Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File:                     De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier:          VQVk1fi3lGkSY4dPoPK08FDhJDA7Fc+eMwFLusa22tc=
Subject key identifier:   95:18:4C:2F:25:5D:DC:50:C6:EE:7C:9E:13:92:B1:C3:AA:4F:C4:5E
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer:       /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial:       01936520707C90089353B73FD19A9FC86B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number:          0765
Signing time:             Mon 25 Nov 2024 21:00:44 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:44 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:44 +0000
Files and hashes:         1: 1-Jb5pMTHdjzL90lRBnW2HRKuSZo.roa (hash: oH6BwNZQb6essdSZtGHFA6V3yGgGc7hucBUAPamSYdU=)
                          2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: MtjoG324mE4bTSGw5PtrFEhpOiG+K7Bp2WpFSug3AOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:70:7c:90:08:93:53:b7:3f:d1:9a:9f:c8:6b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
        Validity
            Not Before: Nov 25 21:00:44 2024 GMT
            Not After : Nov 26 21:00:44 2024 GMT
        Subject: CN=95184c2f255ddc50c6ee7c9e1392b1c3aa4fc45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:91:5c:68:25:58:50:c9:3e:30:a8:22:86:
                    ba:2a:e8:07:23:83:be:6d:78:8d:e1:9c:b8:f2:00:
                    37:c0:3a:35:24:5e:32:15:13:07:80:c0:4a:60:05:
                    96:75:24:dd:81:b5:93:bf:32:0a:1a:96:3a:f8:58:
                    c0:18:6a:8f:a5:bc:a8:62:bb:57:71:63:1f:37:65:
                    da:65:a4:dd:cc:75:3a:2c:be:f9:d4:cf:48:e0:c5:
                    b0:34:0a:7c:2c:01:db:e1:19:9b:8d:ef:b0:bf:19:
                    42:4b:78:26:62:30:55:74:17:86:cb:51:0e:96:7a:
                    01:54:43:fc:1f:72:37:cb:fa:22:ef:a4:43:87:a0:
                    fa:20:30:11:f5:f6:63:ca:75:6b:c0:aa:c2:bb:fe:
                    93:db:f1:0c:42:7c:de:25:76:2c:2f:aa:a9:8f:f1:
                    0f:0a:ea:24:f7:71:90:b5:c0:77:be:d2:87:1c:1f:
                    bc:7d:55:6c:cf:57:18:5d:a1:e3:77:64:64:43:06:
                    87:6f:e5:23:c2:d9:5b:71:45:31:86:e2:7a:4f:97:
                    35:b0:29:01:c8:1e:56:dc:7b:53:d4:17:c3:f9:c4:
                    78:b5:8c:6d:fa:36:32:c6:58:7c:f3:31:46:3e:4a:
                    8e:c5:67:f9:5d:d2:38:81:31:d3:bd:88:2d:c6:fe:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:4C:2F:25:5D:DC:50:C6:EE:7C:9E:13:92:B1:C3:AA:4F:C4:5E
            X509v3 Authority Key Identifier:
                keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:1c:e7:7c:55:06:2e:6d:21:29:7d:2c:03:6e:75:aa:07:
         24:4b:0c:fc:cd:c5:28:9f:b6:09:2b:26:6e:46:48:0d:d0:8a:
         12:a6:d0:e2:eb:0c:7e:eb:92:3b:68:f2:e6:0d:a4:fb:b6:df:
         9e:a1:25:44:94:e4:75:bb:86:b0:64:45:7f:fd:54:fe:2b:01:
         ea:d9:95:5a:5d:44:7d:fa:22:20:a4:63:f6:97:3c:a3:64:ec:
         7c:34:d5:51:81:0c:40:23:a4:8a:e3:c2:d5:95:1d:db:aa:b8:
         ae:c1:bb:c6:ed:55:39:2a:a4:48:40:2d:1e:67:61:70:58:99:
         da:54:f4:7f:08:52:0f:da:66:a2:5f:f1:6f:d2:01:81:64:b9:
         81:29:d3:5d:46:55:8a:da:1a:88:67:7b:65:f4:bb:5a:c2:37:
         06:63:c9:03:4f:86:af:dc:48:9a:bc:31:f0:57:79:63:e1:9a:
         a9:3c:03:eb:fd:6e:f9:f1:43:79:fd:2c:c0:14:41:7c:db:30:
         60:48:3c:69:da:da:11:0e:c4:ba:2c:8e:f8:e1:e5:9d:b1:3a:
         0f:90:88:fb:d0:39:2b:3b:ac:23:dd:a9:7a:28:a7:ef:cb:f1:
         94:5d:6f:ba:98:a7:56:d3:62:07:84:d4:5f:0f:c9:ea:73:57:
         a7:fc:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:52:25 2024 by rpki-client on console-ams.rpki-client.org