Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File:                     H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier:          uM2+f1ufegSVAD6r+5OpQlf5g/24vCYhrXWYmiTbaNc=
Subject key identifier:   E4:99:BF:58:3A:64:E2:CF:2D:3E:5E:6F:9A:F8:D4:AE:18:C2:89:27
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer:       /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial:       019355E4672BE28615A041C1109DF241D423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number:          0C2A
Signing time:             Fri 22 Nov 2024 22:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:52 +0000
Files and hashes:         1: DCS5XTDQLTlv8-5ENuEqgofCiv0.roa (hash: ogd9yCiGO4Tjj8ljesUzdTGS8Y9LEs+02ENvXtCPLeg=)
                          2: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: vFOmHXPXO2Fku4F9EIGzHgzm0F0cfR07bO2x6ASvxoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:67:2b:e2:86:15:a0:41:c1:10:9d:f2:41:d4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
        Validity
            Not Before: Nov 22 22:00:52 2024 GMT
            Not After : Nov 23 22:00:52 2024 GMT
        Subject: CN=e499bf583a64e2cf2d3e5e6f9af8d4ae18c28927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:00:42:27:07:4e:78:6d:e5:53:57:3e:38:2d:
                    22:89:72:82:b6:f7:8d:c9:a1:c1:be:ac:69:c2:39:
                    74:fd:0e:4f:3e:fe:e7:f3:3b:8e:fe:dc:93:23:cf:
                    76:67:0a:0e:41:fd:bd:3e:23:d8:6b:6a:a2:65:06:
                    9c:d8:ff:ba:0f:41:a0:11:66:db:fa:c1:7c:33:b4:
                    15:97:59:87:8b:1a:09:b9:c7:9d:89:b7:b2:15:c6:
                    e5:da:d2:5e:2b:7d:fd:52:f4:cb:e6:22:de:b0:fd:
                    4a:7c:c3:b0:a1:39:7c:d7:ae:e0:0d:f2:f1:62:c1:
                    66:93:f5:62:95:30:f0:97:01:76:11:35:da:9d:ab:
                    08:64:62:1e:2d:ab:f7:62:c3:24:28:0a:5b:57:6d:
                    c8:a5:47:82:39:3c:4a:05:05:e3:fc:95:14:bc:c2:
                    ce:9a:23:9d:3f:45:4c:85:7e:95:dc:24:83:d2:fa:
                    40:76:16:2b:d0:7d:16:12:fa:8f:73:68:ab:87:b6:
                    98:6b:cb:05:4f:f7:10:19:59:65:93:39:38:c8:eb:
                    75:09:8b:30:48:94:b9:28:30:53:0e:04:5f:de:2e:
                    84:9f:91:45:f4:9f:52:ef:70:bb:25:6f:d3:1b:45:
                    30:1f:10:fa:51:95:01:1d:6e:f2:90:64:d8:11:a0:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:99:BF:58:3A:64:E2:CF:2D:3E:5E:6F:9A:F8:D4:AE:18:C2:89:27
            X509v3 Authority Key Identifier:
                keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:b3:64:d4:5a:c9:ad:9b:d7:59:19:cf:d1:59:8d:6d:da:
         ea:58:3c:bd:3c:34:a7:89:7c:26:43:9e:3f:ec:95:09:20:ec:
         b4:cb:27:26:ba:5b:32:aa:33:c3:7c:de:75:3c:38:8d:34:b3:
         cc:65:bb:e8:4f:ae:b4:b4:12:63:fa:e4:a3:68:18:bf:4f:e1:
         f2:f0:c3:07:fa:c2:59:97:20:ca:12:76:01:33:24:a4:3d:52:
         5c:84:b2:54:46:45:6e:52:f1:35:7c:57:fe:e3:cb:54:e9:29:
         8c:65:d9:51:b1:9f:6a:8e:31:fc:0d:cc:23:bd:64:34:a5:96:
         5a:a4:2c:ae:fd:e0:c6:4c:f3:90:45:96:af:2b:ed:89:a7:d4:
         44:d2:01:55:15:97:9c:3b:4a:df:11:b8:7d:58:63:03:af:d4:
         58:c5:16:35:b7:ef:55:b8:b0:e1:5b:0d:53:89:05:11:ed:1a:
         33:81:c1:e3:17:18:7f:be:77:5e:b9:b3:1f:12:e2:c2:e0:1b:
         05:2f:2a:d4:b0:3e:db:6e:64:10:83:aa:e6:77:a9:89:db:83:
         0f:49:cb:02:5e:fe:d4:7f:09:1a:e3:56:b7:3b:03:1f:39:10:
         22:4b:96:52:a4:39:3d:66:ad:93:c4:bd:3d:8f:3f:cd:15:70:
         d8:4c:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:34:44 2024 by rpki-client on console-fra.rpki-client.org