Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          GB0njIqNPe0+IdxxWKtPnxYpoTHK2gPsXHA6wAuqueo=
Subject key identifier:   DD:3B:60:0F:70:76:92:B2:5E:0C:BF:B1:6D:ED:77:E2:26:E7:FD:D5
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       01935274F802434F873FE3161D9F5F1A5AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 06:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:17 +0000
Files and hashes:         1: JFAksREzHfKWE-vWu8p-pQx8dss.roa (hash: JwmWmWL8U9xr7JAfG+lAQmGDozJvEYtB8YQneBwcR5g=)
                          2: QJZZm1l8HlG4iLfHYInW9Vp9K1g.roa (hash: Q9J+gRipddUXliNqsKRpg0v8hfnYfmMUiLuS0wdAkc4=)
                          3: kFG1tA7PUSiD5rm2IQPzl3T0SUU.roa (hash: jFthIR3RUFnj4V87P0OWZMUK8Lw0wqIdffJMsZHtOBk=)
                          4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: 0kWxnKb0iiX6v/jLgCfgE75VqYL52ERFw02LKbsLt2E=)
                          5: njDFCxBB9Jq348Rqi-_btcrpiyg.roa (hash: uKkjOqhNgEIZ5dWcL1sPgaJuJs2jkb6NQtR86g9ny1s=)
                          6: p2VaB0rWtVxoiIio1x05HW1LtrM.roa (hash: ymyH8If0K727RJLEfbjCQd70DBvGYf8Mn0pA4eYeQMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:f8:02:43:4f:87:3f:e3:16:1d:9f:5f:1a:5a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Nov 22 06:00:17 2024 GMT
            Not After : Nov 23 06:00:17 2024 GMT
        Subject: CN=dd3b600f707692b25e0cbfb16ded77e226e7fdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c7:f2:f7:64:45:0a:25:08:85:c2:13:44:7d:
                    92:67:e3:99:68:09:37:b1:04:c9:2c:30:80:af:a9:
                    6c:52:b0:f4:0c:d5:d3:86:bd:ce:6d:f2:0a:6e:ba:
                    ac:f6:88:65:42:39:ab:eb:16:3e:3b:fc:d6:73:dc:
                    d4:cc:be:ce:d4:8d:5d:ee:b3:5d:d4:c5:e8:6a:9f:
                    cf:cb:26:3b:8c:59:78:b7:e9:c3:a4:94:34:02:76:
                    48:6b:03:af:52:e6:1d:94:75:bf:c6:4c:49:08:b7:
                    e3:05:df:fd:9e:f8:8b:a2:7e:1e:47:69:cc:2d:ed:
                    93:7f:a2:c1:63:b9:b9:ed:ce:8d:31:7d:d7:a0:c9:
                    7a:e7:9f:87:73:c2:a1:a9:1f:0f:d9:ad:5d:b0:3c:
                    0c:68:72:1a:67:e2:0a:5f:19:39:56:95:f9:35:b5:
                    7f:32:9d:a2:1d:60:2d:88:0d:7a:60:3a:76:30:5a:
                    b7:54:c1:a2:76:9f:19:18:c0:c6:a5:a2:a6:ce:1a:
                    b0:9d:46:38:b8:2a:72:67:f7:bb:01:4f:0d:b1:da:
                    1d:69:8e:6f:ee:7b:41:d4:cb:c4:b0:27:a5:11:24:
                    90:c5:57:4d:fe:ba:ba:9e:ce:60:71:06:c4:ae:86:
                    cb:4f:c1:37:05:d0:94:08:dc:30:ce:7a:3a:56:41:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:60:0F:70:76:92:B2:5E:0C:BF:B1:6D:ED:77:E2:26:E7:FD:D5
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:dc:ac:40:fa:2b:18:80:09:a6:4b:40:61:b5:98:b1:89:96:
         09:0f:70:ad:37:20:c0:41:d3:d0:d2:55:cd:07:47:1b:e4:a8:
         e6:68:6a:2d:2f:99:cb:9f:b3:9b:d4:8f:60:ba:15:4b:8c:a6:
         4d:e7:b8:de:a6:c5:af:93:31:af:12:40:04:5c:43:2d:a6:46:
         c9:47:ce:c7:47:02:60:11:72:8b:20:ac:19:d1:0c:8b:16:35:
         54:15:6e:b2:59:e9:7a:cf:d3:47:f9:f5:80:3a:6f:f6:aa:5d:
         bf:91:98:c9:93:0b:f5:ce:2d:9a:52:5e:a2:3f:5f:4a:f5:e0:
         2d:0a:bb:a8:08:03:10:6e:4f:d1:26:5b:be:83:22:be:03:7a:
         c6:19:cd:32:a0:ad:f0:c1:82:28:99:04:17:25:02:37:e6:98:
         c2:86:fa:57:7b:dc:be:ec:4b:ac:4a:4b:c9:5f:d9:68:87:30:
         a6:76:eb:39:09:da:86:be:9d:eb:04:07:d1:2b:ff:01:82:10:
         d0:57:13:7a:33:8f:be:9f:b0:57:51:91:10:48:ca:19:a9:74:
         a4:0d:52:3e:5d:2a:80:86:d2:be:3a:32:1a:b5:10:12:c1:f7:
         87:b2:30:11:fb:e9:54:dc:2d:31:bb:26:57:5b:c8:d8:49:0a:
         3d:fc:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:07 2024 by rpki-client on console-fra.rpki-client.org