Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File:                     M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier:          KJB+A/ak2EbdltjupMb7aA5UA15P2yfybeU5dlHKjtg=
Subject key identifier:   A1:C1:28:E1:54:FB:4F:C0:4C:AA:5C:E6:D4:ED:C4:84:9F:9D:75:18
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer:       /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial:       0193553F5E055DD0505DB6447D9CB9A9743D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 19:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:36 +0000
Files and hashes:         1: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: VR2LtWnggiKz/JGNht/wgLzde4lSnPfd8q80B8F6HB0=)
                          2: kvd6Y_pHuRVM5S4Y6_fSFpjnpXY.roa (hash: xKMqifZ16z604DR3b7Dn27NEeewJL7VDkT9307eFwq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:5e:05:5d:d0:50:5d:b6:44:7d:9c:b9:a9:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
        Validity
            Not Before: Nov 22 19:00:36 2024 GMT
            Not After : Nov 23 19:00:36 2024 GMT
        Subject: CN=a1c128e154fb4fc04caa5ce6d4edc4849f9d7518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:20:a9:ac:42:a9:cd:49:64:f8:49:15:84:
                    6d:b0:d9:82:b0:5b:18:0c:68:77:90:52:f0:5d:d4:
                    aa:cb:96:72:2d:66:4f:16:1a:9f:52:6b:bb:26:b7:
                    d3:69:76:78:27:96:71:08:b5:44:5f:32:f5:b9:e3:
                    c9:89:89:66:36:52:4c:08:f4:63:e2:80:72:61:78:
                    23:74:d1:39:d3:9b:6a:be:e2:e6:89:74:71:68:f8:
                    5c:cb:f2:8f:e4:c4:73:d8:38:b9:ce:fe:b7:49:18:
                    03:ef:e4:ee:74:ef:49:5a:7d:ba:7a:fc:e8:4a:f8:
                    5b:42:39:45:d4:0f:2e:60:43:c7:15:96:d8:89:b6:
                    56:1b:17:e6:be:72:6e:1e:3c:26:cf:ee:f8:42:1d:
                    c3:f8:2f:da:8d:68:5b:cb:f5:98:e7:fe:93:47:47:
                    62:7d:5b:f5:3f:3f:7d:26:e5:f1:86:0e:79:8d:cb:
                    dc:00:96:cb:b2:09:bd:8c:8c:f3:85:f4:13:35:30:
                    94:5f:28:4b:39:3a:00:c0:d6:5f:90:e8:b4:a4:3f:
                    1d:65:ee:0d:3f:56:85:fb:14:b7:78:4d:72:be:69:
                    50:1e:64:75:14:e8:7f:f5:43:64:60:b1:52:31:4f:
                    c3:01:6c:04:2d:f3:2b:23:e9:c1:d4:df:25:41:76:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C1:28:E1:54:FB:4F:C0:4C:AA:5C:E6:D4:ED:C4:84:9F:9D:75:18
            X509v3 Authority Key Identifier:
                keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:20:5d:d2:c1:39:ad:26:53:17:3b:90:9e:d3:63:be:2e:
         a1:d1:23:e4:ea:1a:fe:75:39:3d:c1:93:af:19:3b:3b:73:e4:
         b7:68:35:43:44:95:05:1c:64:e9:fa:c0:e6:6a:c7:a0:77:09:
         ec:dd:a5:17:7a:8c:be:17:39:bf:72:fa:39:81:cb:13:f8:66:
         e7:a2:9f:95:d1:91:fd:81:85:54:be:ba:c8:ed:24:8d:5a:f4:
         39:2d:a9:a6:76:fd:12:48:5c:70:af:68:d5:e3:c4:e9:37:22:
         94:21:11:7e:cf:6b:f0:a4:2d:1d:af:7a:e9:23:df:c3:f6:da:
         f4:fa:71:e0:ec:41:45:b6:f0:a8:ad:e7:15:f4:5e:c5:31:00:
         af:8b:e7:24:d5:20:be:71:28:b3:17:be:f9:35:3e:3b:44:07:
         d3:20:36:83:dd:6d:2a:30:96:50:24:cf:53:38:16:91:5c:6c:
         a1:92:d9:50:1d:57:10:79:27:36:f4:83:fb:6f:25:bb:df:d1:
         1e:7b:ce:1a:e6:e1:27:9c:24:1e:c9:c8:a1:a8:0b:60:9f:b4:
         7b:d3:f3:4b:f8:58:fa:4b:1a:7f:6c:bb:52:46:40:55:f4:51:
         94:4d:dd:69:b2:b3:7c:e3:33:bb:f0:7b:da:83:b6:ea:25:0c:
         de:fa:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:36 2024 by rpki-client on console-ams.rpki-client.org