Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File:                     _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier:          YpCnYPxF1Q7rx6dElOV1H9kfC+Tt16Wqsz0tuQIYkpU=
Subject key identifier:   07:47:9C:DE:C3:1C:5C:4C:07:AA:43:05:9A:6B:6F:E6:4D:10:FC:B9
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer:       /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial:       01935689EE9267E8B40801E42642A71D2B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number:          0AAA
Signing time:             Sat 23 Nov 2024 01:01:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:40 +0000
Files and hashes:         1: 1-SxgM-XZml2g2QfUmkiz1GeqxlQ.roa (hash: +UaiY1UJcfYsrliyl4rrpX92CDuTKXqo2eYQEKMvwO0=)
                          2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: pcNLVGvDkqvEFuICJK91shhXQ94oZa7gdZJ76NVAJCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ee:92:67:e8:b4:08:01:e4:26:42:a7:1d:2b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
        Validity
            Not Before: Nov 23 01:01:40 2024 GMT
            Not After : Nov 24 01:01:40 2024 GMT
        Subject: CN=07479cdec31c5c4c07aa43059a6b6fe64d10fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:cf:c9:e6:b0:79:62:62:6b:38:cb:9e:47:
                    28:8c:ab:5b:9e:96:80:fe:b1:f3:da:e2:a6:ca:2f:
                    25:88:34:fa:f4:e5:a7:7b:90:21:ca:1d:f8:c6:85:
                    a8:6a:2d:f7:e8:e3:fe:e9:e0:68:46:2b:1b:59:ef:
                    ee:b2:52:6f:58:27:3c:cf:ee:b9:60:9c:c5:bf:95:
                    06:2f:5e:c0:13:0d:e1:ab:32:26:91:3a:91:97:b2:
                    7c:a5:e9:62:1a:9d:87:a9:77:d0:06:6f:f9:bc:7c:
                    97:43:89:5d:35:ee:94:e5:42:0c:50:2b:fc:47:32:
                    36:ed:7e:43:d2:c2:c5:21:3f:51:9a:7c:28:c6:e8:
                    38:cb:28:e1:f4:29:9b:93:54:be:bf:23:52:f6:3a:
                    cf:d9:da:bd:a5:95:b2:21:cd:4d:7a:57:4d:f2:3f:
                    24:78:20:67:79:0f:8c:64:3f:ac:74:cc:74:0f:a2:
                    e0:1c:e0:59:33:51:48:15:12:f0:d9:5a:12:c7:70:
                    72:ef:b8:e8:7a:ef:12:d9:49:89:bc:f9:84:eb:fc:
                    d8:03:41:f9:2e:81:d1:7a:9b:c0:73:00:bd:39:21:
                    50:4f:a7:6f:db:fe:41:0f:42:75:80:31:ad:87:cd:
                    e7:e5:18:30:98:e1:0a:df:cb:25:dc:e4:c9:42:00:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:9C:DE:C3:1C:5C:4C:07:AA:43:05:9A:6B:6F:E6:4D:10:FC:B9
            X509v3 Authority Key Identifier:
                keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:a4:8a:2a:38:ee:64:1d:de:40:2a:8f:d5:7e:fc:e6:38:
         0e:58:ff:3f:f3:67:79:45:7b:73:82:ca:af:9f:8b:ca:dc:1a:
         d9:e3:70:93:0b:6a:cc:17:0e:9c:86:c3:b9:e9:0c:f1:d8:51:
         28:33:40:8f:d8:28:43:cd:d6:7f:80:cd:79:8d:1a:ad:1b:98:
         f7:84:9c:07:a7:21:85:f6:24:d1:54:b5:84:82:8a:38:14:54:
         5e:ab:63:49:86:02:ee:af:f1:9d:24:1c:d0:6f:c6:b1:5a:a0:
         94:36:d6:ff:00:04:b1:7e:c1:ff:d1:de:38:a6:2e:4b:c2:2b:
         37:bc:2d:77:ed:aa:1b:4a:d3:95:ad:6d:6a:f1:45:c5:6a:22:
         1d:c0:d2:64:84:fa:9e:7d:b9:9d:ba:cd:a0:cb:b4:25:db:8b:
         8a:57:f5:74:e8:8d:a7:88:74:3c:2e:78:66:69:6b:dc:82:59:
         e0:35:f9:7e:fb:24:50:c6:c8:aa:a6:20:1b:40:95:ae:89:63:
         37:35:a9:18:b3:db:28:f8:4f:5c:80:92:ee:4d:72:6d:a4:cb:
         07:aa:ba:13:be:af:24:66:ae:78:04:0a:aa:b3:1c:2f:8e:2b:
         6c:09:7d:a1:9a:3d:7f:7d:8f:21:3e:95:7e:77:c3:4d:a2:15:
         59:e5:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:17 2024 by rpki-client on console-ams.rpki-client.org