Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File:                     r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier:          7hklsNl6bQqiEH0UaCBu1Q2nOmRd8WP0vB4eEP7FYLY=
Subject key identifier:   5E:C3:94:CE:80:18:E3:38:22:6B:F5:4F:EC:5C:54:6A:33:D3:95:C3
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer:       /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial:       01935689F73C70B5918CB8BC78D157F439B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number:          105E
Signing time:             Sat 23 Nov 2024 01:01:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:42 +0000
Files and hashes:         1: an1_zWr-vYQy612X4conhnC9VMI.roa (hash: lh9qatHK9dwsDBJ2KEtwNyb0foGAfRlnOVn8SYE6nJU=)
                          2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: gINENKiA9yAEbNnVyF+ZQ5Cj/sVOd3i5pce9c2P94bU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:f7:3c:70:b5:91:8c:b8:bc:78:d1:57:f4:39:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
        Validity
            Not Before: Nov 23 01:01:42 2024 GMT
            Not After : Nov 24 01:01:42 2024 GMT
        Subject: CN=5ec394ce8018e338226bf54fec5c546a33d395c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:67:20:1a:18:2a:88:6d:62:c1:16:9e:54:
                    91:16:87:9f:d8:cf:91:88:4e:a3:35:c0:cd:3e:e5:
                    7a:76:25:08:ad:4a:86:ae:69:1c:1d:ce:5a:10:22:
                    2f:ab:e8:7e:df:ad:91:9c:0c:00:44:6f:f3:a6:33:
                    13:40:8e:5f:f1:c3:31:9c:02:66:59:44:09:99:4f:
                    da:23:a7:5e:2f:3f:1a:bf:d7:1d:f1:51:56:0f:56:
                    9e:16:77:c9:81:60:26:ae:4d:18:cd:5e:45:da:3e:
                    c1:d9:57:ed:4a:97:60:aa:7b:94:a3:dd:a8:34:f0:
                    80:0f:bb:c8:4a:16:9b:4f:52:de:d5:a8:12:23:fb:
                    c2:33:e9:09:9f:f6:3c:da:45:01:e6:0b:d5:31:57:
                    e0:c3:62:d5:45:8d:a2:ff:aa:a7:19:5c:65:5a:b5:
                    f0:fe:c4:dc:5e:83:f3:f4:bb:f8:80:38:9c:71:f7:
                    bb:3a:4d:4b:2d:62:db:1d:0c:8e:31:90:52:4b:65:
                    6f:be:06:99:49:d1:1d:85:fa:fe:ee:62:36:70:c0:
                    b9:86:47:c2:9d:b9:a6:87:ed:21:de:f3:5f:84:80:
                    34:d4:a7:1f:9a:9c:fb:d1:3f:f6:e5:59:fc:89:18:
                    91:7f:8d:5b:18:62:c4:49:98:d9:39:c8:e9:25:19:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C3:94:CE:80:18:E3:38:22:6B:F5:4F:EC:5C:54:6A:33:D3:95:C3
            X509v3 Authority Key Identifier:
                keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:71:52:71:79:54:c5:91:9f:b3:fc:6a:29:a1:bf:ba:85:
         88:b7:04:9d:fc:96:ba:08:60:e4:f7:57:ab:d0:2b:58:59:7d:
         3d:43:8e:34:91:3c:9f:25:51:f4:bf:4e:10:65:72:e6:8f:1d:
         30:ce:7b:a0:1c:71:87:4f:45:02:a0:e6:42:a8:e9:9a:f4:e5:
         32:60:e1:1c:13:fa:45:f5:2a:fb:f0:f7:72:8f:a2:94:15:e9:
         47:5e:cd:9d:f8:28:43:13:35:9c:6f:3c:cc:12:0b:a6:f9:b3:
         b9:1d:4d:db:85:98:b4:32:51:09:cc:c3:7a:f6:a4:31:97:c3:
         fd:af:69:f0:e7:46:20:43:95:5f:cb:27:05:e1:da:b4:e6:3b:
         ed:21:6a:15:b8:c4:f9:79:a5:30:dc:fe:e2:ee:c8:47:71:79:
         ba:a9:98:b0:16:52:0c:51:72:6f:32:c2:f7:72:63:89:f3:6f:
         76:2b:b6:74:b1:fa:50:e4:46:d8:d6:f5:d3:b9:bf:ec:e4:d2:
         18:c7:19:81:a9:81:82:70:11:9d:42:07:f1:51:ea:4d:21:bc:
         f9:dc:cf:f3:0a:91:77:ef:82:4f:ac:de:42:80:93:cb:39:b6:
         04:9e:fc:e5:f1:82:e5:33:dc:9d:d1:e4:05:78:8f:78:3c:2f:
         77:19:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:43 2024 by rpki-client on console-ams.rpki-client.org