Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File:                     qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier:          1sAmZc6K+ORqy2XFhFLVLP+Z8nkFMVzwuERVdOHya1w=
Subject key identifier:   7B:A1:B3:54:48:0E:B9:0A:47:F3:17:5F:29:6A:DF:28:1D:48:9D:A4
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer:       /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial:       01935879295B7B94237C01967DFA012603BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:02:35 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:35 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:35 +0000
Files and hashes:         1: j2TJmD1Cy9KhO1Ls2NOaHGYyFA4.roa (hash: aDaq3Di7x/RzXtZeLgsqgHFqufosi3b9aeYdhGQK4uk=)
                          2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: hQY15WCmlymsA42RhxqohK49CDzEadbh/Bhzn5VgGHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:29:5b:7b:94:23:7c:01:96:7d:fa:01:26:03:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
        Validity
            Not Before: Nov 23 10:02:35 2024 GMT
            Not After : Nov 24 10:02:35 2024 GMT
        Subject: CN=7ba1b354480eb90a47f3175f296adf281d489da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:72:f2:76:11:a4:7e:14:1b:84:c6:4e:08:
                    dd:0c:1f:5b:88:86:b5:b3:2f:57:f6:e0:0a:de:08:
                    8e:99:40:4f:16:04:78:8b:be:cd:a7:6c:5f:5f:c9:
                    6a:f6:ad:95:b0:5a:57:f1:ef:36:a1:03:ea:b5:ea:
                    83:94:bc:c1:25:12:86:40:ad:4d:c3:cb:27:dd:88:
                    f3:6b:fe:7d:31:7e:e2:c8:ef:ee:06:0f:a2:45:fd:
                    2a:82:71:fd:7f:d9:20:c2:65:32:06:0d:d1:7e:1d:
                    4b:f0:3c:92:c0:8f:c3:d4:c0:67:f1:06:fe:32:32:
                    90:29:41:7e:f8:8e:f0:0c:5d:f5:24:bc:33:42:3c:
                    94:98:99:50:7f:7e:d6:f7:99:b9:f8:67:63:a8:eb:
                    aa:70:68:eb:21:d0:fc:2a:fd:bd:a7:72:70:30:f2:
                    eb:a4:72:17:0b:5a:e6:ef:d9:93:64:64:41:5b:9b:
                    dc:dc:37:06:bf:7e:ed:81:89:b1:92:83:a4:71:3b:
                    2a:6b:46:ce:0f:75:50:2f:b4:a3:67:b1:f3:e0:53:
                    2c:88:b2:ef:33:72:21:1f:d4:b6:fe:a8:09:60:df:
                    38:2e:2b:37:75:2d:6b:af:de:27:5e:47:c8:c8:6a:
                    ba:53:f5:30:ca:fd:81:c5:9c:34:c9:0c:9a:a3:ce:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A1:B3:54:48:0E:B9:0A:47:F3:17:5F:29:6A:DF:28:1D:48:9D:A4
            X509v3 Authority Key Identifier:
                keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:13:2c:ae:bd:6e:ce:83:a2:d3:2f:6c:f9:06:8f:8e:c2:
         c6:ec:80:4a:2d:dd:f5:ea:07:9e:9f:39:01:ee:ef:46:d4:30:
         18:cb:df:fd:f6:95:53:46:11:13:3c:8b:5a:45:3a:d2:53:f5:
         42:06:c7:f9:60:86:d7:88:3b:c9:ac:ce:15:0b:97:2d:82:eb:
         58:dd:ed:ae:db:b4:c7:ad:2f:03:d2:39:bf:7b:93:5a:e1:67:
         ba:0d:43:e7:f4:6e:00:93:98:73:4f:c6:54:52:59:e9:b0:dc:
         ec:f6:04:0e:6b:0c:35:e3:41:86:e0:27:74:f6:37:09:90:e8:
         91:7b:1a:93:20:ea:4d:05:b1:b9:13:f5:99:90:ac:c5:12:86:
         df:c3:be:1b:24:9d:1b:0e:5c:2d:b7:c5:ed:8b:67:5b:a7:b3:
         e7:37:ea:78:be:36:cc:3b:6d:f0:16:80:46:de:bb:17:bc:84:
         08:40:74:70:84:20:d6:54:ba:27:e2:8d:e6:5a:08:c4:aa:0c:
         5e:37:5d:2a:c4:e2:7c:0e:9b:04:e5:aa:d2:bb:c7:89:d3:d4:
         62:e4:7d:9e:bc:d2:49:0e:8d:53:0f:14:6f:26:69:a6:9f:4d:
         45:a4:ca:34:f5:22:26:16:c9:32:b2:1e:d8:7f:97:fd:ef:11:
         3d:af:8c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:23 2024 by rpki-client on console-fra.rpki-client.org