Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          Fm4F5JzoHfJb8Z1L1DIdNFpi7iEJgqSJ7HWFUpqoiiM=
Subject key identifier:   0D:FA:E5:0A:22:5E:EF:6E:AA:AE:20:02:BE:B2:E6:A6:D9:B4:AB:8B
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       019352ACDA373EE07212F78CE53BB0DD9CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 07:01:20 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:20 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:20 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: xinTtS+oZR/jYrzTlyPVWkXpCMxYLTembyUq4eIDVe4=)
                          2: 2nL0RuNnVof_eR4JXYeWcfTWHKE.roa (hash: ii1xy9H61dc7eJuIIrP38Q5ZtAN32ErmgGdcDXJbNf8=)
                          3: DKOICLD02iXpcA9vZFXQGySsTb4.roa (hash: B6+UClmsWdKQ3kl7FvMtYqJ1C1yzsvrn7+d4dqkZL9A=)
                          4: MaysZY_FQ4mUydJwZ2syGKlPo4A.roa (hash: Ib77lC9wU94ijtXZ7wAX+4IKk5uY8s1A6QHw0vp7DwI=)
                          5: QZWdKB1JjcnCx7y02Y7LvGY3OBs.roa (hash: O2RdiMstAC/A0qFEmVRDniS6ZkwI8yTG8ZBTqrYQCME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:da:37:3e:e0:72:12:f7:8c:e5:3b:b0:dd:9c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Nov 22 07:01:20 2024 GMT
            Not After : Nov 23 07:01:20 2024 GMT
        Subject: CN=0dfae50a225eef6eaaae2002beb2e6a6d9b4ab8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:e2:47:21:9f:38:0c:cb:14:2f:b9:17:9d:
                    51:b3:12:37:8c:9d:3e:a7:b0:43:55:5e:a2:75:08:
                    8c:e4:60:a2:58:5b:fc:0a:b8:98:9e:f4:d5:b5:52:
                    9d:0f:fe:b0:7d:12:1b:33:ec:8e:50:0c:1c:3b:fb:
                    f7:7d:bc:32:35:dd:14:d9:4e:f0:da:70:b9:14:95:
                    8c:70:b0:6d:b6:e9:5c:88:1f:7b:ad:f6:eb:32:32:
                    bf:ec:ed:47:78:05:dc:a6:e4:ca:b0:5f:ef:22:e7:
                    66:db:a4:06:55:6b:cb:99:b2:42:b8:7c:33:28:34:
                    05:82:ab:c3:5d:81:80:b1:9a:a8:c2:85:0b:18:13:
                    c1:ae:08:ac:d8:80:2a:09:fd:bd:3a:78:87:00:89:
                    5b:01:46:62:bb:37:00:03:6d:f3:f0:0f:dd:db:52:
                    d9:ab:9a:02:39:28:cb:13:21:a0:31:c1:57:8c:d1:
                    88:be:c2:5f:e4:8b:e1:3b:63:dc:11:fd:a4:18:67:
                    f7:98:f6:e6:79:e1:de:b2:8e:46:cb:67:53:d0:53:
                    af:e8:b4:25:d9:88:eb:10:31:d1:b0:42:66:eb:0e:
                    84:88:88:fb:64:01:aa:e2:a8:ad:db:4f:a4:bc:f4:
                    93:4f:96:b7:3f:91:8c:f0:75:3c:70:37:5e:73:9d:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FA:E5:0A:22:5E:EF:6E:AA:AE:20:02:BE:B2:E6:A6:D9:B4:AB:8B
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:db:56:d2:08:bc:3c:cd:7c:42:7e:98:e0:93:48:82:1c:31:
         c3:bd:b3:d7:97:2b:b3:7c:d3:8d:32:22:d9:bb:c5:df:3d:10:
         bb:42:18:a6:cd:43:01:51:92:1a:bd:0e:34:46:6c:f3:32:bd:
         60:d1:87:b7:97:f9:96:2d:c8:d9:8b:08:58:b5:1f:ce:dc:84:
         b7:b4:bc:3a:dc:df:3e:d8:ea:2d:66:b3:82:5b:ff:ec:b0:6b:
         f8:bd:a5:b0:8f:0c:c2:ad:7d:60:a3:dc:42:50:84:e6:86:21:
         47:d6:67:fe:37:1a:06:2f:60:85:93:1d:2c:4b:81:cb:36:c4:
         d2:31:70:4e:99:9f:83:76:94:e7:c3:ab:c7:59:fd:9f:1c:40:
         80:26:f3:67:c2:c8:b7:fd:f2:68:dc:e7:10:b8:66:f9:4b:23:
         95:40:14:62:75:84:8c:60:ef:28:f0:9b:fd:eb:de:25:cd:bb:
         9f:c0:45:60:4c:f1:7d:f5:c0:2e:42:b6:cc:6f:ba:77:f3:1c:
         04:4c:47:f5:de:e6:23:ed:86:64:cb:c8:5a:3f:09:07:1e:4b:
         40:08:51:2e:75:5a:5d:f8:6f:07:24:e0:e9:00:74:55:7a:80:
         f1:c0:cf:f0:ff:02:cd:f5:27:b4:17:f8:be:6a:27:a7:4b:ff:
         a6:31:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:11:57 2024 by rpki-client on console-ams.rpki-client.org