Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File:                     Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier:          ZfzR/JdwG7u0RecHUpY9U4f6G8xdFo/6mxaNpp1BP6s=
Subject key identifier:   92:0F:82:D2:F7:47:01:C6:D4:B5:8A:50:D3:E0:8C:95:B8:F6:CF:BA
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer:       /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial:       019350BFA69A1D44FD61AD87969370EA2D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number:          1371
Signing time:             Thu 21 Nov 2024 22:02:37 +0000
Manifest this update:     Thu 21 Nov 2024 22:02:37 +0000
Manifest next update:     Fri 22 Nov 2024 22:02:37 +0000
Files and hashes:         1: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: Z7y49DCfsxbJSQLYz1CpY/z3iT/rsAwLk+p+elZNL00=)
                          2: Pmj0yB31raieE-WYRbn68_kREGc.roa (hash: dUG5djf9tc7QxFK3Fza4quapuBFSPrr1woUGx0SyiWo=)
                          3: QeMLef52nWQt8KOiEfy1VRL6VUs.roa (hash: vdainM1ktmLgM7J+fssfmYohLW7YHixGUG2XsxGDl88=)
                          4: ZRUwK2XWR-TC90aHW5UPPwGJipQ.roa (hash: AhcQPYgV3tl0xqf59GUspuTVEz2Lb+fTg4gYU09Q0f8=)
                          5: Zg2YUEhg_uReKo8PmZAB4Xn8eYQ.roa (hash: zmMCilyb5CRaJ3Ak9Xk7xXthHEleyA2To9Eor8GSiFA=)
                          6: blYcCndn_yP2oT1AYGj_8yDLyJ8.roa (hash: lMGd0YdSFs31BzG6W731XolCoa1uVeSK8Wwc7HRxFqA=)
                          7: ixl9t23B8-0dUb_X_u5YhgB4Pz0.roa (hash: qCDxc6QE+WJ3WxTxQ65PBF6unhoLlMHmHLURCxLd60c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bf:a6:9a:1d:44:fd:61:ad:87:96:93:70:ea:2d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
        Validity
            Not Before: Nov 21 22:02:37 2024 GMT
            Not After : Nov 22 22:02:37 2024 GMT
        Subject: CN=920f82d2f74701c6d4b58a50d3e08c95b8f6cfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:be:f5:af:7a:a7:1c:13:b4:a6:94:38:6d:
                    ee:f1:0c:1d:3a:03:8b:e5:b9:e3:4e:6f:87:eb:32:
                    ed:06:cb:04:5a:5d:4a:17:00:43:88:98:f6:7c:0c:
                    2f:4d:e5:37:64:1f:50:95:c2:3f:9b:e7:0d:de:3a:
                    bb:b2:94:d1:e5:cd:12:ef:27:24:fc:65:12:70:55:
                    a7:de:88:b3:71:e9:12:68:81:cc:82:3b:1b:97:08:
                    7e:59:72:34:c4:7f:d4:20:fb:a6:3f:3b:9b:2e:dc:
                    4e:f0:04:4d:b8:49:6a:18:97:f1:51:82:d7:04:83:
                    0f:c8:64:98:61:ba:c8:af:64:33:5f:df:3c:94:77:
                    8d:57:6e:4e:5f:55:2d:0f:5f:dd:f2:ea:03:99:6d:
                    50:d9:d3:f8:8c:8c:e5:75:85:28:25:44:df:5e:e5:
                    87:9d:5a:84:ba:21:e6:ec:08:31:b1:79:94:40:5d:
                    f9:1e:7a:37:a0:10:f4:a3:79:dc:69:54:94:53:e6:
                    9c:2b:a3:14:62:d9:ec:24:72:38:0c:6b:1f:19:6f:
                    83:82:da:74:1e:a4:42:1c:c9:59:f1:6e:f5:51:67:
                    4c:d5:40:d7:c5:de:a1:f0:db:d6:db:57:5f:3c:7b:
                    a1:1e:12:e4:8a:9e:3e:76:67:cc:85:01:ea:f9:2d:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:82:D2:F7:47:01:C6:D4:B5:8A:50:D3:E0:8C:95:B8:F6:CF:BA
            X509v3 Authority Key Identifier:
                keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:1e:1c:ad:34:fe:c6:f1:a9:48:56:fe:19:32:f0:21:1c:ac:
         22:b1:86:0c:aa:44:25:5f:76:2c:a7:4b:8a:56:75:76:60:13:
         2b:0e:46:29:96:a6:a7:a5:bb:59:d3:d4:27:0a:64:93:96:9c:
         01:16:86:1e:49:c7:1f:f0:f3:c5:d4:6a:bd:92:da:be:11:2d:
         9e:56:2b:d5:ea:93:7c:b0:ea:46:35:d6:36:05:cd:b5:79:64:
         e9:f8:ce:d6:6f:89:35:6c:c5:69:e3:42:66:3c:c5:69:bb:89:
         15:2b:2e:86:e5:65:37:b3:6e:0e:c8:25:2f:1a:32:48:d0:d0:
         e2:ea:db:0d:ff:a4:fb:c0:54:04:4c:89:0a:98:04:a5:b1:84:
         57:ea:7a:ff:91:df:80:4a:ad:e9:ea:e6:38:19:f5:95:f0:91:
         d9:d1:65:c8:2f:b2:fc:31:43:4c:8d:8e:7c:4f:b2:e6:88:de:
         5f:72:90:78:61:69:e1:3d:0e:ab:7b:e9:8a:29:63:6e:8f:a3:
         20:93:27:c4:b2:25:ad:68:7b:ba:c5:e5:35:28:59:95:29:6e:
         7a:f3:c2:34:dc:27:6e:df:04:2b:e5:d0:84:4f:09:3b:90:12:
         bb:6e:63:2d:1b:f7:bc:7e:a9:b1:ff:60:f5:91:6d:ac:6c:7d:
         04:42:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:26:52 2024 by rpki-client on console-ams.rpki-client.org