Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File:                     G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier:          4mL0QxkOV+tbFygXruljPvFO0u7+zgnLuy8ZXhVW9zw=
Subject key identifier:   7F:6D:2F:8D:2E:87:4D:94:76:D1:98:91:1A:70:C8:FC:6F:EE:74:EC
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer:       /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial:       0193640E8F35F1F274B5635A8910DCBD8145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number:          0F4C
Signing time:             Mon 25 Nov 2024 16:01:35 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:35 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:35 +0000
Files and hashes:         1: 4H_0LDcB0uqiWR96COsCXUzjlmc.roa (hash: 99ELlRZ8r0KzcCajERUtuHFA2JgDcldtUIOtMi9qSgQ=)
                          2: DR9neCuYo1plJyMD8Bhf0z2QBNc.roa (hash: Xgp3SGWDuclIDuZkVTnJ/1pymw5hHbez0X1WSf3Suu0=)
                          3: FumMNyw1gstotfvd-i7eDdJb4Lw.roa (hash: YBMEcarKvySnA6efZ8EaPLTNRHAnYvo0pJRdw1YMY/Y=)
                          4: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: EgWhJZav3Ayrt7x5szsAo0qRGUQ8N8ZK4cU0rTRtsYc=)
                          5: J0BcmXGCs65cVSWLk97lm8TYdks.roa (hash: xQfsRK+Z+ikweprnMQmj5Z8Phxazcj98pXaLRey7oa8=)
                          6: P3m25CQUDYU6VebS0UhAlIQINLM.roa (hash: UfIEaYZCG30kxshbHDUTRnllpmdvH5qb953I/JNPB+o=)
                          7: PQhmBBiaToLXMqE-blwy8mxtOh0.roa (hash: vAZEqFBk224KSwZyRLSCm0xqt/jnZQMMhRNoSHDuMcA=)
                          8: SKw-u9vl5h7n9hHGurToMPojS6s.roa (hash: oM6sCN/QXfB6aAtbjS7uw1uoFqYV6lZLI4z7e40bB6w=)
                          9: WWNpFy7pVvF3CIehv_8s4h9A5CA.roa (hash: DnCodq9u8Ij9JDxbJbdEF2Vfb4j39tq/+28+xjV+YLA=)
                          10: sGetRY41AMrl0iEX5-a6PSQnDV8.roa (hash: fWoyTgN4XgELISzdxk2CSax2AcUTUYgN1hUeLTA5R9A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:8f:35:f1:f2:74:b5:63:5a:89:10:dc:bd:81:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
        Validity
            Not Before: Nov 25 16:01:35 2024 GMT
            Not After : Nov 26 16:01:35 2024 GMT
        Subject: CN=7f6d2f8d2e874d9476d198911a70c8fc6fee74ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:9a:aa:70:64:10:fa:30:97:fa:74:6c:be:
                    c7:0c:32:59:43:51:13:f4:46:c1:b9:a1:ec:bc:c5:
                    83:89:8c:f0:b3:11:48:3c:23:8e:49:1a:c7:3a:a2:
                    ec:b1:81:3e:6a:0e:8e:24:ea:30:1e:c5:e6:d5:94:
                    02:42:dd:66:fc:fb:c4:ac:72:17:d1:c0:68:7d:6b:
                    59:45:31:61:cc:b1:e0:3f:ab:e6:21:ab:15:dc:b1:
                    be:98:4b:1c:e9:1b:66:f3:2e:0c:b8:d5:30:dc:b2:
                    c6:06:7a:a9:0f:9d:bd:60:b7:71:4d:27:47:12:d1:
                    f7:c4:0a:a1:a7:e3:ed:dc:0f:6e:35:62:9d:e0:fa:
                    ea:1a:8a:00:f3:1b:2d:67:f5:3e:30:76:fb:26:2b:
                    05:6d:d0:36:41:bc:73:1a:6e:a6:aa:1c:8d:2c:3f:
                    ab:65:1e:75:dd:63:53:6e:b3:d3:13:66:ae:02:28:
                    0c:15:cc:d2:27:4d:1d:f2:78:05:47:27:8c:92:cd:
                    ae:fb:8e:31:fc:74:52:09:b5:71:a2:39:ad:f9:b1:
                    7c:e7:29:d2:d8:a3:fc:91:39:8d:31:c6:41:fa:2b:
                    e5:a1:b2:51:59:51:c8:fe:73:d5:94:3d:f6:86:dc:
                    27:64:f8:5f:70:04:e0:f1:f7:96:a9:de:2d:54:e9:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6D:2F:8D:2E:87:4D:94:76:D1:98:91:1A:70:C8:FC:6F:EE:74:EC
            X509v3 Authority Key Identifier:
                keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:9b:72:aa:49:19:72:d6:95:83:37:b1:0e:46:9a:c3:53:
         a5:63:96:5a:8f:36:36:1b:e9:60:a8:f4:5b:b2:b7:6f:7e:ff:
         4b:fb:3c:2e:13:a7:e7:da:d2:07:73:5f:44:d6:61:3e:53:da:
         9f:ca:13:6f:ad:cc:23:20:1a:28:13:86:69:ee:fe:86:26:11:
         0c:62:d2:fc:75:c8:ab:2e:c7:1d:a9:39:49:3f:01:94:d5:4b:
         b2:69:ed:b6:97:ee:fb:b6:44:ed:49:26:a0:79:c4:9c:10:67:
         21:81:3a:6e:1d:cd:7f:a3:aa:6e:4a:4b:e8:b0:66:96:4b:92:
         b1:01:fc:38:ed:80:fc:d9:5f:33:f3:d3:d6:1b:5e:21:1b:45:
         40:9a:76:6c:aa:06:14:61:56:21:b7:6c:7a:ff:be:d0:16:61:
         b2:e4:b9:d8:df:f0:f6:63:02:c1:90:b7:4c:52:49:c4:e8:12:
         49:78:53:26:00:6c:24:b6:0e:1a:bc:1e:2d:0d:55:a4:2a:5a:
         2b:d5:6b:33:c0:4d:0f:85:c4:21:0b:5e:d2:fa:4f:7e:18:ef:
         16:66:46:75:21:2d:92:36:3e:c2:f3:f9:46:3f:29:94:33:23:
         18:3b:20:12:6d:14:03:1c:85:fc:d1:ad:c3:3f:fe:d4:d3:7c:
         e7:80:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:27:54 2024 by rpki-client on console-fra.rpki-client.org