Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          zWrVkhLlmXtJzzN2y4Z+PN0pTsFzVoLVA1vqhqIauZY=
Subject key identifier:   0C:D7:33:09:94:C7:85:65:77:64:9C:20:04:1F:6B:CF:5C:C2:29:42
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       0193520786E1B4D5694A2A4F4B565FDAAC33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 04:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:45 +0000
Files and hashes:         1: 1-h9YodcJ1W0mp0ptB6vPGtH0V00.roa (hash: FCUFjmPEfeBXY72gIRJOTXr81aiNbeuYwURt8UCdmXk=)
                          2: 1-lKYoCjCEzGyyH3ykDoqAOnZaks.roa (hash: O6kWADPYzWzYlgRDv1DNzYM91gsOXvLZGZdVvS7aDi4=)
                          3: 8VQilzbD5Z1nRDFLgdVT_RU9ibg.roa (hash: EluiuG1WLIw+NyVDUeesDmYjI2s94QoQa+qn94Adwoo=)
                          4: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: wE+pXPmv61G11nXO0KIlnZVUvcJMw4/P+6MJtARywWc=)
                          5: k7mrxpRnIiB-VMAyPQX68YUcFDY.roa (hash: wc/eMbkU81FbtPtenM61LUfRvBvuUf1s4vYZjIxbMrM=)
                          6: nQjjjRY9rmA7uOAzSdFE56D4Omc.roa (hash: tMu2Q8Qa6bV4UIFX6InFOPla8uiT1sFSNMOxBWAsBqY=)
                          7: rgzH7zrBlADqKZY4M8FtAsOaSgs.roa (hash: +p4VrFjQuaGpJWdcAYB8eg7JZHA2Ur26VwotVAZReEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:86:e1:b4:d5:69:4a:2a:4f:4b:56:5f:da:ac:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Nov 22 04:00:45 2024 GMT
            Not After : Nov 23 04:00:45 2024 GMT
        Subject: CN=0cd7330994c7856577649c20041f6bcf5cc22942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:de:c5:85:92:3a:c1:77:fa:c1:27:96:4e:
                    b2:73:b8:38:3e:75:14:06:8c:e5:8e:c9:af:68:91:
                    5c:e0:b4:31:ae:e3:5d:e9:8e:b8:24:62:c2:2b:81:
                    11:66:90:09:2e:25:c4:ed:4d:88:6c:53:80:dd:b0:
                    9f:1c:6e:3b:16:1c:15:a4:d8:c2:9b:22:67:51:08:
                    71:e1:62:f7:32:24:18:82:08:e0:07:02:d2:ff:51:
                    d6:20:54:4a:43:e4:55:1c:e2:5c:b6:31:72:5c:c9:
                    43:81:0c:f0:ef:0d:af:66:5b:e1:ae:18:3e:1f:26:
                    01:cf:8b:4d:f4:5f:a7:64:18:45:d1:da:76:9b:97:
                    da:40:96:37:36:6e:e7:8d:29:1e:e0:1e:ee:a5:ea:
                    ba:39:f3:8c:7c:69:7e:e2:77:b7:7f:71:cf:2a:7e:
                    cc:08:ed:8a:6b:80:7e:89:b4:a8:fd:85:50:3e:be:
                    94:25:91:53:ba:69:72:59:0d:f5:a5:0a:e7:48:70:
                    95:58:cc:42:38:3b:e7:4e:d2:f8:da:da:3b:8e:27:
                    7a:8f:cf:79:f8:84:01:cb:94:bb:dc:1a:e0:38:08:
                    22:de:6a:a2:e7:ce:24:b5:a2:1d:de:25:25:4e:71:
                    2c:29:6c:b0:c7:4c:57:72:2d:44:a8:b0:3f:0f:e0:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:33:09:94:C7:85:65:77:64:9C:20:04:1F:6B:CF:5C:C2:29:42
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e2:52:19:a8:6e:66:b5:86:c4:17:0a:4e:1a:a3:84:26:b3:
         5b:68:49:03:89:fe:31:fe:1d:cc:e4:9d:4d:9f:86:37:86:2b:
         a2:e1:50:fa:d2:14:fa:fd:75:42:58:c3:29:ac:3c:58:a1:6c:
         c3:fa:2c:8b:12:fa:ec:79:a2:f5:0d:98:9b:1c:54:38:cf:e6:
         17:ff:0e:36:4a:34:3a:ed:a2:11:43:f0:15:33:bb:40:55:95:
         20:69:1a:5c:09:78:82:30:20:5a:f0:13:22:d0:25:45:b7:a1:
         3d:a5:56:79:4a:bd:57:95:63:88:88:54:41:ea:fe:a1:3f:05:
         40:60:0a:22:2d:15:05:e7:87:eb:7e:3f:b7:ab:a6:75:18:31:
         bf:a8:1e:22:12:c9:b6:56:d8:6b:9b:77:62:2c:ea:75:e0:08:
         cc:13:8b:3f:a1:ef:d3:bd:d0:42:3a:da:b7:71:a6:24:46:e9:
         94:13:f7:b6:aa:0d:35:5d:3e:83:e6:4e:bf:66:6a:0e:56:36:
         86:16:36:7f:8f:e5:75:6a:fd:64:e2:da:4c:fd:58:8b:bb:0d:
         cd:96:0c:23:2c:5a:01:5b:c8:31:3d:53:13:35:5f:8e:bb:a6:
         4c:0a:ed:7c:08:a8:85:a7:b5:4d:c0:af:fb:c5:f4:f3:a6:0a:
         8b:a3:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:34 2024 by rpki-client on console-fra.rpki-client.org