Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File:                     h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier:          XFMx8e8SFF0lmwwHoJuR6PnFf5xLIIwwtEu4/XpogVI=
Subject key identifier:   F4:8A:FC:13:5E:86:A2:D9:66:93:51:91:70:88:02:41:BE:31:10:36
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer:       /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial:       01935877712D57458DE128FFEC869E0DEF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:42 +0000
Files and hashes:         1: LiewAAUvicFJKCrP4WH8UxAjm1c.roa (hash: 3cbka5Qm2gmTAxMAX2EOyHj7CkanPOhD1+Uf0osW7cE=)
                          2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: P/ie4ooq0hevN+kxJX7EFN+EsCLvOcfoW226zXdShL8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:71:2d:57:45:8d:e1:28:ff:ec:86:9e:0d:ef:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
        Validity
            Not Before: Nov 23 10:00:42 2024 GMT
            Not After : Nov 24 10:00:42 2024 GMT
        Subject: CN=f48afc135e86a2d96693519170880241be311036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:f5:3a:42:76:8d:5f:6d:1d:66:c5:ce:c3:
                    d6:82:59:59:c3:c0:36:f7:93:b9:a0:56:21:92:a7:
                    56:45:a3:df:67:69:50:22:84:d6:27:79:4a:5a:10:
                    39:8d:88:bd:59:a8:4a:69:05:3b:29:30:14:a8:dc:
                    95:4d:13:68:6e:4b:e1:15:d1:34:58:9a:94:94:46:
                    4c:01:3e:bc:f9:fb:09:2e:67:e7:c0:7c:80:fa:28:
                    1a:77:3f:95:09:65:ba:20:d0:d8:e3:1b:3d:f1:9e:
                    a1:a4:55:87:8b:ce:8e:19:ba:45:40:d7:b5:d5:ad:
                    cf:34:46:82:59:17:92:36:ac:b7:23:eb:39:a1:57:
                    5e:a4:99:45:02:5a:7b:b3:df:38:5d:ac:de:5e:c3:
                    90:bd:41:8c:4a:68:6c:71:47:97:5e:04:50:13:dc:
                    a5:f8:d8:98:02:3f:f4:1d:27:fd:8f:07:5e:b8:dd:
                    d7:cc:c2:f9:cd:20:71:55:a9:1d:f4:8c:7b:2a:87:
                    79:be:55:ab:d0:df:1d:13:1d:74:c1:35:c6:ed:f6:
                    d3:19:16:3e:b0:98:37:8c:43:59:ac:ad:6c:15:85:
                    50:45:a7:5a:a0:e0:3f:a0:7d:66:c0:ce:f5:63:2d:
                    69:b8:56:95:b1:ff:a0:77:3e:18:2d:8c:7c:a1:35:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:FC:13:5E:86:A2:D9:66:93:51:91:70:88:02:41:BE:31:10:36
            X509v3 Authority Key Identifier:
                keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:af:74:82:cd:f4:d7:65:17:60:4a:01:61:2f:0f:2d:0c:
         be:b5:b1:6a:9e:c4:d6:31:95:1e:16:a6:5f:08:0a:c3:05:79:
         68:bc:bd:b1:cd:48:38:a1:17:da:f7:1f:f8:db:53:ba:3d:16:
         87:69:35:cb:01:be:63:4d:91:96:f2:11:24:e8:d4:8d:f6:c4:
         0a:f7:08:00:91:3e:65:1b:2b:be:1e:98:cd:29:ca:a2:c9:f8:
         1f:56:10:cd:be:cc:1d:4d:84:47:6c:10:4f:ef:91:cb:11:71:
         af:eb:72:32:bb:c5:45:ae:42:72:62:68:34:4a:6d:cb:66:51:
         2b:ce:69:c5:17:19:2f:1a:b1:a0:7b:ce:ff:3a:b2:97:62:4b:
         61:00:fe:ef:0c:9c:78:5e:9a:b6:fc:8e:6b:fb:e3:eb:93:5a:
         ce:fb:70:ab:de:3c:3a:17:13:33:2e:b7:93:30:83:c2:d2:de:
         ff:55:78:5a:b8:9b:c6:b0:7d:d2:dc:08:e1:0a:17:6b:9e:3f:
         37:fa:61:8c:cf:a9:e9:0c:38:fe:b4:6a:61:9c:59:8c:40:74:
         ec:9e:f8:3c:b5:b4:40:30:e4:26:32:57:ab:ff:ad:9c:7a:07:
         e1:63:ba:6e:5b:88:93:9c:f7:f1:0b:1f:5e:7c:47:c4:8e:bd:
         58:ea:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:57 2024 by rpki-client on console-ams.rpki-client.org