Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          DsM5OWI00ZDYYZD3TyQMmryNTLPs+tNIs7ToCTkyBB0=
Subject key identifier:   A2:A7:3D:CD:BB:D5:14:56:AD:5C:5C:89:F9:57:43:43:A7:8E:7B:74
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       01935274DD933FB4E843DB062DE2A8F5D865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          137E
Signing time:             Fri 22 Nov 2024 06:00:10 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:10 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:10 +0000
Files and hashes:         1: 0fXAfiDiimY4sxxoLNAc8hoKGQ0.roa (hash: K63qJHPsG3/UbhEX9+BEWEQmi+gemIWIVmWRP2FR7sk=)
                          2: Olshw3Vzn2gGc7qtkq9-W3AN0QE.roa (hash: udwO1hSK+9vBo2Q4G+ImGz7YyfCEnc+Ijuq4m0cmAKo=)
                          3: YOGvghFVMgiL4YNFyP6541rUXQs.roa (hash: noiaDyeso25N2waO6qxANNwe5UbcqtdVm+khGfAck8A=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: rwUmAAL4cozLVGgZt+5ArYutxkL2hR4xdxfQc2LF9ww=)
                          5: r0DYgnUeVdObisiIwNF7n-tVeLE.roa (hash: r+gndHoYrUj2cKGFo0r2rmQc+ZJPHgxc02PRb+433AU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:dd:93:3f:b4:e8:43:db:06:2d:e2:a8:f5:d8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Nov 22 06:00:10 2024 GMT
            Not After : Nov 23 06:00:10 2024 GMT
        Subject: CN=a2a73dcdbbd51456ad5c5c89f9574343a78e7b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:97:ae:ad:da:23:1a:31:4f:d0:df:24:fa:
                    9d:7c:a3:26:8e:04:c8:94:72:61:e1:ff:b4:80:52:
                    19:a0:43:43:b1:ba:6d:16:d7:da:db:b1:48:71:fb:
                    bb:b0:95:bf:93:f1:a9:cf:f0:a0:89:c8:09:ab:a1:
                    d9:4d:be:fa:9f:4c:44:cd:4f:d5:6f:c1:1c:c8:9e:
                    c8:a3:d8:65:ec:b0:33:0c:54:5a:f8:61:0a:f0:5f:
                    57:de:1a:4c:d5:44:ad:ca:99:57:dd:6b:db:14:c7:
                    8d:7c:04:09:8e:16:1c:f6:6c:28:34:73:73:9d:55:
                    eb:36:9c:72:c7:01:2e:95:ed:b4:30:d6:73:7f:d1:
                    a9:83:e8:2f:03:ae:a0:32:c8:72:45:5a:04:a8:e6:
                    b1:53:01:8b:5a:81:d4:fa:b8:4e:91:14:4e:d9:1e:
                    68:86:84:20:7e:0e:f7:ed:0f:0a:89:c6:b0:91:9e:
                    ba:8b:82:87:09:16:05:1f:bc:6a:1b:2a:ca:28:ba:
                    24:c6:61:9e:2d:49:91:06:fa:a9:cc:70:9b:7e:c3:
                    59:58:6e:db:6f:9d:64:16:66:f5:d3:a9:55:32:a2:
                    1a:77:a7:53:55:f1:fb:b4:5e:f2:76:0a:ce:72:c2:
                    e0:49:8c:1c:46:77:d8:a0:96:fc:80:54:33:9b:ee:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:3D:CD:BB:D5:14:56:AD:5C:5C:89:F9:57:43:43:A7:8E:7B:74
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:05:bc:91:e4:bc:23:54:65:cf:20:b2:e1:2f:de:a6:10:31:
         d4:a7:a6:ec:1d:3b:e2:c9:b3:59:8b:da:fb:bf:08:9c:21:1b:
         4f:96:d9:f6:28:a6:9e:2c:f6:bb:f1:d4:ea:16:8a:5a:3e:5b:
         79:61:04:eb:f2:53:cc:45:e1:6f:5d:a6:d0:22:42:d9:a3:8d:
         4e:6a:1c:5e:7b:5b:c6:4b:48:f1:81:51:85:71:6a:a7:e3:1d:
         26:cf:4c:09:83:79:87:97:31:cb:74:13:e4:f4:b7:d0:49:c9:
         8a:fd:9d:c4:23:fa:7b:69:a7:43:b0:d7:ec:90:e7:c2:2f:01:
         36:9a:ec:d1:1d:41:44:4a:52:69:55:44:b0:3b:3a:2f:b4:b3:
         bc:69:74:aa:a3:c5:98:fa:01:38:a4:5f:b5:4a:48:c3:27:0b:
         87:a7:02:0e:33:e5:f5:7b:1c:e7:52:a6:98:09:b8:0e:5d:a9:
         79:1a:08:49:c3:cc:0e:f0:2b:b6:31:a1:51:01:b3:d7:4c:4d:
         a9:bc:21:19:ea:83:6f:6b:46:87:f2:04:0f:cf:ee:67:f0:ad:
         43:19:31:70:0c:90:fa:d1:70:34:6f:19:37:4a:41:b3:91:9b:
         58:83:81:9d:a5:ee:b4:5e:55:4c:9f:d1:01:0f:45:1f:fc:9e:
         65:16:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:21 2024 by rpki-client on console-ams.rpki-client.org