Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          UK0AZ+ZIzKIG8Q40CNJVEP5I01On7QqcpEDyTPWZ8ew=
Subject key identifier:   84:20:E6:B0:28:A0:CA:AA:5A:0E:7C:5F:9B:92:84:3D:63:00:32:37
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       019351D0C4DA16DE584168C8646CE414B3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          0235
Signing time:             Fri 22 Nov 2024 03:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:56 +0000
Files and hashes:         1: 7FBqgA5joJU0OgIxG3vbod6wdPU.roa (hash: xfgF6p5FCkdISZGTtjTl+0bXnu1eqKTFqKWDwpI4CtE=)
                          2: GAaTy9U4y8m4PfzsFEnsk9jvWRs.roa (hash: nmtSXqheBBpEHIdK/DuZiNsuFLz3gT0vD3Fl7rn1+ns=)
                          3: drsVMIKZZFG5_1wKGYzVEExXyDg.roa (hash: yosNGfX1gKFmGBNX0Gf6qt1fP6PIk6ieKL7LVQtEGvw=)
                          4: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: SSJVsdg7sGYNtk8DPr469pwyxkTtg0yu8cmPMCRuzK0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:c4:da:16:de:58:41:68:c8:64:6c:e4:14:b3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: Nov 22 03:00:56 2024 GMT
            Not After : Nov 23 03:00:56 2024 GMT
        Subject: CN=8420e6b028a0caaa5a0e7c5f9b92843d63003237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:b2:c0:85:ee:36:ec:4c:88:0d:f7:fc:47:
                    b2:49:fb:3c:e5:d3:7a:4a:04:0d:84:43:ee:cd:e7:
                    eb:c5:7f:42:14:dc:ac:37:35:ed:d9:2d:19:77:fa:
                    cf:a0:78:17:1f:b2:d9:15:7e:e8:52:11:e7:cc:c6:
                    9f:9e:94:69:56:f1:fa:71:b0:7c:5e:1e:4e:11:ec:
                    79:af:1e:c0:44:ac:e7:70:59:06:76:f6:38:a6:8c:
                    28:87:3b:40:32:6d:a7:67:00:3a:31:d7:46:1e:9c:
                    6f:c1:ec:4e:f8:54:2f:cf:24:f7:b6:d5:3a:e5:06:
                    00:a7:16:6e:90:fb:74:25:04:9b:30:e1:f4:c8:45:
                    8b:c9:68:63:5c:86:d9:ef:62:af:9a:4d:cf:49:54:
                    04:50:65:61:ef:85:d3:7f:78:0a:38:e4:d3:1f:d7:
                    c5:d3:2c:9e:36:19:fe:51:4f:71:64:1a:6e:46:5e:
                    0a:25:d7:45:b2:48:4f:bd:09:18:0d:d3:53:20:f3:
                    5b:c9:96:e8:03:0b:f7:64:bf:bf:f5:19:12:c4:86:
                    fa:79:64:9e:79:b6:46:14:c7:5a:f2:38:dc:6c:1b:
                    3c:b8:61:38:29:34:55:cd:54:c3:ae:be:c6:f2:2d:
                    8a:35:ff:98:f0:6f:8f:df:9b:ed:18:29:9f:0c:4e:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:20:E6:B0:28:A0:CA:AA:5A:0E:7C:5F:9B:92:84:3D:63:00:32:37
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:43:f8:74:8d:e2:33:ea:86:1e:6a:8e:48:80:a2:3d:5d:
         01:56:24:59:aa:ea:29:6a:92:06:bc:e6:69:04:8c:b2:48:9f:
         b0:3a:2f:b4:18:a1:03:6c:f5:44:81:72:aa:e5:db:41:32:9d:
         cb:12:58:13:b1:79:a9:50:37:39:0e:70:77:62:88:0f:42:3f:
         62:07:a1:10:45:f0:00:f6:fe:a0:2e:55:ff:64:2a:55:37:39:
         97:70:b2:3e:53:ef:6d:82:62:2a:d6:19:ea:e1:16:89:3b:ab:
         c8:6c:e8:00:c7:26:a9:72:ac:fb:eb:fa:54:77:52:1c:a8:d9:
         c0:d7:0a:ca:53:29:22:6c:ab:ac:dd:c5:dc:77:0c:83:17:54:
         60:c2:ac:14:20:7b:e2:e9:61:50:29:bd:31:4c:81:7d:b5:98:
         11:95:99:1c:58:fc:ef:ff:5c:22:0f:8c:f8:55:5c:d5:29:10:
         06:ee:58:f7:ba:c0:88:33:42:3c:7c:26:91:c4:df:07:b6:f1:
         b8:23:b5:14:14:e9:87:3c:0a:0e:e0:16:e1:cc:0c:b5:b5:4e:
         5f:21:cf:13:c1:5e:22:13:48:6d:c4:e0:7f:59:44:46:34:da:
         e0:ab:d0:51:2e:df:96:2b:7b:6f:56:b3:d5:01:00:62:51:ed:
         5c:b1:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:48 2024 by rpki-client on console-fra.rpki-client.org