Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File:                     1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier:          ayBzpSD8viUg8c7s8wpMn3S1lwAjc3z0APA7aw14aIM=
Subject key identifier:   AD:46:99:C9:5F:87:84:9F:90:A7:2A:64:B9:D6:AC:FB:83:31:38:38
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer:       /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial:       0193568B1DC52C67FC309D555486996AE58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number:          1303
Signing time:             Sat 23 Nov 2024 01:02:57 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:57 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:57 +0000
Files and hashes:         1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: tKST+plorHhaLWTuM8kcJHMnkuEIotieGbs8uyQ8kAU=)
                          2: aNw7RphYrcET8rUdg1vnUXMk84I.roa (hash: Am1nAEsFUi7djWtEscMChAudrTP0klFcSN3TojBdnKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:1d:c5:2c:67:fc:30:9d:55:54:86:99:6a:e5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
        Validity
            Not Before: Nov 23 01:02:57 2024 GMT
            Not After : Nov 24 01:02:57 2024 GMT
        Subject: CN=ad4699c95f87849f90a72a64b9d6acfb83313838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:07:41:55:26:ae:ab:e7:da:69:b3:ef:69:
                    4c:19:1d:36:3c:12:f8:70:39:e3:f3:e5:3b:25:db:
                    58:f4:01:65:db:75:87:a3:0a:98:26:db:19:27:93:
                    88:b7:f9:e5:a7:4f:1a:0b:f9:c1:a8:12:55:75:67:
                    52:b0:bd:86:1b:87:6b:86:6b:72:09:61:b8:0e:76:
                    65:be:18:60:3b:ae:fe:44:6e:89:0d:eb:2e:86:d0:
                    0f:99:0c:46:6b:c7:23:e2:86:91:16:c8:72:b4:45:
                    53:ca:6b:9c:45:ab:9e:9f:7d:34:98:4b:0e:58:9c:
                    d0:67:5a:27:1f:b5:22:b8:c8:5d:a8:68:e5:2f:13:
                    44:0e:a2:ff:d7:df:29:38:b8:33:aa:26:b8:d4:04:
                    41:c6:90:56:cd:ea:71:64:9d:4b:de:1a:79:0c:7c:
                    8f:54:08:4c:de:05:c4:8f:6e:b5:1c:ce:5b:e3:4f:
                    67:75:51:70:0c:cd:f4:49:b5:8d:9c:12:06:12:20:
                    aa:88:93:3a:74:af:91:b1:16:1a:28:80:74:a0:d6:
                    53:1f:8f:c0:ce:80:1b:f8:6e:24:86:53:d0:6f:e4:
                    54:79:7e:7e:cd:c4:6f:7a:22:61:ed:9e:7f:b0:a4:
                    2d:09:03:b4:f1:28:b1:d3:58:9a:37:db:93:5a:ae:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:46:99:C9:5F:87:84:9F:90:A7:2A:64:B9:D6:AC:FB:83:31:38:38
            X509v3 Authority Key Identifier:
                keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:62:62:1c:b3:12:07:2e:54:47:8f:53:f1:0e:dd:09:c6:
         9c:19:72:40:c3:e3:e9:52:64:d1:e4:5e:61:a6:7a:b5:ae:5e:
         c7:c2:d6:e6:fc:43:d2:e6:7b:5e:27:83:01:ec:60:52:d7:d2:
         73:ef:17:ef:7e:b2:9b:70:03:6c:9c:b5:64:3e:76:cc:8f:73:
         1f:f2:d6:1b:47:7e:8e:45:cf:83:2e:69:c3:68:c8:6e:44:3a:
         3e:61:95:54:24:21:3d:30:34:42:64:fd:6b:69:9e:3d:7d:42:
         a9:6c:9f:60:7f:dd:23:d8:56:86:c6:1e:5f:c1:78:9d:24:c9:
         27:1e:de:cc:02:60:83:e3:14:a3:39:5c:d0:dc:2e:42:eb:7f:
         eb:2e:ff:33:14:99:0d:21:ea:43:b2:bd:de:e6:a8:e9:77:8a:
         32:10:3d:3b:34:ce:da:80:6b:04:91:29:48:c6:7d:e1:1e:65:
         fa:e4:90:d1:ec:33:68:fb:d4:49:28:92:be:8e:ab:d2:fd:e6:
         08:91:95:02:98:bf:23:12:60:56:dc:b6:a4:78:c5:5a:6e:16:
         30:cd:cc:a8:11:1b:3d:5a:9a:48:de:28:f6:60:7b:77:57:2a:
         62:02:5a:62:c4:03:51:cc:d4:5e:e1:cc:48:d6:4d:e2:e1:c2:
         a7:9d:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:06 2024 by rpki-client on console-ams.rpki-client.org