Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File:                     DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier:          ik3BhnfpdZ5hyPiRnj/ik3/8cQu97ihHKpgRy5ZkGEI=
Subject key identifier:   4D:AD:BC:5B:5B:6E:84:CF:79:80:75:66:90:AE:D0:D0:F1:22:95:9F
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer:       /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial:       01936A7D4E34E447B27BA763267A3DF52C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number:          1382
Signing time:             Tue 26 Nov 2024 22:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:17 +0000
Files and hashes:         1: 7gdjw1EXNmX4uKx2DCEWouMFY4o.roa (hash: QA2JAEraMhgRP1uHMm7/oHFr30HcxFHQq6be4QVbSvk=)
                          2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: ICJVeD0MGFpGzpm95bwv9Ieeqrejq4OJb2XMibTsE9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:4e:34:e4:47:b2:7b:a7:63:26:7a:3d:f5:2c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
        Validity
            Not Before: Nov 26 22:00:17 2024 GMT
            Not After : Nov 27 22:00:17 2024 GMT
        Subject: CN=4dadbc5b5b6e84cf7980756690aed0d0f122959f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:2c:20:b8:80:a0:61:ef:b9:e8:ac:94:77:
                    5e:1c:93:dc:5e:61:d5:b9:1e:9f:01:b6:96:f1:69:
                    ba:50:3c:23:c9:9c:51:3c:39:b6:b9:7e:da:e4:a0:
                    25:97:e5:ed:2a:bb:8c:39:ab:47:6d:5d:bd:d2:a7:
                    a1:04:de:05:09:10:f6:23:85:e2:7a:16:ef:23:2e:
                    6e:b1:47:94:40:77:eb:27:4b:f9:31:60:67:56:14:
                    36:76:a6:6c:44:db:49:df:5b:b4:5f:c2:99:7d:34:
                    77:08:f8:a1:56:a9:5a:20:33:b9:12:6e:bd:ce:52:
                    d0:7d:43:d8:37:b6:64:f5:8f:ee:7a:b2:56:5d:ae:
                    a3:c6:9d:d0:68:4a:8a:25:f5:56:ce:93:79:1f:5e:
                    28:c7:e7:93:12:c4:e7:5c:9b:9d:00:1f:40:59:ac:
                    0d:d8:04:05:78:6d:0a:2d:d8:27:7b:e4:c4:85:20:
                    52:61:33:4d:e4:f6:72:5c:36:59:c1:96:1d:71:b1:
                    0b:c3:8e:e6:9a:0f:f5:0a:3b:15:fb:53:fc:0c:f7:
                    bb:45:cb:9f:c2:e1:5b:84:c5:f8:6c:20:1f:30:6e:
                    59:b2:d7:a1:8b:68:ab:00:fc:19:27:0d:85:97:20:
                    49:84:73:6a:b7:8d:13:b7:61:36:88:f0:da:3e:66:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:BC:5B:5B:6E:84:CF:79:80:75:66:90:AE:D0:D0:F1:22:95:9F
            X509v3 Authority Key Identifier:
                keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:49:ed:75:06:6a:9c:83:60:2a:77:c6:b7:8c:b3:d1:fb:8d:
         65:40:a5:25:af:6e:58:64:de:9b:a6:0f:06:f6:6a:88:e9:97:
         c0:55:ee:e8:14:ad:c0:02:e5:94:71:0a:31:9c:bf:18:a2:6a:
         24:7d:f4:bc:4c:b4:ed:4a:3a:24:4b:f1:44:e5:6b:ed:e5:f2:
         ba:fb:34:d0:50:08:4e:3e:51:ad:1f:c6:4a:94:ca:0e:e8:7d:
         b2:1b:3e:b3:1c:e6:e6:93:03:e9:0b:60:0a:a1:11:e2:df:29:
         54:0c:a3:3d:34:0e:c8:c3:73:ee:90:73:4c:5b:93:36:51:ec:
         ca:f2:94:f0:e7:40:d1:77:6a:3c:db:a6:8b:80:7c:19:10:a1:
         0d:b4:d2:a8:f0:2b:4f:1f:d8:d0:22:e8:a9:40:5a:b4:23:28:
         08:2d:5e:27:43:b2:95:43:a1:d1:24:da:1f:fc:e3:87:54:66:
         fb:83:eb:ac:66:44:f8:fe:20:35:cf:c0:57:8d:d9:f4:d7:5c:
         7a:56:b5:c5:b5:3f:40:46:44:aa:dd:21:e5:0c:c5:2b:86:f6:
         6e:53:3d:17:b8:d0:a7:98:9d:a0:96:46:04:65:b7:c0:d1:07:
         86:1d:14:7f:4a:99:ff:ed:e0:bb:54:70:0b:0d:c7:19:d4:e6:
         88:d4:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:30 2024 by rpki-client on console-ams.rpki-client.org