Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File:                     0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier:          nujN69IquQDd3dHi/9nkxLtlmruiPDspTjPhkQs3JVM=
Subject key identifier:   73:EF:E8:BE:5E:45:AE:8D:91:80:DA:8D:F6:8E:80:2F:EC:EB:C9:2A
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer:       /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial:       0193557609691B7F2ADFD0A75F23BC9D66A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 20:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:19 +0000
Files and hashes:         1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: xmwxiM6FXQWJwqyhAN/0KMjW7+Ca7xv/3MrnNqC7HhI=)
                          2: pBy_9CUrxWbSzufnAMCbZdDye9Y.roa (hash: j0RR9ZWkbfZe8B6h9u2p1ZesZGv8Cq9FOQ4lQfYSvGo=)
                          3: shNnNjloR7Iz3DiaNG6lkBqbkAQ.roa (hash: TfNw11sammT1kKhJ2mulM+QWwSHai8l2yvGCPJ+v2dA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:09:69:1b:7f:2a:df:d0:a7:5f:23:bc:9d:66:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
        Validity
            Not Before: Nov 22 20:00:19 2024 GMT
            Not After : Nov 23 20:00:19 2024 GMT
        Subject: CN=73efe8be5e45ae8d9180da8df68e802fecebc92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1b:b4:0f:89:34:5e:2d:75:51:67:6d:e7:08:
                    4d:fc:f3:90:54:68:ed:12:dd:1b:0c:84:e9:b2:9c:
                    75:ad:33:3f:43:9a:3c:44:60:40:63:f5:18:a7:a1:
                    9c:9d:0b:11:67:f8:7a:29:e5:6c:75:3c:54:90:0f:
                    58:3e:94:23:7c:51:ff:af:16:8c:93:f3:91:7f:62:
                    21:99:36:8f:87:34:e2:33:cf:93:44:fd:91:6e:ca:
                    b6:d5:bd:96:0a:b6:37:ff:d0:0e:d3:60:0f:3c:04:
                    da:5b:a7:cd:3f:b0:7c:57:90:01:b6:70:ed:bc:94:
                    a2:df:20:6b:7d:a9:c0:f7:f6:f2:3f:d0:a9:1e:d9:
                    04:b6:df:3a:d7:a0:7c:b7:9a:f1:d4:a8:2f:63:2e:
                    4b:da:14:15:91:61:b1:4b:a3:0a:4a:be:e8:cb:9c:
                    1b:77:9d:8c:8f:4b:40:2f:1f:2f:48:79:b6:d5:d8:
                    5a:c0:74:ec:b2:2f:fa:ed:a2:c6:4b:76:2c:2b:18:
                    69:20:e2:07:93:23:94:fb:46:0e:a3:a2:10:47:3e:
                    48:f6:6d:82:a4:b7:4b:c3:1c:8c:0f:3c:6b:cf:04:
                    05:29:aa:a1:d4:86:07:62:35:c7:4f:ec:ff:45:ab:
                    9d:63:62:f0:0d:36:78:e6:cf:18:4e:20:ad:bf:20:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EF:E8:BE:5E:45:AE:8D:91:80:DA:8D:F6:8E:80:2F:EC:EB:C9:2A
            X509v3 Authority Key Identifier:
                keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:88:aa:38:34:8f:d8:d7:69:6e:fa:df:92:42:ef:a4:d9:
         0c:2a:d7:87:ef:7f:cf:8f:1b:14:f3:90:e3:83:34:3d:4a:86:
         3e:c0:6f:14:01:1b:a6:28:ee:6c:95:d7:b7:e9:eb:52:6e:fd:
         ba:75:c8:4d:a5:0c:15:dd:c8:ce:8b:25:52:db:9d:6d:d1:9b:
         33:a4:e0:a2:46:7c:30:50:39:c1:c9:33:39:13:74:bc:3c:3a:
         27:43:42:80:7d:34:b5:35:20:e2:d7:d0:cf:f2:a5:72:f9:02:
         0a:f3:0d:ad:6c:34:5c:36:54:5a:53:c1:9a:ac:54:cf:f3:e4:
         a5:54:8b:f4:d9:93:3f:bb:f0:b4:61:29:19:34:89:12:84:52:
         52:ee:90:e7:ea:5d:46:f7:b8:08:ec:71:a1:18:04:3d:b7:02:
         d9:bc:b2:f7:af:78:12:52:1e:d6:eb:90:5a:83:b2:ba:cc:98:
         26:b2:e1:d8:d2:21:ab:30:5a:c5:c0:8d:54:be:eb:66:16:dc:
         08:87:74:a1:1a:4d:f8:e0:78:63:1f:9d:45:09:28:b8:3a:9e:
         b4:be:33:73:71:2b:35:d4:76:ec:2a:a4:b3:71:18:6f:e6:f6:
         37:7c:f2:f4:e5:25:93:35:e4:af:b2:e8:e0:ab:b9:fa:8d:ea:
         0c:d6:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:10 2024 by rpki-client on console-ams.rpki-client.org