Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          rgEbLie5SievfFySHs4UPvmD2ScdpXTu2B1rALbyMiI=
Subject key identifier:   70:4E:D2:C8:26:A7:CE:89:EB:84:3D:E3:48:22:3D:C0:06:7A:6C:1A
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       019358405BA13044BC35375AFF86185BFB85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          1379
Signing time:             Sat 23 Nov 2024 09:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:32 +0000
Files and hashes:         1: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: ow1ZilC8qyfloa32DtRCV+Gw3UY4MLmGORXIhjjrI0k=)
                          2: hMxBKpXDTvdljAKNliO82noDc38.roa (hash: DcaNjReeYsDogGwge/1Dpnjl4OYw+CO+sXNROvZ5fy4=)
                          3: wdWBYsX97xSggayvWwgWPDmETG4.roa (hash: 6WBkcqD5FJq11YdP972XDmHaJ0RthZ+48R2S4iVgBEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:5b:a1:30:44:bc:35:37:5a:ff:86:18:5b:fb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Nov 23 09:00:32 2024 GMT
            Not After : Nov 24 09:00:32 2024 GMT
        Subject: CN=704ed2c826a7ce89eb843de348223dc0067a6c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:4e:33:c1:08:89:42:4c:db:e4:3c:0a:24:
                    69:7a:d0:d1:f7:dd:9b:29:0a:14:f4:de:ea:cc:2b:
                    6b:25:6e:b1:85:b8:fd:9c:a2:a1:24:b5:8d:03:8d:
                    b3:c7:58:65:6e:1d:03:48:2d:55:32:68:6a:d8:f5:
                    6b:e1:5c:15:cc:59:b0:26:cf:41:db:bf:7c:20:09:
                    df:bf:29:fe:8b:f0:cf:aa:2f:4c:cf:c6:e1:9f:ac:
                    98:4c:b5:f4:20:1d:5f:e0:e8:8b:8a:4d:d3:9d:69:
                    16:57:05:be:b9:8d:d4:c7:0b:e7:6f:fe:79:d3:34:
                    9d:ab:59:a0:76:aa:7b:4f:6c:d6:5e:b6:73:7c:64:
                    43:75:b7:c5:9f:28:91:e8:60:fe:23:1f:f1:e6:1b:
                    cd:9a:f3:56:c6:41:45:6d:3b:20:13:99:28:ca:69:
                    7b:0a:c2:8e:a4:1d:53:c3:1d:df:91:f7:86:e6:04:
                    2b:1e:3b:0c:66:78:cc:be:65:bc:15:31:19:72:40:
                    14:17:61:3b:99:24:4e:c4:ac:43:81:14:98:34:51:
                    bf:1e:c4:3e:72:bd:b5:ef:f5:3f:02:d3:87:56:84:
                    5e:d7:0a:29:15:79:af:01:c1:41:7e:52:1d:85:ea:
                    15:20:f4:c5:55:12:5b:38:d2:5b:99:d4:0f:fd:66:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4E:D2:C8:26:A7:CE:89:EB:84:3D:E3:48:22:3D:C0:06:7A:6C:1A
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:75:99:2d:de:2a:f2:05:6d:bd:fe:31:1d:f1:c2:f9:24:
         8a:37:48:17:84:47:f2:d4:3b:fc:94:af:e0:be:c7:e1:67:0c:
         c3:76:62:ca:30:fc:62:5c:45:a2:49:d8:94:8f:69:bb:23:ab:
         36:ca:b5:81:bf:2c:24:c5:6f:65:a0:3c:8c:44:97:e8:07:c6:
         24:52:5f:8b:44:99:c3:91:8c:52:62:d2:8c:67:80:c5:0a:9e:
         58:4a:01:e1:fc:13:1b:a0:fe:79:c1:b8:f2:9a:df:86:ae:b9:
         aa:95:da:d6:fe:41:6f:f0:b7:90:0d:cb:af:d4:3b:53:24:bd:
         1f:ea:b3:a6:48:4d:ad:24:48:86:4e:0f:66:6c:62:cb:e8:96:
         b5:1a:c3:d1:d5:18:0f:49:56:e2:59:65:83:f0:8a:52:f8:1e:
         56:84:40:f7:b7:74:da:aa:2d:07:94:cb:fa:84:94:02:00:50:
         50:d2:a3:9f:f2:c8:2d:4e:9d:52:63:3b:0e:32:59:7d:23:2c:
         88:d3:08:bd:61:50:73:fd:83:2a:12:04:3f:4b:5f:b0:12:12:
         3d:69:54:68:b3:e2:c4:04:96:91:5a:f7:c5:6c:4d:69:1e:09:
         7c:8a:df:e1:3a:c1:4c:d6:dc:24:2b:ac:0f:6f:c0:7d:5d:e7:
         ec:2c:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:01 2024 by rpki-client on console-ams.rpki-client.org