Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          HyunQhULqlado1sVB+iNj/quuMwDlB03wg1pZVvNVNE=
Subject key identifier:   4F:86:4A:77:C2:72:A4:41:FD:82:FD:CE:A5:1E:04:41:46:51:E0:AA
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       019352073E3FEB31EB20B35602B3C7E242C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          0E65
Signing time:             Fri 22 Nov 2024 04:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:26 +0000
Files and hashes:         1: 1-0oqVkXpDHhaUn0ZYhWeewLz7tM.roa (hash: iygJaNr3TOCZvgp1M77G9NIpc4P+7zd2vrn1FGh2QXM=)
                          2: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: x9CxP1jrco/OoUJ89XHo5OB4t4KnuAZO2mYEpePd0Ns=)
                          3: 8hy4LvnnAU5I0e0aQht8iOw2MZc.roa (hash: wUJ1gVqCR+mLJ32VhTFjDY+noupZeETbuzClcHTPtgo=)
                          4: o9at-H8dNqitFTAUBoq5d7lp4JQ.roa (hash: h1vdJsQogeaSl/nuPJTfeCksvT+c5xf9C3+afQLh7rU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:3e:3f:eb:31:eb:20:b3:56:02:b3:c7:e2:42:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Nov 22 04:00:26 2024 GMT
            Not After : Nov 23 04:00:26 2024 GMT
        Subject: CN=4f864a77c272a441fd82fdcea51e04414651e0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:4b:36:2b:3b:9c:ec:86:bd:37:d7:e9:19:
                    0c:1d:a8:b5:92:3c:8a:1a:d1:da:38:29:7b:0e:5d:
                    85:cf:19:2b:6a:9e:d0:f8:50:20:ef:84:48:02:78:
                    76:63:b4:0d:dc:ce:6a:3b:c4:bc:a9:12:c1:e9:11:
                    a1:32:1f:97:d5:b1:70:5e:84:b4:46:12:9a:3f:30:
                    89:f0:1b:c9:44:f8:ae:cf:5b:0f:ec:ad:c3:71:03:
                    5a:61:c7:6d:07:34:b8:31:27:c9:90:b5:1e:15:ed:
                    e2:89:ac:b4:27:76:75:5e:c1:fc:b1:5a:65:49:4d:
                    6c:27:bf:d3:c5:b1:84:b3:56:ab:cf:be:72:5e:01:
                    b9:38:4c:fa:7b:a3:dc:12:da:1a:e8:cf:53:a2:d4:
                    3b:66:a2:4a:72:5a:35:dc:58:49:42:38:29:30:e9:
                    7d:93:83:af:3b:89:13:87:e9:bf:7f:87:2f:af:da:
                    de:b8:8b:0c:f3:10:9a:b3:09:28:fe:5f:c8:72:3c:
                    c6:75:29:79:0b:1d:c2:94:9e:49:e1:68:2e:ec:65:
                    e3:54:d7:1c:df:51:ca:25:cb:fb:5f:7d:31:e3:80:
                    64:7e:07:67:3f:ea:36:a4:a8:50:bf:ea:6a:ac:ee:
                    62:de:46:b3:4a:72:3b:89:64:a3:fd:9a:11:ed:d7:
                    7e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:4A:77:C2:72:A4:41:FD:82:FD:CE:A5:1E:04:41:46:51:E0:AA
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:16:d9:68:89:8a:b7:e1:3d:f5:7c:5d:28:ce:46:62:d7:41:
         a9:ac:79:95:e3:80:ff:09:a7:44:c9:f2:7b:6f:39:d0:d1:2f:
         70:3e:24:10:0e:86:61:74:53:84:b4:80:c6:7a:66:45:84:04:
         80:00:91:8a:e6:20:da:fb:c3:01:28:06:45:96:37:56:77:5c:
         d6:5e:27:10:dc:33:cd:a4:25:2c:a8:23:8c:03:da:9e:f5:ce:
         d2:6d:6f:21:6d:12:9d:18:81:b1:1a:bf:cd:3d:30:e9:25:c4:
         e7:25:c5:2b:40:03:50:9a:e3:a2:32:99:1e:be:b8:f3:25:85:
         e5:36:29:6e:a4:ea:f4:a2:5a:4d:27:d6:41:a6:35:b7:85:6e:
         ac:66:2e:97:2c:97:6e:7a:ff:e3:6a:d7:40:58:c8:54:97:f1:
         06:dc:aa:7e:b6:ab:de:df:3d:b9:bf:21:6f:63:e2:08:b2:24:
         8a:d7:55:21:a8:f9:ce:e9:aa:58:2e:5b:fe:ba:7b:10:82:63:
         7f:4a:4c:eb:7f:b8:65:1b:b2:48:4f:99:d9:a9:f5:b2:9d:0e:
         3c:80:aa:72:6d:eb:77:69:e5:7b:6a:40:68:65:be:5e:da:1b:
         cd:92:0c:1d:46:aa:de:38:fe:05:2f:48:4f:ff:55:ee:55:3f:
         70:f3:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:17 2024 by rpki-client on console-ams.rpki-client.org