Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File:                     _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier:          bsyXDV/BlSFIwiII0AClg/+x59DQngpt2IPP88UOIlA=
Subject key identifier:   3E:BA:AD:A8:37:7B:99:36:A4:01:AD:09:81:9B:FD:34:C0:00:0B:86
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer:       /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial:       01935989CCE46EA79AE89590B6ADFB425DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 15:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:23 +0000
Files and hashes:         1: T1Dlx4OKk-IXpmvytrFtwuSR2VE.roa (hash: wS0OhvHBaznvLkuA2M3oGiI5weMZCQKu520KRL/Isl0=)
                          2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: ciOf8+8hQ5IxHRoAzTjGHAxPD+BZy+nTra2mbEqX/SA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:cc:e4:6e:a7:9a:e8:95:90:b6:ad:fb:42:5d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
        Validity
            Not Before: Nov 23 15:00:23 2024 GMT
            Not After : Nov 24 15:00:23 2024 GMT
        Subject: CN=3ebaada8377b9936a401ad09819bfd34c0000b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:a8:01:1a:b0:43:3d:77:f0:cc:2f:52:5a:
                    dc:61:e9:cc:29:88:0b:7b:79:08:9d:ea:3f:1a:2f:
                    14:61:48:51:63:ae:6f:fb:a3:1e:32:c3:74:4d:58:
                    33:44:16:3c:28:d0:e3:74:05:c6:03:dc:89:23:a5:
                    12:e7:46:58:c0:fe:01:41:3e:ba:e9:c3:0c:11:5d:
                    eb:33:d6:1d:3d:32:e2:e6:da:e1:3f:5c:cb:b7:0d:
                    89:36:a5:63:4e:e0:02:7a:66:25:38:a4:60:a4:c3:
                    f6:17:6f:d9:30:df:88:22:02:ed:b8:a7:6d:96:38:
                    15:80:76:82:f8:87:20:d9:7e:70:6a:6c:29:d4:6e:
                    99:cd:df:36:22:eb:ac:c5:90:08:6b:23:64:d1:3c:
                    71:26:38:48:6e:02:81:0c:29:47:85:43:61:1d:11:
                    7b:c4:93:2a:48:36:f4:fe:28:ee:b0:0e:13:8f:10:
                    be:f5:81:b7:b3:dc:40:f1:1f:30:14:d4:64:76:81:
                    09:1e:a4:3f:db:dd:7e:49:e8:e5:9f:0d:d0:52:b5:
                    f7:fc:a1:18:9d:0d:0d:67:eb:a1:05:97:3d:aa:37:
                    bf:35:86:e8:be:29:56:12:0d:b9:13:02:a7:93:63:
                    8f:ea:61:a4:7e:7d:93:47:d6:c6:8d:16:a7:ef:e6:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BA:AD:A8:37:7B:99:36:A4:01:AD:09:81:9B:FD:34:C0:00:0B:86
            X509v3 Authority Key Identifier:
                keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:f5:d8:5a:fb:f6:e0:31:69:aa:34:8d:03:44:22:cb:b5:
         c3:49:a7:55:99:6d:dc:ae:3a:48:dc:26:55:35:cb:8f:aa:8b:
         0b:12:ba:d0:e9:f0:0d:2c:1c:cf:18:dc:b3:27:21:ef:5b:05:
         90:30:eb:f4:ae:7a:1d:a8:00:dc:51:ef:07:b2:3f:ca:dc:62:
         9f:94:ec:6f:ad:f5:9b:0b:e8:2e:00:1e:e8:e9:93:c8:2d:53:
         df:91:de:02:fc:28:ba:4c:8a:df:eb:aa:5a:d6:ff:bf:45:b0:
         60:d1:2e:81:d1:d9:65:3b:71:aa:9e:24:80:3b:a2:bb:91:dc:
         89:6c:73:a7:55:ac:8d:57:93:b7:49:d6:ea:31:b1:ce:0a:19:
         6a:0e:63:97:8d:86:37:f1:1f:3e:6f:7d:20:be:cc:62:4d:89:
         dd:41:d5:a4:ed:85:d4:59:ca:09:06:c2:46:4e:06:13:38:45:
         67:fa:eb:60:4d:6d:05:40:a2:31:31:39:41:24:70:6a:61:ee:
         93:8e:f6:e6:29:8e:21:53:fa:56:e8:92:d4:2b:8f:86:1b:9a:
         d3:10:32:a8:e0:a6:9f:3b:fa:2f:ee:ae:11:20:07:c4:d7:5e:
         b3:99:5c:38:2c:02:80:eb:8d:b7:c8:cb:41:7b:5a:9e:20:d2:
         63:24:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:56 2024 by rpki-client on console-ams.rpki-client.org