Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File:                     _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier:          A7SNPuYnv9GUrZOOPc1MKV1Y/DP7w6AoGKrx4Yo3BAk=
Subject key identifier:   A7:A6:73:E5:4E:C0:B1:7B:11:42:00:D0:8E:9E:14:05:8A:98:86:0C
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer:       /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial:       019352AC443067FDDC1058B6E3D9B9722138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 07:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:41 +0000
Files and hashes:         1: WfS7bea6SwkcZ2Vzm9bXyrtXPuM.roa (hash: KZ7kZIg6iwv83zF7zxXmG+RRGYXUxs8hxFQh6JvYz00=)
                          2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: ifeZfArald2Qgc6bRt8DK+/x63B1hF7TTQ3RZuYifL4=)
                          3: wcRPz9jhL3-KwlMfnQblijqrGgU.roa (hash: LNDukXa+yYpwCT6lB4B6dklKt1cevYtsLSQWXQw1l6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:44:30:67:fd:dc:10:58:b6:e3:d9:b9:72:21:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
        Validity
            Not Before: Nov 22 07:00:41 2024 GMT
            Not After : Nov 23 07:00:41 2024 GMT
        Subject: CN=a7a673e54ec0b17b114200d08e9e14058a98860c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:1f:ac:02:49:3c:bd:a1:86:da:56:70:d5:
                    7c:a8:6d:61:5f:cc:cc:c7:6f:83:55:4e:1d:82:b9:
                    4f:6e:50:95:20:dd:d1:99:db:a3:80:98:10:76:00:
                    05:00:c4:1f:32:5a:aa:70:71:98:f4:13:d4:17:51:
                    1d:b0:f5:84:f0:34:46:5d:46:aa:8c:8b:8a:e8:1b:
                    61:9b:99:f4:3a:70:32:6b:93:d9:00:32:bf:49:0f:
                    7c:aa:87:60:4d:34:5d:0d:e1:2a:c7:38:c7:fc:37:
                    0d:55:f4:e3:62:0d:cf:7f:f3:b3:38:d7:7b:05:1e:
                    f2:9c:ba:b0:54:7f:89:d4:ae:01:9f:86:b9:ac:5f:
                    62:34:00:c1:25:f5:c4:65:a4:30:4a:6c:45:3a:63:
                    06:6b:ad:a9:4d:c2:9e:e8:6f:c4:dd:d1:6f:ab:12:
                    da:61:0b:a6:2b:5d:09:49:44:57:0b:98:a9:c4:64:
                    7f:5c:57:7e:50:8a:40:0b:30:61:7f:79:17:38:98:
                    98:13:aa:a9:f7:c3:d6:3a:8e:cd:63:1d:34:71:7b:
                    62:0e:31:6b:21:d0:0c:aa:74:3d:f0:41:4f:a9:63:
                    d2:b3:47:b6:9c:fc:1a:27:e8:71:a9:8a:95:83:54:
                    9a:92:b5:19:70:b6:eb:88:11:a0:b8:a5:2a:04:f4:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A6:73:E5:4E:C0:B1:7B:11:42:00:D0:8E:9E:14:05:8A:98:86:0C
            X509v3 Authority Key Identifier:
                keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:d5:b6:58:78:7b:81:02:ed:42:40:5b:97:17:bb:46:54:
         fb:33:8a:7c:cc:8c:f5:ba:bc:45:c5:bd:67:f4:14:da:e1:a5:
         3e:67:b7:99:55:f0:d6:dd:61:cc:28:5d:0c:f5:75:7a:c2:ec:
         3e:15:39:d1:37:82:88:f9:a3:87:aa:a3:02:7b:cf:b8:09:56:
         a0:9a:54:0c:f6:0b:b7:15:6d:3d:80:55:28:de:44:6c:f1:9c:
         b7:db:86:92:87:af:d4:5a:19:03:8d:32:9a:40:00:b7:47:04:
         46:96:ab:0b:45:7e:03:69:b6:3e:0c:a5:8b:95:b6:da:06:1d:
         b1:1f:72:b5:11:61:05:aa:36:5a:20:29:65:40:39:50:99:4f:
         fa:5b:79:1d:21:eb:9c:a5:18:af:1c:17:a1:30:96:66:18:51:
         f8:9f:2b:6b:fb:92:c8:a0:4e:5a:fe:e6:70:25:cd:a5:b2:29:
         d8:56:36:84:cb:59:c4:92:29:33:09:6a:83:99:7c:df:13:e5:
         a9:39:1c:95:94:24:9e:91:60:0d:3f:32:cd:fc:2b:b0:0d:02:
         1d:fa:d5:78:19:60:29:63:7b:27:5d:e2:a7:3b:ae:ff:c2:82:
         02:1c:1c:8d:ba:c5:c9:04:71:b2:31:8c:5b:8c:8b:95:fc:e2:
         00:37:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:11:01 2024 by rpki-client on console-ams.rpki-client.org