Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File:                     0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier:          jCm2EaFGznE6RNTFkg3TJY9Ed8JeUcrR903pZ5Edkms=
Subject key identifier:   4D:57:89:7D:57:11:17:B8:26:A9:AD:58:E1:19:3E:65:E9:A8:71:CF
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer:       /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial:       0193512BE24BE16A39BB8DDB3702330BBB72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number:          0636
Signing time:             Fri 22 Nov 2024 00:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:50 +0000
Files and hashes:         1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: VRVKcRgs2/XyIcpOoHZ0iwbqG6bp36iQWeTTulRAmM8=)
                          2: 4VrJOI3oAPOMoLE_L9J9HrFUHts.roa (hash: vFl3cZqnf26bBUZIgbdTGDczIH1SIq3AckcQjqrZy34=)
                          3: H9fN1hSmfsad3d_SnQYiD79-9ns.roa (hash: ZWQ8LBcPKNhy3m9FigzrKGfFO4MZaUKVZCRFuRAjbl8=)
                          4: QoIUSTbDSDGsvb8CEfvm4eNXPBA.roa (hash: gPiqJD6j3kHrnXB8lrC6UOGHhiReFQLCbMSTQKZMdys=)
                          5: ZxclnOZoUoT3oEHzhiXkSMrg0eg.roa (hash: Kr0x6iL7o5LPltcILFWfUY317piX6FAq2Hq67Mhy69s=)
                          6: duWRZgHRFZC8jKa8QvHJJMJWxNA.roa (hash: xdGoLARQcGdYJZ8S9ekYYuY8NLh3eNapokoT+9t8a2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:e2:4b:e1:6a:39:bb:8d:db:37:02:33:0b:bb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
        Validity
            Not Before: Nov 22 00:00:50 2024 GMT
            Not After : Nov 23 00:00:50 2024 GMT
        Subject: CN=4d57897d571117b826a9ad58e1193e65e9a871cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:77:ed:62:66:cf:49:44:5c:c9:ef:c2:b2:
                    3f:94:25:94:d5:36:da:25:80:f5:a5:d7:c2:da:b9:
                    b3:f0:67:62:f5:e9:2c:53:0e:73:ae:2f:c8:d9:71:
                    23:ab:cb:d8:bd:59:cb:04:b6:01:a2:64:18:b9:1d:
                    aa:73:e2:ee:5b:d6:a4:40:f3:ce:5d:99:91:0d:d7:
                    a2:82:20:aa:ba:80:64:29:ac:59:81:f1:92:6b:35:
                    a5:77:a3:1c:81:af:20:50:43:fa:dd:d4:2b:8e:5e:
                    bf:d3:11:23:8b:bb:a5:66:30:b9:bf:e0:e6:25:de:
                    3e:0d:d5:31:8b:64:61:9c:62:91:f7:23:61:f7:b5:
                    ad:d5:73:15:ec:0f:46:24:d9:82:2f:2a:1d:5e:d3:
                    02:e9:f0:5f:8c:8c:ad:5d:a1:73:4d:ea:fb:2a:99:
                    f2:c4:ab:f7:3d:e9:70:02:73:85:ea:7e:e8:a2:83:
                    57:5f:3a:c3:43:75:1b:a6:94:9e:e2:99:29:de:02:
                    11:0d:66:2b:cf:80:fa:5c:5f:96:d2:e6:7c:1a:e7:
                    14:8a:1d:25:9d:6e:4f:f9:af:33:62:d6:e2:c2:3a:
                    b0:91:19:91:5d:ff:80:64:9a:f7:02:cc:fd:aa:eb:
                    80:3a:2a:92:d6:20:71:99:1c:4e:0b:10:0c:a7:39:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:89:7D:57:11:17:B8:26:A9:AD:58:E1:19:3E:65:E9:A8:71:CF
            X509v3 Authority Key Identifier:
                keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:10:f3:e0:50:d8:24:32:e4:e5:0d:cd:fa:3c:6a:51:9d:
         6d:3a:18:1c:6e:1e:67:bc:c9:9b:9d:de:09:b0:e8:f9:35:98:
         fb:94:77:30:f2:9a:73:6c:22:aa:74:67:e0:48:e6:18:0e:9d:
         ee:dc:66:d8:70:94:4e:b6:73:6f:d4:b0:13:fd:1f:85:a3:34:
         eb:ca:b9:f1:fc:e5:78:73:09:ce:d0:d8:b2:75:13:b6:9d:ff:
         43:a9:b5:c3:30:c9:53:c1:dd:ae:f9:2f:6f:e4:5a:4b:56:cd:
         00:c4:be:65:dc:9f:89:3f:93:39:39:eb:47:d5:3f:01:82:d2:
         65:da:a7:b1:0c:b0:f4:db:3e:f0:00:b1:25:63:ac:ae:66:4d:
         3b:39:64:49:c7:6d:75:11:b9:35:c2:60:e2:f2:a6:4e:8b:05:
         d2:ee:b4:d6:9b:3b:3d:0f:68:8f:31:56:46:97:96:68:ec:ae:
         cc:e1:21:11:ef:b6:ab:cd:66:a5:d6:ae:a0:c4:df:0b:63:82:
         27:ca:7e:8d:ea:23:23:43:de:b7:79:0f:32:38:21:1e:58:a4:
         90:ca:9f:61:da:b9:ce:90:28:16:f7:16:44:97:6c:b1:e7:ff:
         7e:f3:9e:d0:9b:aa:8d:da:66:05:c6:25:a0:0a:39:4a:f5:11:
         e4:ec:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:11 2024 by rpki-client on console-ams.rpki-client.org