Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
File:                     tSU8JVLUQD9DuDwl52IjjfEtroE.mft (raw, json)
Hash identifier:          fxn5pO5vwijaTegDsqPsfpW9XQcRa2MvJBCtihmyr1I=
Subject key identifier:   27:47:86:0F:2D:65:B7:82:73:5F:9F:D6:CB:F8:67:FB:41:7D:B0:6F
Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
Certificate issuer:       /CN=b5253c2552d4403f43b83c25e762238df12dae81
Certificate serial:       01935689C42604371DF14BEC575306BC9BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
Manifest number:          0454
Signing time:             Sat 23 Nov 2024 01:01:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:29 +0000
Files and hashes:         1: gGNDydExXawK92_dfDIgh-FkfKg.roa (hash: LoGerMEUS4RC48RvTQM3Pgw1At8q26SA1veQABn3NCI=)
                          2: tSU8JVLUQD9DuDwl52IjjfEtroE.crl (hash: r6frrGlieuM8/FrNqSrIdD8mH+cdzz2Af8Bav0zD+bQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:c4:26:04:37:1d:f1:4b:ec:57:53:06:bc:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81
        Validity
            Not Before: Nov 23 01:01:29 2024 GMT
            Not After : Nov 24 01:01:29 2024 GMT
        Subject: CN=2747860f2d65b782735f9fd6cbf867fb417db06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:07:a1:02:4c:c4:bd:f1:88:71:28:f7:9e:
                    6e:5a:a4:82:84:42:b8:56:07:87:0e:9f:7e:bd:e6:
                    06:e3:0d:b2:ea:5b:ec:be:26:81:ff:34:b1:d2:17:
                    de:85:f7:22:91:d3:1a:19:c3:a3:e8:70:d0:e3:a2:
                    fd:81:98:4f:eb:42:bd:c4:e4:96:39:3a:89:7d:ff:
                    22:82:6c:f7:d7:7f:73:27:6c:df:1f:09:bb:27:a5:
                    90:a3:18:e7:7e:5d:1f:08:6c:a6:94:5c:8a:2c:14:
                    26:0f:71:99:1a:4f:b8:46:61:e4:f3:ad:48:e5:f5:
                    a4:a6:52:b2:83:cc:49:a7:bd:86:92:bf:aa:76:65:
                    aa:41:04:c3:0e:e0:a9:b1:5b:67:fd:78:0c:a7:6e:
                    91:9d:b0:27:d3:65:14:c1:a3:00:71:07:8b:a9:d6:
                    78:fd:c0:8b:cf:1b:85:1d:aa:8b:f6:e9:22:57:60:
                    13:4d:ca:30:c5:6a:b6:2d:e4:69:96:0f:88:7b:fa:
                    0f:89:8d:b0:8c:9e:98:83:e4:ac:fc:64:0c:79:a9:
                    e2:6e:8b:2e:41:8f:4e:67:77:8b:c2:e0:bc:25:da:
                    88:4f:37:93:1e:74:fe:9f:b2:12:bd:72:56:73:92:
                    72:7d:c6:58:48:d2:ad:d8:58:e3:88:72:55:01:6e:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:47:86:0F:2D:65:B7:82:73:5F:9F:D6:CB:F8:67:FB:41:7D:B0:6F
            X509v3 Authority Key Identifier:
                keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:d7:8b:de:1a:ad:4e:1a:12:7a:b1:79:2b:84:09:b0:cc:
         30:12:e4:a8:96:b4:a3:d1:99:0e:d1:85:eb:b8:5a:db:80:33:
         ff:bd:2e:ff:37:61:df:18:14:b9:dd:0f:64:6d:d5:d6:38:9b:
         aa:dd:1b:00:c5:42:ce:ee:ec:91:44:df:ad:d6:10:b1:b1:8e:
         f4:3a:69:29:64:36:55:e6:35:13:67:87:8d:a9:69:0c:08:be:
         fd:e5:c1:15:91:f1:20:0d:68:52:ac:77:45:ac:ef:dd:0f:65:
         87:30:89:7e:64:38:e8:7a:9f:91:d6:01:07:ae:a1:ce:88:75:
         bc:c0:99:3b:6a:4b:6f:de:70:33:5d:7b:51:81:02:3a:34:7f:
         f2:a7:8a:55:3d:17:9b:33:ee:8c:55:fd:2d:16:04:3f:25:f0:
         b8:f6:36:42:61:73:0f:d3:c2:83:b8:05:0c:e5:c8:ae:94:4c:
         fa:43:e1:60:9e:e1:10:48:cd:8d:25:bc:49:42:31:ad:c3:c4:
         01:96:2e:86:46:80:42:4f:44:b5:05:0f:5d:48:16:de:0d:98:
         73:52:84:ac:fa:26:19:cd:78:fe:8e:c2:9a:a1:9c:cf:18:7b:
         de:a7:b9:0d:88:bf:e6:f6:dc:b1:75:47:5f:17:86:2a:f2:b2:
         45:9c:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:37 2024 by rpki-client on console-ams.rpki-client.org