Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File:                     aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier:          ar61KSpsYJorjkJLdU2I89SVShoQaJZYUbjXFQ1TJmk=
Subject key identifier:   44:A8:66:B0:4E:74:A2:19:3F:B7:E0:D8:55:02:F4:E3:99:E2:CD:06
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer:       /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial:       019359C136BA9D26AABB0E38DD2F9D7C0F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number:          0C37
Signing time:             Sat 23 Nov 2024 16:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:54 +0000
Files and hashes:         1: 5ni8_slQVpEXq2JeGFq9myiVrR4.roa (hash: PvgZoQ2tVe30ctFdyyyweuBMLCj9wNCUm6KUTKoCFPo=)
                          2: QPUWXbUGz0umv7Yco8c9JmQVZ74.roa (hash: ObrkEY0e9HVkoDtWktdfXZG/YFqjkQ3f4azSdrr7fjo=)
                          3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: pY8dEAkQIWH4MSVgkbd7bNpyOsXbDnbJYgEdNPSL64k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:36:ba:9d:26:aa:bb:0e:38:dd:2f:9d:7c:0f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
        Validity
            Not Before: Nov 23 16:00:54 2024 GMT
            Not After : Nov 24 16:00:54 2024 GMT
        Subject: CN=44a866b04e74a2193fb7e0d85502f4e399e2cd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:14:31:65:ac:89:dd:71:95:66:76:54:3b:
                    ee:1a:25:e1:a9:02:83:da:63:58:a1:5c:91:57:66:
                    27:aa:22:65:bd:09:28:ed:c3:79:1e:81:3d:fc:20:
                    0e:48:c5:d7:27:76:ce:3a:e6:71:ad:df:ff:d7:64:
                    7c:c3:77:0c:24:89:31:04:85:d2:f7:e4:fa:19:59:
                    ea:3e:d3:a3:98:8c:92:f7:5a:ad:d3:a5:56:34:c0:
                    3a:ef:7a:b5:bf:a7:56:4f:b0:47:7e:12:b6:39:23:
                    70:50:32:bb:59:54:6d:16:f7:97:b0:18:78:a4:40:
                    c8:47:f5:9d:86:a6:83:ea:8a:60:b9:dd:28:8f:1a:
                    81:c7:24:cc:57:06:cb:6e:68:92:cf:76:2c:f6:d3:
                    e3:1f:9d:4b:13:82:d7:5c:b8:e9:d6:e7:45:e4:af:
                    1a:60:04:43:e1:02:fb:6a:2e:d0:bb:c7:7a:6e:ca:
                    b7:73:b4:60:f0:5d:4b:b7:30:48:35:6d:dc:30:e7:
                    38:17:bd:c8:6c:3b:4a:1d:fc:32:7e:f9:53:a2:37:
                    99:7e:ca:e3:28:c2:82:32:e2:ee:d7:70:5a:69:eb:
                    58:7d:2c:9b:a9:ce:b9:6b:3f:03:bb:07:7e:08:f7:
                    ee:2f:c4:9b:f7:3c:9c:33:32:7c:47:4b:62:21:6f:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:66:B0:4E:74:A2:19:3F:B7:E0:D8:55:02:F4:E3:99:E2:CD:06
            X509v3 Authority Key Identifier:
                keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:a0:53:90:6e:20:47:8d:af:50:56:c2:3a:84:ed:ea:42:
         ea:87:e4:63:2d:5c:db:fb:65:53:3a:0e:4e:6f:d1:aa:68:97:
         c5:01:ae:ed:18:c0:03:4c:c2:10:e4:79:27:c8:0a:28:4b:7b:
         63:d0:54:86:a2:a9:c9:2b:d2:53:91:04:e3:bc:1d:ba:2c:e5:
         c2:65:d4:fd:9d:27:78:28:2f:a7:24:e0:42:3e:46:06:ab:f4:
         cf:42:fd:ef:2a:25:09:50:14:f5:27:e6:8d:12:1c:a5:94:32:
         a3:b5:8f:49:55:7f:32:73:06:eb:f5:8c:90:de:c1:c0:50:59:
         4f:7b:56:ff:9e:99:6f:c6:09:d2:85:ca:8e:ea:c4:5c:f2:bc:
         f5:a5:90:76:86:3d:f6:0a:38:f3:86:c3:b3:bd:d8:21:65:a6:
         13:52:ed:da:b2:af:f6:ef:e3:5f:ee:36:e7:99:ba:5b:88:c2:
         88:f2:a4:29:e4:88:26:f7:ab:a1:45:3c:ce:48:7f:5b:1e:0b:
         fb:8c:f9:9f:e2:7b:c0:47:28:b0:f7:ea:4a:fc:ac:bd:0c:e5:
         14:af:89:8c:c1:00:eb:b9:73:d7:9f:88:8b:9d:77:34:15:a3:
         ee:be:76:8a:c5:8c:6c:ea:3c:7b:e6:86:73:b7:6e:73:52:3c:
         2a:ae:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:16:25 2024 by rpki-client on console-fra.rpki-client.org