Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File:                     j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier:          cXfdQWCOL9uBWr/F+Ow5Vi4ZDMsjt5BkwehoFvgTRT0=
Subject key identifier:   E4:2D:7F:52:B5:67:84:19:AD:CF:90:05:7C:EF:DA:C7:77:DC:08:B4
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer:       /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial:       019358E5176A4E1CC92EC1EFF57903979201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number:          1261
Signing time:             Sat 23 Nov 2024 12:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:28 +0000
Files and hashes:         1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: cyV/ZCSnCtDfv+1VFlVoyYRaPStAcq7w7c1uj1/JJzM=)
                          2: qgtq4qjPNRaeqiIhL7iMX5UgxjY.roa (hash: ejfzT6QHwwUBuid3QX5+qPb90YMMs83grq6fzVRv97s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:17:6a:4e:1c:c9:2e:c1:ef:f5:79:03:97:92:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
        Validity
            Not Before: Nov 23 12:00:28 2024 GMT
            Not After : Nov 24 12:00:28 2024 GMT
        Subject: CN=e42d7f52b5678419adcf90057cefdac777dc08b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:73:ef:8c:61:ea:af:3d:ec:58:d1:5b:48:7e:
                    03:a9:ec:65:f8:8a:ea:c4:92:81:08:26:81:c9:2f:
                    8b:e5:9e:65:69:6d:e0:71:75:e8:7a:19:c5:50:c8:
                    4e:49:64:d7:f2:2f:82:7e:60:3e:7a:8b:d9:5c:2b:
                    09:39:1d:f8:d9:1b:45:59:62:0c:79:46:0b:99:af:
                    8a:1a:c8:2d:b6:77:0e:8e:b7:4e:0d:fd:2e:18:44:
                    f0:3d:b8:a2:a5:15:7a:58:45:39:77:50:7d:51:94:
                    7e:a4:2b:90:38:95:11:b5:95:2e:f0:0f:66:f3:a0:
                    6b:f0:ce:ad:56:47:b8:95:05:3c:94:48:59:90:25:
                    22:5b:4b:8b:26:28:2a:d7:b7:b8:e8:1e:73:c0:f6:
                    a8:3e:e6:57:d4:fe:2d:4f:28:8f:cc:e0:10:d1:a4:
                    d4:76:b3:2d:96:59:18:2d:c9:25:43:54:f7:a3:ed:
                    e2:80:87:b2:31:2a:a4:90:ad:9c:c3:99:1a:e2:27:
                    d0:4d:10:11:2f:fe:9d:1d:87:9d:49:51:63:0d:71:
                    f3:1a:b4:82:9d:38:11:f4:03:c6:0a:6b:3c:1b:02:
                    48:71:6b:42:e7:43:a7:76:ae:23:4b:18:0f:0c:71:
                    81:46:56:a4:51:d3:d0:1f:05:24:a9:53:9f:ff:c8:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2D:7F:52:B5:67:84:19:AD:CF:90:05:7C:EF:DA:C7:77:DC:08:B4
            X509v3 Authority Key Identifier:
                keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fb:e1:b5:26:9f:80:4c:fb:78:d4:95:c8:46:79:6c:91:bf:
         89:24:c2:3d:7a:f3:ac:ba:5e:6f:33:db:be:80:59:19:07:84:
         05:8b:74:a6:63:c7:92:41:a2:37:c2:5a:db:0b:5e:8e:45:16:
         77:a5:1e:7d:5f:7b:c6:38:47:5b:39:5f:ac:a7:b4:0a:58:c8:
         53:2b:e2:e1:80:fb:5c:46:b2:68:bc:24:cd:44:13:bc:44:ec:
         b9:45:74:dd:c0:df:49:c1:49:dd:2f:4b:2b:16:4d:0c:76:cf:
         bf:d6:70:c6:d6:aa:12:88:62:a8:d5:ff:c2:4a:1c:87:5b:c1:
         ea:73:29:ba:e3:ba:cc:6c:4e:02:0a:88:8f:df:92:c0:aa:18:
         5d:91:36:73:ae:8d:08:d2:42:e6:52:31:29:bc:35:0d:b7:e2:
         80:28:86:ce:99:89:e6:e2:5b:08:df:ce:53:a2:27:06:c4:da:
         2a:16:8a:da:44:33:f8:1f:4d:76:f4:7f:34:7c:6b:16:60:28:
         f4:1f:72:a4:a9:70:41:3b:92:fb:c6:ab:9d:ba:fe:6f:46:7b:
         36:a9:a6:61:42:22:79:52:9c:ec:75:e5:83:97:f8:c4:15:78:
         02:8c:f6:18:7c:f7:11:e6:5a:b2:b4:d6:ef:a8:8f:c3:e2:43:
         c1:c4:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:49:02 2024 by rpki-client on console-ams.rpki-client.org