Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File:                     MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier:          X94vrSzHaWQ2uNObalEIOQEAQrW5wQrZam/Uk7KXVcw=
Subject key identifier:   EC:57:3C:9F:AA:10:28:63:4E:12:67:9A:B9:E7:69:7F:F0:F1:CD:32
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer:       /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial:       0193568979CA80F26DE6FEE7D5596057B524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:10 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:10 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:10 +0000
Files and hashes:         1: 0_B8sTTsZrNrOobe3kxL8SU4RMk.roa (hash: WetLMtQbpHvXpYMXSNCMCeEjQp2+OrKcsGexHL/DzZI=)
                          2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: 1mqVIoyqFGrA8nKTaPkOQzjfIbCzo42Zir2FmF6T0AE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:79:ca:80:f2:6d:e6:fe:e7:d5:59:60:57:b5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
        Validity
            Not Before: Nov 23 01:01:10 2024 GMT
            Not After : Nov 24 01:01:10 2024 GMT
        Subject: CN=ec573c9faa1028634e12679ab9e7697ff0f1cd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:f4:c5:55:4f:0c:88:7d:09:f9:36:34:c9:
                    21:a7:d4:72:aa:ca:9b:9f:d1:27:41:00:06:5d:84:
                    76:11:ad:0a:e8:95:57:1e:2d:64:e6:d7:f9:e7:0a:
                    cb:5e:8e:3c:95:e2:cc:2d:0b:35:13:59:b3:e5:6e:
                    27:f6:bf:e8:51:85:b4:5d:fd:a1:1e:3c:26:77:75:
                    7d:54:47:21:1c:5b:f0:5f:af:42:d4:4a:26:f3:5e:
                    0a:72:f5:f0:79:e7:74:1a:aa:68:b4:8f:48:0c:8a:
                    03:b5:c2:1d:e1:0a:91:5d:6a:a6:36:17:20:18:29:
                    df:c9:56:16:2b:4b:4d:43:0e:05:a1:8d:34:06:f0:
                    fc:00:3e:81:af:15:f5:dc:22:a3:35:e8:ad:c8:70:
                    44:55:43:87:33:84:d2:83:e4:d1:76:bb:29:f9:e0:
                    63:47:79:6d:63:4c:30:b4:88:d0:02:34:05:71:fe:
                    fe:c2:b7:6c:2e:b3:e6:d9:f8:4f:6f:49:27:09:23:
                    52:00:9a:96:5c:43:47:27:aa:03:45:82:2e:35:2d:
                    eb:ad:53:4a:64:51:88:ff:92:a7:55:0c:d8:b1:c6:
                    fe:74:b8:71:57:14:b5:48:1e:cf:cf:ab:4b:70:d7:
                    ef:1c:1a:db:cd:e8:d5:a9:72:94:9a:10:a0:0a:33:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:57:3C:9F:AA:10:28:63:4E:12:67:9A:B9:E7:69:7F:F0:F1:CD:32
            X509v3 Authority Key Identifier:
                keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:56:bd:d0:33:e1:a1:fd:90:65:4e:08:71:c8:48:6e:57:48:
         2b:bd:9f:ee:4c:96:80:6b:04:aa:44:d3:3b:4a:19:4b:47:bb:
         40:95:06:ec:1c:50:bf:1e:42:47:7e:45:47:33:d7:f4:df:25:
         59:d3:12:5b:e8:b4:4d:ba:fa:58:ac:1c:25:0a:ae:a6:48:49:
         c1:5d:f0:f7:3d:a8:52:8e:63:4f:0b:13:71:8a:5a:27:8d:81:
         4c:44:16:5f:9c:23:4a:ac:ba:f2:f7:f4:98:2e:d8:9c:fd:34:
         2d:ca:4e:d5:74:d5:16:0c:c6:2b:9f:04:6f:1f:a9:df:d4:5b:
         19:b2:c7:5a:55:cc:cf:35:fa:5e:8a:1e:3d:37:d6:22:58:26:
         6b:76:29:46:bb:1b:63:82:a5:27:e7:a6:ee:64:38:19:e0:1a:
         50:61:23:85:a7:02:00:44:94:b6:b2:43:ab:04:07:af:b3:9e:
         aa:87:d3:f3:e2:1c:b6:e3:7d:9d:1a:05:06:8a:97:8e:12:15:
         0a:5f:86:e1:fb:5e:6d:98:44:a4:5f:e6:ac:31:91:33:23:55:
         51:c0:ef:0b:f0:84:db:eb:cf:6b:b0:7c:ba:53:b8:c5:8d:ab:
         4e:f9:eb:89:f2:5c:fd:c5:62:5a:a2:da:6f:87:a0:16:11:52:
         f8:e1:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:01 2024 by rpki-client on console-ams.rpki-client.org