Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File:                     M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier:          YKvcv1gsLCPc6/6vX38o33JTPSCoxx/8ZzRIG36/rKg=
Subject key identifier:   63:F3:37:59:71:61:14:8A:77:54:CC:EA:2C:38:94:8C:FA:F0:CD:3B
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer:       /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial:       019359C0E5EA64BC29A1D9E3A210CFC78D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 16:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:34 +0000
Files and hashes:         1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: MXn39Twd2Lqh6tyHsxgjZie3SIG+4dqL+yRwHd+FCS4=)
                          2: mevJRdOZ166MQUr_uRI7fI7Kruk.roa (hash: mak6S+xAs84BGBMmnKemSmK7J9U3dvKD3pVC9QlL9dU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:e5:ea:64:bc:29:a1:d9:e3:a2:10:cf:c7:8d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
        Validity
            Not Before: Nov 23 16:00:34 2024 GMT
            Not After : Nov 24 16:00:34 2024 GMT
        Subject: CN=63f337597161148a7754ccea2c38948cfaf0cd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:96:be:9c:0b:fd:3a:c2:5a:74:d4:0b:e8:a0:
                    ef:4b:6a:fe:19:6c:70:21:86:cd:a2:4a:fa:c9:78:
                    db:74:4d:06:b9:8d:b9:fa:b9:11:b0:49:58:46:78:
                    d5:51:c2:2f:80:13:8f:40:59:b8:c7:59:09:29:b7:
                    00:41:1e:9b:1a:05:cc:54:a8:8e:66:d9:e1:40:77:
                    74:91:d6:87:57:7e:3a:51:ad:e4:ad:14:05:21:8a:
                    59:bc:e8:2a:74:a2:96:ea:8f:9a:07:f6:b9:98:b1:
                    bb:0e:9e:03:e4:ee:e6:37:6e:f2:c4:e8:46:10:cc:
                    61:98:88:d9:4a:12:4c:16:19:47:47:e8:28:89:9b:
                    f6:0f:c3:ee:93:dd:a9:8c:28:46:c4:a6:d2:46:12:
                    0d:36:e2:a4:7b:cc:37:01:9e:b0:a5:9a:e8:0d:dd:
                    7d:c0:3e:8f:fa:a6:04:a7:3f:e2:64:47:84:22:59:
                    8d:07:1f:78:0b:7b:07:c1:ca:5a:5c:97:06:57:45:
                    28:65:a0:36:16:5d:f8:71:a7:b2:95:c1:6e:80:d9:
                    1b:fc:a2:44:43:88:55:57:01:ad:34:25:e2:f3:b8:
                    93:99:d1:eb:04:41:41:a5:28:37:71:8b:68:94:04:
                    b1:b9:52:8c:28:32:09:a9:2e:34:66:45:1f:21:36:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F3:37:59:71:61:14:8A:77:54:CC:EA:2C:38:94:8C:FA:F0:CD:3B
            X509v3 Authority Key Identifier:
                keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b2:42:3f:a4:6f:34:96:0d:10:b5:40:d3:f0:30:87:aa:c2:
         50:0b:ea:e7:d8:13:c1:7c:03:2f:41:8d:b9:ca:29:39:e4:ac:
         76:94:92:cc:fe:12:21:6f:6a:07:0c:44:b2:1a:8b:93:38:bc:
         e7:97:a9:be:1b:63:78:b2:f4:e2:02:c4:50:d6:d9:1d:3e:08:
         34:24:89:45:0f:e3:22:48:58:f2:8d:27:31:9f:18:df:44:03:
         ef:93:a8:c1:25:26:44:b7:b7:3f:3f:34:93:90:b7:1c:c5:3f:
         23:f4:43:1c:d1:82:71:56:b3:08:82:f4:59:19:82:86:d3:d5:
         c0:6c:2c:df:1b:13:3f:bf:06:90:e7:9e:d3:cd:25:4a:79:e4:
         1f:0b:9c:9a:f8:ef:d2:04:18:cc:a0:12:b7:12:b8:e8:86:c6:
         00:42:ec:59:04:e6:38:ad:a9:f3:61:f7:fa:08:a1:a8:52:99:
         68:dd:44:f1:fe:3f:2c:cc:fc:60:6a:af:c7:54:ed:60:52:5c:
         10:5d:e0:ee:15:67:2f:82:a4:72:56:5f:92:21:8b:6f:84:0c:
         62:b6:44:20:4e:26:cb:32:1a:ee:20:91:62:22:e2:2a:c8:e3:
         b5:5c:14:65:44:79:ac:00:fd:de:e0:7a:62:ea:22:16:d5:8f:
         a6:86:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:46:06 2024 by rpki-client on console-ams.rpki-client.org