Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File:                     clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier:          35Ivlzpp0Mq6IsCwofq2T+fEtGvnKDlRdfvZE2oNvcw=
Subject key identifier:   C3:F2:A0:E4:5E:97:AF:89:DD:E7:49:2F:45:50:13:82:DD:93:A5:50
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer:       /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial:       01936AEB3DFAFC456F3905B1AF20CC972B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number:          1378
Signing time:             Wed 27 Nov 2024 00:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:21 +0000
Files and hashes:         1: 1-cMSnjcnTD3cRvpzOo_BYkVKaS8.roa (hash: JEfBhk//IRq8lCz0uwj2qykoePP9Hegi26qXx7s/O+Q=)
                          2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: V5EwVIXMLyGfTTvoj3tQR3qxtLeJL9tR0Mn98iM/NbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:3d:fa:fc:45:6f:39:05:b1:af:20:cc:97:2b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
        Validity
            Not Before: Nov 27 00:00:21 2024 GMT
            Not After : Nov 28 00:00:21 2024 GMT
        Subject: CN=c3f2a0e45e97af89dde7492f45501382dd93a550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:73:ea:6c:56:bb:e2:a4:eb:f9:e1:7f:2f:
                    14:3d:e8:37:bb:80:2d:10:0c:21:27:47:07:3d:71:
                    93:75:f5:d6:94:d7:c8:08:fe:1b:80:55:73:38:29:
                    36:f0:24:42:7a:d1:f0:1b:10:a4:46:53:2e:0c:60:
                    78:cf:81:9b:63:6d:2d:b5:41:8e:9d:c3:be:22:e8:
                    12:0c:5e:9f:91:3c:5b:01:11:11:a4:a2:6c:ec:bf:
                    e8:f5:32:a5:2a:60:9d:a9:b1:8c:28:d5:44:4b:dd:
                    b8:66:a4:ba:02:70:f6:9a:29:64:34:5a:5d:18:d7:
                    9c:04:01:9e:ae:6d:00:78:f3:16:ea:c9:f3:26:d1:
                    fc:f5:8b:12:4a:92:61:c1:bb:4f:fe:bd:e8:db:19:
                    54:4e:96:c5:cf:8e:eb:3a:12:fb:cd:c6:a5:f1:8b:
                    de:bf:c8:2c:6f:20:ee:98:7a:88:1d:27:1a:0b:3c:
                    72:23:15:f5:4f:27:00:d1:7b:04:ac:43:82:cd:4d:
                    59:28:29:e6:89:58:10:b9:38:d4:f8:47:94:19:e3:
                    06:7a:0a:26:a7:3d:c2:43:ce:2c:71:b3:4d:63:2a:
                    f0:80:40:ad:7e:2c:53:d2:35:ce:99:cb:a8:09:c8:
                    42:b2:47:f6:c4:1d:ea:7f:7f:48:b3:3a:90:e6:fb:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:A0:E4:5E:97:AF:89:DD:E7:49:2F:45:50:13:82:DD:93:A5:50
            X509v3 Authority Key Identifier:
                keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fa:0b:98:13:db:06:47:ae:ce:8c:6d:1b:45:02:70:db:55:
         83:39:a8:f9:21:a0:37:ed:da:16:fc:d6:47:f1:f0:cc:7e:5a:
         8c:fa:17:e2:1f:5f:0e:bd:36:b2:21:a5:c8:ad:72:d3:3c:ab:
         54:a2:b1:56:50:d3:47:30:7b:80:77:53:a3:c4:5d:84:69:62:
         91:ba:19:c7:3d:0e:a2:1f:4c:c0:45:f2:7d:77:4e:f7:04:68:
         f2:a4:cf:f1:3e:e4:ca:51:d9:b9:f0:18:53:3e:78:a6:b5:c0:
         00:88:d3:89:ae:58:b0:38:b4:9a:75:1b:45:d0:75:c4:71:a5:
         8a:c7:40:02:32:55:5f:79:30:2a:23:eb:e7:d0:8e:e2:9c:5f:
         83:11:20:e6:5d:0f:f3:0e:55:9f:c0:c2:f6:05:f1:31:0f:0e:
         d6:cf:34:2e:ac:f9:f4:7f:f3:3f:a6:0c:5b:b0:c3:20:9f:49:
         de:dc:4f:e2:b7:1c:b4:7a:88:f2:44:a0:04:f8:8f:14:db:73:
         d5:b0:d3:3d:91:46:8f:02:26:9b:df:41:b2:59:19:39:ff:02:
         e8:52:ba:5e:18:df:8b:c4:f7:5e:cf:39:e2:e3:4e:22:19:a0:
         4b:69:e1:87:a6:bf:a3:98:cb:98:b4:83:f9:26:f4:8d:33:a8:
         71:9f:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:34:48 2024 by rpki-client on console-ams.rpki-client.org