Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File:                     huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier:          wTipoah+q2/lLqpi5lKdhZKuMmCei0ZvKlAnZPAQpL4=
Subject key identifier:   29:3F:65:9A:27:FB:3F:62:BB:93:A9:5A:45:77:96:B9:D4:88:2F:26
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer:       /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial:       0193568A7D57B44C4436812EF112A2F510AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number:          0C73
Signing time:             Sat 23 Nov 2024 01:02:16 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:16 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:16 +0000
Files and hashes:         1: gYQ-1qIh-UzRZlY5ivJD1QNwnek.roa (hash: 0Wm/SqP17ajbIJd4t2GwDAx1IhcA/ruJWIh3lhfTRhA=)
                          2: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: 74NdNVxpIHPapaqSKHru3YcJTbJD1sDyNvGe5Lwj8uc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:7d:57:b4:4c:44:36:81:2e:f1:12:a2:f5:10:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
        Validity
            Not Before: Nov 23 01:02:16 2024 GMT
            Not After : Nov 24 01:02:16 2024 GMT
        Subject: CN=293f659a27fb3f62bb93a95a457796b9d4882f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:d9:81:fb:6c:38:61:a6:e9:2f:5b:a3:74:
                    16:dc:77:05:84:e6:06:52:df:46:e7:19:f8:a1:47:
                    b8:fe:4d:ba:a5:90:4f:b1:d3:5b:c6:27:68:d5:8b:
                    95:8d:36:96:4b:81:c7:d2:b3:fc:88:a0:09:25:31:
                    fa:9d:01:f5:2f:e4:7f:63:df:82:df:b0:8b:cf:d9:
                    c4:56:bb:ba:6a:9e:fd:0c:ac:a8:c7:b1:5c:4a:b7:
                    25:8b:16:97:2f:37:f8:3c:f2:fa:80:3f:68:35:fa:
                    97:09:70:1a:9d:d4:cd:dc:85:90:86:4c:32:aa:32:
                    10:79:2d:87:a4:c0:92:ef:13:bf:b6:e8:25:c0:e4:
                    06:ac:ff:a2:ab:10:73:14:a6:40:cb:a6:34:63:83:
                    36:d7:21:23:36:ec:5b:9f:a0:14:21:64:b7:6c:e7:
                    0d:63:5d:ed:67:5b:88:d2:1d:92:2d:e3:b0:68:86:
                    7e:4f:1d:43:e6:e8:d5:b2:6f:fe:fc:13:02:71:b3:
                    91:4f:50:1d:0f:4c:f1:69:91:e8:91:02:4d:ab:46:
                    a0:4c:2e:f0:35:63:b5:5e:1f:b2:75:9f:69:e0:00:
                    a4:b4:a3:a3:1c:8a:77:67:aa:dd:7c:50:6d:b8:9a:
                    41:a9:73:60:be:2d:27:2f:6a:b8:8f:19:63:ab:2c:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:65:9A:27:FB:3F:62:BB:93:A9:5A:45:77:96:B9:D4:88:2F:26
            X509v3 Authority Key Identifier:
                keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:88:b2:07:02:57:7f:2e:c6:ce:4b:9b:08:97:02:ae:85:9f:
         b9:ae:89:30:61:33:bd:ed:cc:3f:8e:c7:96:a9:e8:85:1d:96:
         78:eb:93:f8:d0:3d:a3:ae:86:56:90:70:b7:08:ad:95:22:33:
         88:8e:d3:5d:f2:a0:cd:0e:0c:b6:ae:5d:87:c4:07:20:a6:b0:
         f2:98:bd:22:83:67:6c:43:25:62:58:52:26:c4:02:d0:5d:c8:
         85:17:cc:96:03:4c:8a:d8:88:f1:b8:d7:61:a8:fe:b4:08:ff:
         5b:d2:57:29:ce:bf:e1:8b:7d:98:4f:35:d0:2d:93:10:42:94:
         50:46:30:e2:3b:82:fe:e7:4b:e6:0f:5d:31:ce:11:23:58:e3:
         49:b7:8a:72:8e:38:81:28:46:28:a5:a0:9a:a6:c4:31:cb:9a:
         f8:a4:f0:94:9e:db:ae:32:fb:f2:2e:ce:a6:18:a6:6c:47:1e:
         9e:5c:80:66:d6:07:c9:6c:c6:af:27:29:a9:d6:c7:95:fd:d3:
         dc:8f:29:c4:6d:08:74:55:56:0c:76:b8:94:12:41:97:1c:c1:
         b7:33:6b:d1:e9:74:82:42:14:ff:94:8f:d1:2d:c1:0f:28:46:
         d4:75:5c:f1:e5:af:01:cf:51:49:e8:c8:ac:24:39:6a:91:bb:
         ab:b9:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:03 2024 by rpki-client on console-fra.rpki-client.org