Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File:                     pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier:          2HgHB9x6/bSIJekVaEYnoihza0ptkEAtz9mxWYmp5JY=
Subject key identifier:   BD:DE:9E:21:1F:61:88:D2:D0:C8:76:53:1D:59:A6:B9:5C:BE:CC:C1
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer:       /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial:       0193531A6887CE7A1F4FA0BCB984A2ACB5C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 09:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:59 +0000
Files and hashes:         1: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: ZbGEC+2c0UQSGE+GqD65Mkxlnu2CyLRB2eqJjis4rxw=)
                          2: w5hgrbfRcQQz3IUStwh-k3lisXE.roa (hash: bM3OQwZWiQqGAPnuZ/9GbriAMwSFyGUm+6IDsB2iooc=)
                          3: yNyynBqiRojn-3sX8A0Hah5is7U.roa (hash: pUlJ14VCe8gZtQm7099OGR0YiynrmFoMFom3k600vIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:1a:68:87:ce:7a:1f:4f:a0:bc:b9:84:a2:ac:b5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
        Validity
            Not Before: Nov 22 09:00:59 2024 GMT
            Not After : Nov 23 09:00:59 2024 GMT
        Subject: CN=bdde9e211f6188d2d0c876531d59a6b95cbeccc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:c0:5a:ac:15:59:0d:18:25:a3:f7:6f:21:
                    df:7b:ce:f2:35:28:d4:ff:04:47:d6:0c:3f:22:b5:
                    f8:c8:c7:23:ae:a0:b3:75:0f:61:fc:00:7d:74:8b:
                    b6:1e:34:6a:2e:e6:e2:c4:24:21:78:c3:f1:c0:3c:
                    a1:94:d1:0d:c9:28:3f:cf:02:c8:72:80:cf:3d:4b:
                    83:57:4f:2d:98:6a:a2:0c:2e:70:bb:45:46:6e:db:
                    37:f8:2a:32:d8:79:27:31:46:5d:6b:02:74:70:d8:
                    9a:ba:a5:30:02:29:30:06:06:5e:c6:d6:b2:19:9b:
                    8e:26:d0:38:0c:3b:0b:3d:84:8d:8b:ad:ca:41:39:
                    31:f6:78:42:b5:2b:0f:44:42:df:3f:36:e6:e5:9e:
                    23:96:2e:10:e2:27:29:2d:a7:25:29:a8:f2:d5:d9:
                    fb:94:30:cc:59:dd:1f:3a:a5:69:ce:c3:05:e1:03:
                    d6:a8:d3:ee:e9:03:09:5a:2b:1d:10:e3:bd:f0:d6:
                    ab:01:53:9e:0d:f7:54:da:cb:ac:99:94:26:d1:3e:
                    c1:bb:52:5b:82:90:b3:6a:f4:fe:55:e8:0f:c7:2c:
                    69:8a:23:7e:c3:3c:01:7e:52:f9:9f:3d:99:45:62:
                    33:c8:34:aa:5d:14:16:43:71:ae:cd:4e:c0:bf:af:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DE:9E:21:1F:61:88:D2:D0:C8:76:53:1D:59:A6:B9:5C:BE:CC:C1
            X509v3 Authority Key Identifier:
                keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:73:69:df:0f:26:82:ef:93:a4:31:f2:65:73:20:63:6f:79:
         75:c0:e6:3f:82:de:0b:e7:0e:d7:bb:06:90:08:e4:7a:a7:87:
         db:4d:8a:67:75:49:46:c6:98:ba:5d:85:d1:71:fa:32:08:f3:
         7d:84:4a:ed:30:a8:6f:5b:c6:a3:81:3d:26:6b:5a:2d:a0:c3:
         ad:c4:45:28:dd:8b:9b:f6:70:5f:43:64:37:0a:fb:50:27:7d:
         c1:2f:8e:f6:2c:27:6f:75:f6:0e:5a:58:c0:0d:e2:9f:62:c9:
         c9:6f:03:da:cc:a6:f1:06:3f:9c:54:69:b3:93:47:dd:bb:88:
         7c:3d:53:06:cb:67:3b:22:30:f8:08:93:e1:d6:f4:c7:71:b3:
         ba:65:38:2b:25:bf:0a:d3:5e:d0:22:7e:61:0a:7f:5d:e0:87:
         63:17:d7:89:58:5c:df:71:d5:69:b5:4a:43:03:20:d1:7f:15:
         4f:24:f8:d4:86:cd:26:8f:1b:61:39:90:b5:d2:92:fb:0f:45:
         97:c3:fa:27:df:9c:a9:07:f7:0f:4e:25:9b:f3:a2:dd:09:77:
         b4:42:8f:a9:d0:1b:38:9e:b9:e4:76:2f:40:bf:29:d5:4a:60:
         ba:df:3f:91:5a:04:41:be:e9:cc:0d:d4:b5:fc:ae:1c:75:c2:
         3d:5b:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:11 2024 by rpki-client on console-ams.rpki-client.org