Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          6SgUCQMM4MUP4l7A0rRk12R6QcAWcZhjfytQ+70ETgY=
Subject key identifier:   BC:AE:82:D8:7C:4F:EE:B9:E4:7B:C4:69:6A:12:51:FA:76:FE:E1:96
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       019355E3CF9B8EF1491190101C805F55425A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          0E4A
Signing time:             Fri 22 Nov 2024 22:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:13 +0000
Files and hashes:         1: HKqkubg2bQVA1I2983F6IM5Zo6A.roa (hash: P4Qwe1efB2EoZJau5jyVZFTXp3n5pMn4Q98gXOBEofQ=)
                          2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: z7lWe24EGM4XcCfteDfC7CXDdDDgqqRX2OKT/ttW3CQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:cf:9b:8e:f1:49:11:90:10:1c:80:5f:55:42:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Nov 22 22:00:13 2024 GMT
            Not After : Nov 23 22:00:13 2024 GMT
        Subject: CN=bcae82d87c4feeb9e47bc4696a1251fa76fee196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cd:8c:18:99:82:d8:61:dd:cf:9d:91:14:8a:
                    33:ae:ba:f5:2c:01:cf:f5:ac:c7:fd:c7:ac:65:07:
                    0a:0b:99:e8:85:63:ec:9c:2d:66:e9:13:dc:7c:ec:
                    08:f1:08:30:bd:f0:35:ef:c9:28:bc:9b:07:28:0e:
                    4d:fe:cc:8d:e2:15:41:47:9c:af:73:70:ee:16:87:
                    44:cf:74:d6:70:06:05:d3:51:e3:18:c8:60:14:a1:
                    ef:f9:b5:ca:98:fd:a6:8f:f5:f5:09:3d:45:53:40:
                    27:6e:59:a3:7b:36:b1:82:e7:73:66:bd:d6:ca:3a:
                    d2:92:44:d1:98:fb:1d:ac:6a:fc:84:ef:a0:b3:90:
                    4a:ea:b4:ae:56:ef:83:00:94:1a:45:f4:5e:2e:38:
                    6b:21:9c:39:79:dd:a0:e1:e5:96:eb:a5:ff:60:19:
                    5a:86:f9:b8:d0:5b:21:3c:53:2e:67:83:dc:0b:c4:
                    3f:a2:fd:79:42:93:cb:c9:bf:36:18:80:bd:52:a5:
                    d0:9d:7d:bd:8b:28:73:09:63:83:17:4c:e4:a5:89:
                    51:03:4b:00:f2:a2:0a:c5:ab:c1:38:22:0d:90:48:
                    5e:16:8d:04:43:dd:76:c8:b5:ef:30:31:20:83:7b:
                    24:1b:64:b2:ad:90:29:23:de:6c:a3:97:87:95:c7:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AE:82:D8:7C:4F:EE:B9:E4:7B:C4:69:6A:12:51:FA:76:FE:E1:96
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:50:e7:fd:58:96:25:3b:93:d9:af:c3:6a:1c:a9:7e:83:58:
         e4:78:ba:d2:fd:f4:89:de:b4:c2:5b:ee:ad:a7:f0:87:b8:26:
         86:64:55:11:ff:79:8e:99:6f:d3:a7:13:d3:66:b2:52:d4:68:
         f6:82:67:76:39:cb:06:af:b2:41:5a:bf:d4:e5:cb:80:26:84:
         e3:c1:08:fe:b9:8e:e5:3c:f0:a5:5b:a0:8e:0b:a3:b4:17:08:
         90:dd:52:bf:59:8a:31:bd:02:21:a2:82:46:b3:53:34:c7:c1:
         76:65:95:6f:e5:dc:bd:65:23:97:31:b9:70:78:a7:6d:59:b1:
         01:54:9d:4d:e0:60:51:42:c5:96:f7:2b:8c:d6:82:b1:32:61:
         0a:4b:fe:57:22:22:bc:27:19:e0:3f:43:ce:df:f3:51:f3:ca:
         75:49:16:79:bf:ed:c0:0d:84:9e:9c:5c:4a:35:22:7b:4d:5c:
         27:ee:4e:3a:d3:67:83:b6:11:12:32:72:56:3b:67:02:4c:00:
         29:89:4c:7d:12:2b:35:e7:aa:e9:c4:4e:52:ad:4b:b3:bc:6c:
         b3:4e:a8:ef:8b:7b:2f:8c:1d:8a:02:c6:0f:51:b7:2d:cd:f0:
         ea:a2:62:46:dd:bb:95:49:a1:c9:7d:15:80:0d:7a:bc:93:f0:
         14:0e:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:11 2024 by rpki-client on console-ams.rpki-client.org