Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          ezMggDdpbB1DURBTk4PYMnK7bNkzT4jagqb1pONgCEg=
Subject key identifier:   C5:3C:29:E3:DB:10:A4:34:95:E5:C0:02:86:ED:A9:EF:C4:86:64:70
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       0193553FAF9590581143CFB5628EE200945C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          8A
Signing time:             Fri 22 Nov 2024 19:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:57 +0000
Files and hashes:         1: RjepV25Iyf6o3-tza2jfTyMD4Vo.roa (hash: p3KDh2ibe9Bl8grw5edPiJx0xTolCYJ8i3sWZfIicy0=)
                          2: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: v282RxzAhPxnL6ktsnPXwkpUxyD82FkgdUsBXi+kSOo=)
                          3: tQLpMzWhggFRaPArLGTk05lk01k.roa (hash: P+y8fJ+2C3g82TuNwhwHD803xPc8NxVrROXYDtDyQSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:af:95:90:58:11:43:cf:b5:62:8e:e2:00:94:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: Nov 22 19:00:57 2024 GMT
            Not After : Nov 23 19:00:57 2024 GMT
        Subject: CN=c53c29e3db10a43495e5c00286eda9efc4866470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:6a:93:49:05:42:8a:b0:12:c3:ed:57:fc:
                    7e:b5:5c:75:f6:07:31:00:8a:80:a4:5f:7f:9a:f6:
                    c5:b7:aa:e6:5a:87:25:23:45:2a:c8:a2:97:76:28:
                    c8:3a:34:26:09:2e:14:9b:67:b5:96:cb:fc:69:5a:
                    de:e3:7e:3c:12:0c:fa:38:5f:77:88:99:9a:bc:87:
                    3b:db:1b:ec:91:ae:af:de:a8:a5:84:2a:af:19:05:
                    b0:c1:a8:de:3e:96:39:5b:da:aa:66:7e:c5:e8:b3:
                    94:af:b3:00:c6:91:dd:0c:05:b3:55:3a:71:80:93:
                    0a:aa:2a:19:48:8e:09:87:bf:fc:4a:34:b0:c9:91:
                    cf:c0:cd:89:bb:8b:88:96:cf:22:18:a5:cc:d9:aa:
                    f0:86:d3:99:6f:4b:5d:71:78:78:1f:f8:5a:76:ae:
                    2d:00:9a:41:f0:b8:61:89:fd:30:c1:f2:70:21:92:
                    23:44:9e:fa:f4:13:61:ed:70:ac:f2:bc:3b:f7:b5:
                    75:4f:60:69:a6:05:c0:7b:eb:05:51:56:b6:a2:8f:
                    09:7d:ef:70:88:c9:03:33:92:7f:d9:cb:61:66:21:
                    40:a4:6b:15:21:a3:81:10:b6:79:d6:a3:24:a7:07:
                    ad:e2:ff:24:29:20:49:4d:bb:ee:dd:b8:d3:e0:3e:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3C:29:E3:DB:10:A4:34:95:E5:C0:02:86:ED:A9:EF:C4:86:64:70
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cd:41:1a:a3:3a:cc:90:23:38:9e:56:54:a1:50:10:d8:42:
         b1:26:85:a8:b1:89:46:9c:05:c9:7a:73:c7:db:68:04:d6:d6:
         fc:a9:27:3a:0c:d6:40:3d:d1:e7:e7:e4:2b:a8:af:2c:d0:a3:
         97:8e:1e:8b:78:9f:c5:03:d9:2c:ff:88:34:23:38:5f:46:76:
         f6:5b:de:4e:fe:d8:7e:7b:db:8e:12:17:4b:1f:94:1b:85:7b:
         76:6e:1a:eb:d8:ff:cd:32:2e:ea:74:48:80:cc:64:07:d6:77:
         73:c9:36:80:31:23:13:81:24:3c:b7:13:38:1b:23:93:1a:c8:
         70:9a:94:2a:1b:c1:13:3d:c9:71:c6:7a:06:ef:8c:2f:e2:fb:
         61:d9:3c:9a:44:23:dc:89:fe:67:08:45:25:95:36:17:54:54:
         cd:3c:c2:e5:6f:58:36:7a:35:a5:1f:3f:78:97:7c:6e:4e:78:
         a7:a1:e7:f6:04:fc:c8:16:d2:3c:b6:57:77:5e:f1:fe:d8:1b:
         dd:8c:c6:57:53:6f:f0:33:99:4c:67:22:9b:a9:18:60:c5:91:
         9c:3b:72:93:e9:8e:30:57:9b:0b:41:86:9a:e2:e5:5d:05:71:
         7b:78:53:48:a7:66:32:b5:ab:c2:50:c7:56:0d:a9:f2:27:c3:
         d3:49:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:18:35 2024 by rpki-client on console-ams.rpki-client.org