Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          H4htS29JosJ9iQmLqYQadC594CDrk//t0HMsKayUpAo=
Subject key identifier:   E6:8E:30:88:C8:1F:16:A7:C0:35:9B:C9:CF:25:30:C1:41:12:24:BB
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       0193640E7240CEDE5963C2A4444E232D1B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          1181
Signing time:             Mon 25 Nov 2024 16:01:28 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:28 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:28 +0000
Files and hashes:         1: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: v5r57vwLQpjSU3rZ/9TcNevdqowt4beI11GpRhMxg7M=)
                          2: DlOXCOU6u6PZeyteLZp4ExTBfRk.roa (hash: qf8UQeQhMup+ZnEw0nGaL6VDCc6G3K3vCBFokWj5S4E=)
                          3: KfJG6UDlNmdfbd4cgrrjUEgUEhE.roa (hash: QRIC7/ZIvUD/C27X6h7f5+sNHrFCE5tZfvVqKBYQ0c8=)
                          4: LmihitQQrdtCcAgMkqmYopIVVbs.roa (hash: tPdIiakJ1IDzwEGz7b3/5N2fG6aZ3NU/wXWE5jHxWF8=)
                          5: O6ZneyXcmBuSuDgqQSLcpApbdws.roa (hash: Ru9PCjwBGm8J5hNGI/77sp6es8NuLMunNCAea2pDdsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:72:40:ce:de:59:63:c2:a4:44:4e:23:2d:1b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Nov 25 16:01:28 2024 GMT
            Not After : Nov 26 16:01:28 2024 GMT
        Subject: CN=e68e3088c81f16a7c0359bc9cf2530c1411224bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:4c:e0:60:d0:22:a4:3d:59:67:fd:14:d8:
                    21:da:01:5b:8f:21:c7:1f:c2:71:35:3a:4b:f8:0f:
                    93:0a:ff:85:01:ad:16:04:05:a9:c7:14:ad:51:52:
                    cd:b1:df:e3:98:04:69:60:85:a4:f9:fc:a6:0e:56:
                    9f:14:f4:63:0c:8e:ff:cb:d4:b3:d1:3c:d7:ee:b1:
                    ca:71:28:ed:98:a9:93:32:f1:73:fe:8f:31:e4:37:
                    de:b7:8a:8a:ba:24:e0:51:1d:fb:64:7f:e7:fb:9e:
                    98:50:66:4e:f4:0e:b6:e8:7f:72:cf:e5:b1:d3:ec:
                    6d:35:aa:4a:8a:b5:93:60:43:2a:f7:89:95:8b:62:
                    ce:98:6c:fa:9d:91:41:e6:34:26:22:21:68:ca:64:
                    d3:f3:49:e8:d7:bd:76:00:44:06:22:5a:e6:5a:4b:
                    a6:50:71:34:8f:c3:19:2f:f4:88:09:08:0c:59:f5:
                    5e:38:4f:5a:d1:00:10:c4:78:5b:1d:de:6e:fe:c8:
                    a7:9c:35:16:00:f9:de:a4:b6:7d:5d:be:cc:77:87:
                    0c:cb:ac:9c:40:5d:43:e2:b6:3c:b7:23:4b:00:4e:
                    83:dd:08:ed:6f:9e:74:72:10:c8:bf:b3:89:db:01:
                    82:4b:f7:02:9c:12:8c:c6:fb:78:96:19:37:0f:c2:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8E:30:88:C8:1F:16:A7:C0:35:9B:C9:CF:25:30:C1:41:12:24:BB
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a8:df:b7:49:0c:6d:5b:96:e3:f6:37:ee:56:42:fc:9f:db:
         2a:5b:bd:26:dd:ee:b0:44:82:52:7e:6c:0d:66:47:53:f5:31:
         63:00:45:2d:95:dc:0e:d1:05:5d:3b:29:c7:48:07:40:5b:e2:
         94:dd:8f:a1:68:61:6c:c6:ad:85:c1:d8:8a:f9:d3:bf:10:aa:
         c5:a6:b0:34:13:b4:eb:ac:32:4a:84:8b:58:bd:c0:5f:89:08:
         c3:fb:17:8e:2a:d9:3a:40:70:f4:6c:95:9d:49:d0:b0:ad:e2:
         ac:48:a4:53:1f:b0:1a:dc:03:53:19:98:36:57:a4:01:78:43:
         a2:6b:52:b9:23:e7:7e:81:57:b9:99:2d:ba:54:33:e7:50:16:
         a8:d0:cf:ba:94:34:8f:e4:e0:4d:84:29:9b:57:d5:a8:23:2c:
         09:63:ab:f2:29:1f:88:c2:96:fb:99:a6:2e:00:70:1f:b1:69:
         e4:57:c5:7c:9f:82:79:6a:d7:4d:19:de:cd:f8:b1:87:df:98:
         dd:9e:70:69:cf:d5:cf:49:ef:38:13:e1:23:98:8f:a1:21:7d:
         d1:d3:8f:67:59:2a:60:76:18:f6:80:d5:64:99:67:91:51:71:
         c9:c4:03:8e:43:fb:1a:6f:5f:0d:a0:ae:17:9e:98:bc:ac:a6:
         9a:d3:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:47:21 2024 by rpki-client on console-ams.rpki-client.org