Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
File:                     614owu_zzzXDwcw9Z7qj3wUFX5k.mft (raw, json)
Hash identifier:          gZTKKLbHjzY5ICBnBUNz/Wwy1DXdR1rErOYJkGSAUsU=
Subject key identifier:   99:60:61:61:F7:95:BA:36:06:EB:78:56:E7:61:CD:30:00:78:1D:D4
Authority key identifier: EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Certificate issuer:       /CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Certificate serial:       019358792CD9B3C4AAD0F1D00DA403273BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:02:36 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:36 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:36 +0000
Files and hashes:         1: 614owu_zzzXDwcw9Z7qj3wUFX5k.crl (hash: +uGgFkm2gcgUCOqQTGKPes0BGBnO6NLoEiq4rzIf4+4=)
                          2: i5sAt4XR9Ww_cq43wQbKesF4-OU.roa (hash: hfcoAqW1wKZ40Fpw22VJh0Yjf7tnPptybSVTN6x4d4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:2c:d9:b3:c4:aa:d0:f1:d0:0d:a4:03:27:3b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
        Validity
            Not Before: Nov 23 10:02:36 2024 GMT
            Not After : Nov 24 10:02:36 2024 GMT
        Subject: CN=99606161f795ba3606eb7856e761cd3000781dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:27:57:ff:be:3e:c1:af:b4:1c:a7:4d:70:
                    cc:a9:1a:c4:2b:62:76:05:05:9d:23:2f:5d:15:9a:
                    d0:b3:b8:4a:ef:c0:3e:d1:3a:16:7f:d1:ca:e8:33:
                    b8:99:3a:44:da:2d:fe:f2:ee:3b:77:00:6f:bf:cb:
                    1a:51:7a:cc:f1:e1:2e:b3:16:bb:4b:49:0b:46:19:
                    f8:ce:78:93:94:d0:46:67:a0:67:c1:99:5f:e6:26:
                    9b:c5:ab:fe:e9:64:b8:99:a6:0f:87:98:45:9b:1b:
                    9c:0f:1d:1c:f4:1e:64:3d:f1:82:ff:47:dd:f1:0d:
                    51:1a:7f:5b:2c:71:88:ee:20:a1:87:77:a0:7a:68:
                    51:4f:5d:71:46:58:e1:81:9d:8f:a4:0f:96:c1:6d:
                    ab:55:57:da:9e:64:f6:f2:a0:44:1c:fc:0a:4e:cc:
                    7f:71:32:01:7a:3d:b9:0b:c2:2e:9d:88:71:bb:3e:
                    4e:85:c7:69:02:97:59:39:c2:73:42:13:48:13:4d:
                    da:1e:9e:b8:fe:d3:57:b8:b6:c9:88:2e:4e:bb:e0:
                    48:ff:32:13:4f:70:eb:db:8e:38:ef:e8:43:4a:60:
                    66:85:ab:a5:df:39:6a:8a:5f:83:48:41:40:e7:98:
                    0c:d4:5d:2f:fa:1f:5c:c7:40:cb:2a:3b:83:39:fa:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:60:61:61:F7:95:BA:36:06:EB:78:56:E7:61:CD:30:00:78:1D:D4
            X509v3 Authority Key Identifier:
                keyid:EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:07:d8:9b:bf:68:c2:1d:33:36:1c:6a:ea:bf:29:69:8b:54:
         78:f1:30:8b:37:8b:a2:a2:4b:97:b6:65:7b:73:17:1e:1e:b5:
         77:c5:e9:2c:91:e1:ec:36:fe:d6:b5:71:d2:a4:47:3e:04:ca:
         90:4a:02:00:0d:d4:ee:09:b2:f1:02:35:3f:1f:df:14:3f:7b:
         4e:bc:2c:52:58:7b:79:40:1b:e2:9c:34:a2:75:d8:b6:a4:0b:
         44:18:af:aa:c6:e5:b2:f6:bd:27:37:62:1a:e2:cb:e4:c8:f9:
         5d:35:f0:ac:8b:cf:3c:cb:2b:bc:3a:80:f5:04:24:97:d9:55:
         e2:c6:ab:0b:34:3f:14:05:e7:59:71:ae:89:e9:48:68:07:87:
         50:fa:1a:f3:b1:4b:7e:87:96:ab:f6:7c:d7:d8:28:38:92:c8:
         52:56:b2:2c:b0:78:61:2f:05:30:25:f9:f6:10:3f:31:da:3f:
         f5:57:81:29:75:30:75:de:24:72:a4:53:9c:11:bd:f8:17:3a:
         56:67:06:09:d2:b0:06:04:11:50:e3:e7:89:73:26:24:7b:1a:
         bc:e5:c9:65:5e:65:d5:c1:f5:ee:23:ed:81:f3:d4:8d:09:96:
         48:9b:a3:bb:6a:c4:4e:86:8a:2e:ea:4b:a3:09:82:db:10:2b:
         dc:30:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:40 2024 by rpki-client on console-ams.rpki-client.org