20:
                    ec:4b:60:c0:4c:8f:4b:cc:f2:03:b3:bf:dd:75:0b:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FA:AB:79:44:5C:34:BC:E1:37:07:9E:24:D0:4E:A6:68:E0:81:4A
            X509v3 Authority Key Identifier:
                keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3a:ff:5e:91:7d:d1:d2:07:bd:94:70:27:39:d0:b6:30:4c:
         fe:b2:ce:2c:cc:ab:c3:44:cf:4e:10:77:e3:85:63:8c:cd:70:
         d0:41:d0:86:86:0b:9d:94:3c:b0:f8:6d:42:1a:e8:b1:53:c2:
         66:cf:22:a7:7f:bc:39:f0:ae:13:fb:61:ce:d1:a0:37:f0:8b:
         da:20:55:48:00:cd:f2:35:39:43:71:1d:65:79:ff:67:6d:5a:
         85:7f:51:77:a3:b3:df:aa:0c:ae:2b:7a:a3:7b:6b:f9:b7:b3:
         1b:f5:26:97:70:2c:93:6b:cc:59:20:fe:e8:3b:49:72:5e:77:
         76:fb:8a:f7:94:82:7e:69:fd:1b:2f:69:4e:96:b4:3f:4d:42:
         3a:2a:1e:43:78:dd:85:c9:a1:c7:eb:b2:54:cd:62:db:58:a0:
         34:08:b7:33:bf:b3:3e:1a:f2:e5:c8:a1:db:3e:42:56:59:2c:
         70:81:4f:0d:7c:c4:44:9b:ab:e6:a7:cc:95:5a:c6:fc:32:3e:
         28:b3:9a:c0:70:1d:07:d8:14:1c:6e:e6:c8:67:d8:3c:c5:a4:
         56:ed:5a:f0:e6:9f:d3:59:f7:8f:bc:55:1c:05:51:4a:2f:a8:
         27:a4:47:fe:5f:db:74:14:e0:5d:e6:9c:80:7b:44:44:b9:2b:
         db:5c:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:00:16 2024 by rpki-client on console-ams.rpki-client.org