Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          kK11DrqbaB9bVXzBcl/YgJrR7LUaf7mm6si7s7wHx8I=
Subject key identifier:   0D:9B:EA:BF:E1:7C:F3:A5:77:1D:A3:EF:2C:7A:D0:D0:D2:DD:F4:00
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01935086A96FCBDC8BA3F412713F8A7EA947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          03DB
Signing time:             Thu 21 Nov 2024 21:00:22 +0000
Manifest this update:     Thu 21 Nov 2024 21:00:22 +0000
Manifest next update:     Fri 22 Nov 2024 21:00:22 +0000
Files and hashes:         1: D7JiELskX1YS_JSC9Z-FsYrPeHA.roa (hash: Qm0xtwcW/7bxEVkUNCfWfAQre5+DGTVJwfWGdrDvSeA=)
                          2: FWlpr36UsfF17Z2QrFjIzOrD-v4.roa (hash: aIAtDYem8JRxqgJPAX7CVgzGVTTJIiFKXleyLKznHBg=)
                          3: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: B9G5VLsiBzSshVJs0is2biKYYooZCdpqnqG2mLIoHXQ=)
                          4: X9yPlgDnQj7cQSBCDypekGuKFZ8.roa (hash: TMJqA9306/55hjJlpvLRNjZkRXuHIeKdP2xZDTih01Y=)
                          5: fFFC8cRknkJUC56HLGf2z-pyfW0.roa (hash: s6kYLIeqllsN/+Aru8xIOem/jnpHKw/06ZqDZTTOrnU=)
                          6: q1wMoJ2g0_1WJiNmPwN5DeBnSYE.roa (hash: KFw9DTMHTd+Fm4Oyn0Oz9hTs9sstZVeIbO9dj5pUtlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:86:a9:6f:cb:dc:8b:a3:f4:12:71:3f:8a:7e:a9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Nov 21 21:00:22 2024 GMT
            Not After : Nov 22 21:00:22 2024 GMT
        Subject: CN=0d9beabfe17cf3a5771da3ef2c7ad0d0d2ddf400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e7:d2:b1:95:d3:c3:d2:27:0c:a2:2c:65:c5:
                    1e:31:c5:85:83:fa:97:f4:f4:e2:d9:66:4e:48:49:
                    24:4e:b4:08:ce:45:e8:be:11:43:da:3e:07:7f:d4:
                    65:8b:4b:63:5f:6a:0a:ba:4c:9a:4c:92:bf:5a:1d:
                    49:fb:aa:cc:56:6e:41:02:81:77:0b:87:03:4c:aa:
                    3f:e8:0b:fd:1e:fc:e0:fb:d1:3d:7d:7c:c9:24:3f:
                    a9:e0:b4:e4:de:41:86:3f:8e:f6:aa:40:da:26:70:
                    fe:3c:f6:44:e6:57:62:ac:30:19:0e:59:31:8f:24:
                    e3:c9:b6:15:80:7b:4e:84:78:c6:f6:29:43:fe:cd:
                    71:f8:8e:e3:55:24:2d:66:f6:61:28:f6:c1:38:2e:
                    74:4a:37:11:67:a6:00:dc:5e:7e:4d:54:d3:e2:be:
                    0b:f0:86:87:ed:70:2c:14:ca:b9:f1:be:c3:a1:74:
                    e9:b8:cb:27:68:3c:7a:7b:ac:75:45:c5:02:29:50:
                    02:e7:ac:7c:d0:50:d7:75:1e:da:49:88:07:74:30:
                    b1:7d:83:0c:f9:89:73:19:01:e9:2d:fd:6f:a7:7a:
                    83:4b:86:99:47:fe:c7:88:69:d5:16:af:4a:4e:8f:
                    dd:c9:a0:31:37:ce:59:a6:a4:a1:12:39:86:79:18:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9B:EA:BF:E1:7C:F3:A5:77:1D:A3:EF:2C:7A:D0:D0:D2:DD:F4:00
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:86:57:59:64:b1:e7:86:cc:3e:08:69:1b:c0:9a:a6:ed:d4:
         25:23:52:7d:ef:25:bb:4f:a1:f9:09:cb:38:f8:09:f2:2a:46:
         49:85:c8:f5:a3:c2:aa:3d:99:55:ab:27:c7:a5:2a:b3:b5:6f:
         d4:cf:da:9c:44:20:52:0a:b9:0a:57:82:d0:4d:5c:c9:4a:a8:
         04:ec:25:4b:55:70:1e:23:08:e7:59:5f:73:6d:34:bd:20:46:
         1a:34:a1:57:16:73:db:79:a6:83:91:42:cd:d9:ec:7a:31:3c:
         bc:13:e7:ea:e3:68:7e:60:9d:ea:d3:dc:5e:d4:87:4d:14:51:
         4c:cf:dd:35:f7:3b:85:57:6c:f8:43:90:2f:6b:82:d7:58:78:
         0b:e2:24:bb:3e:ad:77:ca:3a:ce:ef:c4:e9:63:0e:3c:09:fe:
         79:dd:08:1b:8a:15:9a:09:0e:e6:02:9c:0e:28:dc:7b:47:c6:
         82:05:03:b3:99:ec:d7:41:87:db:5c:97:64:ec:a3:45:74:8f:
         6e:49:0d:00:7b:6b:37:13:60:85:2d:6a:f1:da:45:9f:de:0b:
         af:61:93:54:24:e2:cf:5f:d1:50:9d:c1:db:28:39:93:c7:4b:
         58:ba:9b:2a:51:39:a0:3e:06:18:0e:67:f3:ea:c2:e3:09:45:
         d1:7a:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:26:43 2024 by rpki-client on console-ams.rpki-client.org