Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File:                     iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier:          f7zJdBtQPsxYLv73yHHP/faL0uiSKM8/ncEryybSjGA=
Subject key identifier:   4C:AC:9A:D3:AC:0B:7F:00:95:65:78:B0:8A:64:0C:30:2F:C1:37:2E
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer:       /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial:       0193572E0510AFCF2D8CE7BDE13FF7694556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number:          1080
Signing time:             Sat 23 Nov 2024 04:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:53 +0000
Files and hashes:         1: 2ApIqqjcTOXDsU5Zt2_T0FYyVd8.roa (hash: xw7JwCPd3CZyDZ905tt6CbDs4X32yFtfxG1I4dZh2Qw=)
                          2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: CVVl5UcFMhBTBTkVODLFdJpdJtDVUcFE1gUy2KhC3dM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:05:10:af:cf:2d:8c:e7:bd:e1:3f:f7:69:45:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
        Validity
            Not Before: Nov 23 04:00:53 2024 GMT
            Not After : Nov 24 04:00:53 2024 GMT
        Subject: CN=4cac9ad3ac0b7f00956578b08a640c302fc1372e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:cc:6e:32:4b:ee:e1:ce:ec:d3:ac:a8:e0:
                    48:b1:45:53:d4:93:48:f4:b3:ad:54:c2:a6:0e:f4:
                    02:65:62:15:68:c4:45:bd:40:5d:76:61:a1:2c:e1:
                    c9:ef:2c:eb:74:44:9d:f6:30:04:c6:eb:4b:38:20:
                    d4:a5:74:d6:d7:4b:2c:ec:89:ac:5c:e2:28:6c:c3:
                    6d:a1:b1:d2:76:bf:e6:50:b5:37:b9:34:e4:06:7c:
                    8e:38:90:fc:60:58:27:bb:8a:55:9e:f9:7b:4d:7c:
                    c0:47:1d:74:ed:c3:ab:a3:bc:47:da:9c:74:45:c5:
                    29:52:49:16:ea:91:b1:5a:8d:2d:5e:57:d3:82:8b:
                    0e:e6:be:8f:82:e5:26:d2:e5:24:1c:48:ed:7f:8f:
                    13:ee:31:ca:b2:3c:5c:8f:74:fc:cb:25:cc:61:7e:
                    8d:98:c7:d8:70:a4:9a:ef:e7:6a:db:2e:83:94:36:
                    12:2f:9d:06:1b:e3:d7:88:4d:2d:b3:aa:5e:d2:71:
                    2a:fe:42:b9:1d:c9:3e:f7:bc:58:0b:03:ae:44:71:
                    ff:09:06:d0:f1:1b:27:60:89:e8:3c:41:9d:d3:6f:
                    b3:1f:0e:35:34:05:4a:e4:c0:3e:31:cc:d1:93:ba:
                    ac:7e:08:6a:0c:0c:f0:ac:43:e4:de:47:75:93:12:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AC:9A:D3:AC:0B:7F:00:95:65:78:B0:8A:64:0C:30:2F:C1:37:2E
            X509v3 Authority Key Identifier:
                keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8c:47:4f:06:cd:e5:ef:4d:91:17:a4:5a:e7:0d:f4:08:30:
         a1:62:71:31:39:5d:70:a5:bb:01:4d:1b:65:91:3f:5b:51:c6:
         b0:33:3c:18:b1:53:17:b8:fb:6f:8b:86:b5:0a:55:b9:75:39:
         dc:f5:6e:cf:a0:88:1a:fd:78:82:21:cf:15:bf:d4:a3:55:1c:
         d7:b4:80:1d:3b:70:2d:db:80:99:79:e9:90:2a:27:37:e3:0d:
         61:c1:55:00:38:93:07:29:c5:11:07:39:c9:4e:7d:d5:58:ab:
         f8:ee:71:2f:f4:6b:c9:f2:74:3c:ed:69:3a:cd:46:09:10:26:
         f3:1e:0e:04:51:f1:bf:0d:03:2b:46:34:4d:d3:59:8c:0f:7d:
         5a:bd:18:08:f0:dd:09:c6:99:a6:8e:d5:6a:5f:0e:49:c7:0d:
         da:d1:62:5b:d0:e0:6b:b5:df:4f:cc:ce:c2:56:b3:63:c9:ed:
         cf:ad:23:4d:66:29:ab:a2:31:a6:8c:cf:17:13:87:7e:2f:c5:
         01:ff:0e:bf:d1:ad:a4:ae:05:ad:0a:3b:37:23:8f:f4:59:97:
         27:a3:ce:fa:6d:e3:f6:ae:76:c3:8b:b6:dd:82:ad:99:b3:3d:
         2c:9b:93:29:b0:c3:f4:55:de:01:57:ce:57:50:b2:6a:b9:18:
         fb:72:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:03 2024 by rpki-client on console-ams.rpki-client.org