Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          wAbo+XrX7ZHJViwCUhW72pZNWy7jNafLejvOWiqNxRY=
Subject key identifier:   0E:C7:D9:78:D9:E8:CD:20:42:5E:70:39:A8:47:7C:45:D7:8F:AF:F6
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       0193549C0A879365DF8EF1F804674EA70494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          035D
Signing time:             Fri 22 Nov 2024 16:02:12 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:12 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:12 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: jGmxGGQpWpc0fXNytylDowV3279i4YlSiRjxTHoeFvk=)
                          2: 8_Z8tkWP9SntxJIAMd9xzKjzBDc.roa (hash: Y1ZYLyOua621FDCIXKzGaXSk/2wp1n2lJPS02ALz0YY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:0a:87:93:65:df:8e:f1:f8:04:67:4e:a7:04:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: Nov 22 16:02:12 2024 GMT
            Not After : Nov 23 16:02:12 2024 GMT
        Subject: CN=0ec7d978d9e8cd20425e7039a8477c45d78faff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:4d:3a:e0:77:b2:39:44:70:51:b5:2c:ec:
                    55:1e:8a:95:8c:ec:69:e5:86:3f:a7:85:90:18:1a:
                    1d:ab:cc:bb:3b:e9:b2:aa:71:00:ac:85:8b:0a:d4:
                    04:92:47:90:71:77:23:02:a5:7e:82:91:3c:bb:33:
                    4d:81:26:a8:cb:ba:dd:30:ff:c3:73:13:97:4d:96:
                    ef:52:d4:83:f6:a6:cb:43:07:c0:91:c8:0c:cb:b7:
                    6b:99:43:17:d3:ae:7f:5b:91:1d:bd:5f:21:90:b0:
                    71:94:66:18:0b:2b:4c:a2:8a:be:93:c4:84:50:64:
                    a3:d6:69:3e:f3:68:6c:84:a1:88:ed:57:a7:de:d5:
                    3b:3d:fb:82:77:ac:69:5b:4d:ac:f6:2c:9a:40:18:
                    e8:12:a1:52:0d:eb:c0:fc:43:e5:1e:c7:b7:5f:9b:
                    a0:86:a9:ea:8b:10:97:e7:f2:4d:dd:1b:af:ff:f4:
                    cf:c7:cf:cd:66:0d:41:78:b6:bf:af:58:0d:91:36:
                    ed:e8:69:ef:08:44:2b:66:98:f2:52:1b:13:08:fe:
                    7b:bd:a5:74:c1:54:90:0e:da:99:47:5a:21:31:b6:
                    95:3c:31:fd:54:fd:7d:2d:04:ff:ad:ed:a8:e3:86:
                    11:ef:fa:df:d7:d2:9e:a1:2a:b8:33:d3:a4:40:5f:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:D9:78:D9:E8:CD:20:42:5E:70:39:A8:47:7C:45:D7:8F:AF:F6
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:66:d9:b1:cc:cb:d0:94:7a:54:38:7a:35:eb:ad:a4:98:4d:
         86:9d:f5:f6:1d:f0:85:b3:6f:cd:46:aa:fb:47:c6:e8:28:67:
         ca:c6:f2:31:ae:d7:20:49:1a:96:f7:40:60:3e:e6:96:9c:db:
         da:b7:ab:d3:04:81:65:a5:5b:da:3f:02:68:9e:07:be:1a:2c:
         ed:ed:39:44:02:57:aa:2b:07:a5:c0:d3:fa:7b:29:78:bd:0b:
         f9:7a:3d:61:ce:dd:38:a2:f0:95:58:4f:36:24:4a:2f:ba:0f:
         bc:5a:eb:a7:72:d3:11:61:c2:30:0f:15:73:a7:62:bf:0f:22:
         bc:48:c7:43:38:6e:05:d5:f8:30:ae:9f:62:84:b7:8e:f5:c9:
         fa:d4:ec:6e:11:e7:c1:99:9a:a1:e3:bb:e3:41:7b:28:89:7d:
         a9:41:34:8a:25:b4:d0:f3:1f:4e:0e:87:de:92:ac:df:0c:f0:
         18:af:21:79:9d:45:77:20:c1:55:d1:0c:53:cd:d6:1d:c1:33:
         3c:e9:3b:9f:36:6f:52:82:ac:41:cc:7d:2e:3f:82:34:ab:6b:
         76:55:b1:50:e0:08:d2:19:d4:50:65:b7:60:ca:a1:bc:2a:f6:
         bb:65:fa:00:d3:1c:ff:e3:59:34:7d:f0:ef:55:ac:42:a7:23:
         6e:a8:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:16 2024 by rpki-client on console-ams.rpki-client.org