Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File:                     gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier:          XD7CfqodvkHSlxPw/gMl2SJM0QLJk7bT19Y0V89DBUQ=
Subject key identifier:   88:65:CB:93:98:37:D9:76:9D:86:44:13:2C:F0:BA:A1:8F:1A:74:BB
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer:       /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial:       01923AA91829CDA7152C7BE2C6510319A546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number:          0CD4
Signing time:             Sat 28 Sep 2024 22:03:33 +0000
Manifest this update:     Sat 28 Sep 2024 22:03:33 +0000
Manifest next update:     Sun 29 Sep 2024 22:03:33 +0000
Files and hashes:         1: Pc1EFnRQMDWXb4yRbigd_qCZeko.roa (hash: 8QG7KNwdlRzyZpMXWr6HOzTCzBLOeqMdQ/z+GNtKst4=)
                          2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: HeQuoG0AItlFbtw3ZTfwbfZ4z8l2/ZnikzDVUlZboQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a9:18:29:cd:a7:15:2c:7b:e2:c6:51:03:19:a5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
        Validity
            Not Before: Sep 28 22:03:33 2024 GMT
            Not After : Sep 29 22:03:33 2024 GMT
        Subject: CN=8865cb939837d9769d8644132cf0baa18f1a74bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:3a:1e:51:ae:17:4f:94:36:9a:5d:79:0f:
                    1f:44:09:1e:27:67:fa:24:e0:c0:50:41:be:0a:25:
                    26:8a:a8:2a:3a:3a:7b:08:0d:fd:04:ad:a4:a3:f6:
                    a9:8c:69:ff:4e:ec:1c:e7:44:bb:31:12:a6:88:42:
                    17:98:cb:99:d9:41:16:1f:da:29:af:f9:73:79:9b:
                    fe:a3:d9:3e:66:a0:c9:bb:f8:a5:a8:1b:db:c5:bc:
                    e7:9b:10:1b:a0:7b:b8:ea:0c:8d:8c:17:4b:3f:9f:
                    c6:a9:39:2f:a8:b1:b1:76:1d:5f:84:82:fe:86:a8:
                    4e:17:07:b3:f5:46:f0:d5:5b:bf:c8:2b:57:d9:25:
                    d9:4c:f9:9f:a1:3b:c5:62:ab:d0:82:04:31:36:d1:
                    e5:5f:8f:c4:0a:3a:00:4d:a5:60:bc:8f:a0:06:14:
                    9b:5a:83:57:d8:af:9c:b7:e8:fb:58:eb:ec:88:80:
                    38:d8:b5:ad:ae:c3:03:fe:05:51:71:16:40:00:10:
                    81:0f:80:4d:a1:13:e9:b3:60:54:0b:cb:93:61:04:
                    44:0a:42:c3:3d:ab:f7:5f:23:fe:a7:a7:05:bf:e7:
                    4b:67:c1:cf:2a:1e:f8:5c:7f:7d:36:1c:24:92:f4:
                    0c:1d:aa:68:69:46:f1:62:eb:d0:c1:d8:3d:83:fa:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:65:CB:93:98:37:D9:76:9D:86:44:13:2C:F0:BA:A1:8F:1A:74:BB
            X509v3 Authority Key Identifier:
                keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:03:4d:63:a6:28:82:20:46:7f:80:1e:31:c1:3b:95:22:4a:
         83:df:11:c2:91:6b:1a:0a:70:6e:f4:4e:10:8e:03:cd:ba:12:
         d0:68:4d:4a:92:16:5b:dc:70:82:14:cf:50:59:29:03:0d:c9:
         7d:54:60:b9:b3:a1:55:74:81:7c:f3:1d:81:f5:3e:de:a5:0b:
         32:77:39:07:6b:3e:21:50:b9:93:9d:32:4d:64:d7:ab:38:ef:
         4b:66:4f:54:49:34:b0:80:d1:53:59:95:c0:30:0e:45:52:e6:
         ee:84:be:d2:87:85:d4:ba:4f:e9:16:e2:ff:88:8d:82:55:1a:
         cb:4d:3f:65:d8:ad:b7:f0:4d:4f:68:fe:2d:fe:85:df:17:91:
         1a:57:dd:a6:8e:de:5f:9a:6f:24:08:99:d6:03:09:59:b1:c4:
         26:aa:c7:63:42:16:5f:7f:ae:1e:77:65:0d:ae:a5:78:2d:6e:
         6b:e2:6e:e4:c5:d7:78:b5:29:1f:9d:86:ce:01:3c:04:cc:b7:
         da:44:9c:75:09:7d:33:0e:2d:c8:f6:83:6f:c8:8e:8f:67:04:
         c3:40:9d:d1:69:8d:95:83:c1:50:b7:0f:f8:6f:25:99:1f:3e:
         7f:92:71:0c:1a:c7:2f:2a:e9:25:4f:4a:9c:01:49:c0:2d:a0:
         92:81:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:35:48 2024 by rpki-client on console-ams.rpki-client.org