Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File:                     rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier:          zhx7Y3EdM2+f3MTSxe+cLYTgW/nyjkWhA9PuZC2IxvU=
Subject key identifier:   EF:6B:17:53:81:FC:7D:BF:97:C0:59:EF:03:08:F2:1F:59:EF:B2:5A
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer:       /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial:       0193568A86D70565321CBBBF0366EFE47BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number:          0A42
Signing time:             Sat 23 Nov 2024 01:02:19 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:19 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:19 +0000
Files and hashes:         1: azEF5lHm8WbAh50Tbo-VyXjCc5U.roa (hash: ZQSC/3a6gURic1+6r8rttLfUvVdVVAm6qlXUE0aZkQw=)
                          2: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: d9n4EROz27Q01tL0Qyul7y7r2rFmGUUv1Xj4XXoyPfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:86:d7:05:65:32:1c:bb:bf:03:66:ef:e4:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
        Validity
            Not Before: Nov 23 01:02:19 2024 GMT
            Not After : Nov 24 01:02:19 2024 GMT
        Subject: CN=ef6b175381fc7dbf97c059ef0308f21f59efb25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:ac:62:03:2c:95:15:3f:c3:fb:fd:75:e8:
                    94:c9:e8:33:9f:33:05:c4:31:2f:5f:83:cb:14:09:
                    78:bd:44:28:cd:eb:75:8f:d8:78:a4:50:79:56:58:
                    d9:4b:0d:f0:57:04:82:7a:fd:5c:37:3d:0f:2c:bd:
                    db:a9:04:27:37:22:b5:6c:96:c8:f7:af:07:09:26:
                    ad:ac:8e:e9:19:48:f0:c9:95:01:5f:cc:04:d7:d3:
                    8d:42:a8:26:74:30:b5:5b:72:fd:6e:7f:e8:a1:ba:
                    7e:44:f2:80:a3:2e:c1:39:b4:ed:3c:3a:f0:15:ec:
                    34:08:e6:d3:6d:18:11:46:ad:55:a7:c2:f8:e4:ce:
                    96:8d:06:bc:13:f4:54:91:d1:c6:c7:f5:5e:15:9a:
                    d9:d7:a0:fe:59:64:1f:48:7d:69:b5:1c:56:0f:e4:
                    17:03:76:03:76:c4:a0:32:a1:a8:02:7f:2e:76:60:
                    68:dd:9c:5b:e6:b2:ed:47:d5:7a:ff:e3:7b:9b:d5:
                    c2:ba:d7:30:75:cc:1c:97:35:f1:36:cb:e1:8b:3c:
                    17:f4:0d:31:17:2e:71:8e:62:f7:36:55:53:02:60:
                    71:d1:85:e5:eb:c3:8f:d2:a0:5d:ef:df:34:78:bd:
                    88:23:0c:e1:62:c1:93:ba:32:7f:e8:87:9e:64:91:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:17:53:81:FC:7D:BF:97:C0:59:EF:03:08:F2:1F:59:EF:B2:5A
            X509v3 Authority Key Identifier:
                keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b7:f2:53:21:ef:c0:48:a4:fd:69:c0:a0:a0:5f:8d:9f:6e:
         a6:c9:65:20:9b:02:56:05:08:c8:7f:b0:1c:fe:5c:fd:71:b0:
         cd:5f:3d:0c:0f:95:99:e5:5d:92:4e:9f:f8:ae:e5:59:77:1d:
         29:41:7c:65:f2:8c:e2:dd:84:72:93:89:b3:af:d3:4b:12:dd:
         7e:81:60:20:1f:62:e3:ca:66:71:8a:94:33:26:bf:a9:b6:7c:
         18:8f:4d:8e:01:68:6f:64:9a:d5:03:81:7c:76:64:24:36:47:
         d6:e9:3e:6c:ec:e1:46:3a:66:bc:38:19:ae:74:ec:4d:79:78:
         af:64:c6:c0:f8:ca:38:78:57:82:0b:c8:81:92:72:62:5e:a7:
         76:d4:d8:df:cc:83:a5:6e:9f:6e:3a:b3:90:cf:93:36:f3:4b:
         bc:44:bf:d6:96:8a:72:26:ae:31:b7:e9:61:ff:fe:51:62:4f:
         e3:9e:12:fa:c6:be:b3:9b:83:1a:66:51:e3:fa:6c:8f:ae:f2:
         1d:bc:d2:56:f6:2e:4e:5c:70:67:48:d7:dd:ba:2c:a1:2e:3d:
         8b:2e:75:cf:bd:e1:ba:a3:3a:ba:02:40:1a:2e:19:22:2b:33:
         72:ab:32:97:c8:c5:0f:c8:07:5c:6a:c6:bb:7e:ff:66:33:78:
         1d:fd:53:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:02 2024 by rpki-client on console-ams.rpki-client.org