Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          4EqHIPsMZTYjtD4tOuNQMuBUl87YyicltdHapisSmUo=
Subject key identifier:   D0:E3:33:45:6E:02:45:F6:60:34:68:A4:26:E6:90:EF:43:E9:4D:CB
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       0193531A3BF07E6DC3CB63DF5658991B8B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0A8F
Signing time:             Fri 22 Nov 2024 09:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:48 +0000
Files and hashes:         1: CvuWhByZzel6kqP5_WOffWAtOnU.roa (hash: LF2loxs1V5XaIP9iMCUjbEKKnsI70HCk95S/k9Ab8l8=)
                          2: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: j4uAa+JZeuU9mSJVgeTYJ6IcQpsYm8Xk1iNcYhf41vI=)
                          3: N_SZcKDnEW5-qgh6u5KcNUEsOfY.roa (hash: EEsQQQL6ZHR8MBng2IYwxzqyVffnMUgFZsMoz9Qm/eU=)
                          4: bQ4yuI7vtU_cGKfCBbHm04HjUtE.roa (hash: dx1yuo8puE3X8jciCd8HS1CIwakxb0t8G4XviWDqCOQ=)
                          5: goNNlWpp0GAHEhFcaNcAq01c6uQ.roa (hash: 44jDG/bTSF0PVFBRtyba3lvRLLtNrQ0m67TbRxyt39A=)
                          6: ljpY5ujByJ0zT5XfwKoKWJl-UrU.roa (hash: TTtTv4KiuU9QNZ1icGbYNnxZrUMvfNsO4dY2FpYJxlg=)
                          7: tm83HCOIPcyEjhb7Xvcqh3mE5Sg.roa (hash: WJWl4YlupGZRrWJRLLFr48zdRTMRQmsfhqXNV6neM+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:1a:3b:f0:7e:6d:c3:cb:63:df:56:58:99:1b:8b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Nov 22 09:00:48 2024 GMT
            Not After : Nov 23 09:00:48 2024 GMT
        Subject: CN=d0e333456e0245f6603468a426e690ef43e94dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:80:4a:59:74:ea:92:7f:1f:b6:36:79:a9:
                    ee:d6:03:71:30:6d:44:2e:96:4d:1b:6e:54:8f:9a:
                    bc:70:2f:22:ff:25:2e:86:2d:c2:f9:6d:23:31:04:
                    f3:ae:8a:f6:88:c5:3f:e3:b9:5f:39:ca:07:ad:8c:
                    6c:e5:41:1e:c6:27:40:93:17:44:ad:3c:24:79:df:
                    a6:62:f5:1e:ef:42:89:39:f7:3d:94:ee:25:f4:db:
                    90:55:8d:72:b6:df:be:74:82:ec:02:71:85:ba:3a:
                    d7:24:af:f0:01:32:2c:22:db:2b:f7:90:85:ae:11:
                    3e:69:4b:e3:d4:4d:0a:0f:f7:4c:7a:08:c7:a6:ed:
                    30:e5:b8:45:80:30:18:61:44:d9:37:20:cc:05:a7:
                    bb:e4:49:5b:1f:d8:f4:e1:57:80:7b:83:9d:1a:c8:
                    67:a0:fc:b8:30:92:27:c9:2c:f3:af:ba:ce:a4:d3:
                    1f:86:ab:bb:b3:82:f9:c6:0d:34:24:c2:57:f0:75:
                    a2:e8:12:17:bf:20:09:66:cc:89:68:cc:bf:50:d1:
                    ca:44:ef:fb:d4:e7:43:79:b5:2b:44:8a:29:a9:30:
                    4d:9a:9b:ba:46:6e:1b:a2:4b:99:13:20:e8:c5:6b:
                    cf:ba:5d:1d:00:71:dd:ab:2c:18:10:ab:5f:46:30:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:33:45:6E:02:45:F6:60:34:68:A4:26:E6:90:EF:43:E9:4D:CB
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:44:b5:d2:b9:24:d5:23:d2:c4:33:23:f0:52:30:11:9a:21:
         f1:e2:b5:2a:5a:9a:c5:e4:c9:ad:bd:95:02:b7:24:dc:9d:02:
         60:76:d5:61:fa:01:8b:16:5e:5e:47:a7:b6:00:3c:42:e7:f7:
         68:26:71:cb:7a:93:a9:52:1b:52:69:1c:ad:c4:56:82:f5:2f:
         fd:aa:e1:e7:f7:f6:89:7c:53:73:79:96:78:91:e9:48:ba:e8:
         45:25:e0:d4:01:9f:5a:3c:0d:86:f4:53:4d:41:dd:19:6d:aa:
         b2:dc:7b:32:75:e4:39:c3:68:e9:47:b1:31:fd:80:eb:e1:9a:
         6b:2d:4f:26:18:62:8d:5c:83:c9:18:d5:73:31:dd:6a:1f:1a:
         b5:4b:3c:72:79:b8:7f:32:2f:b5:a0:be:10:81:0f:c3:fb:55:
         2f:ef:8e:ba:e2:04:30:0b:99:02:eb:68:e0:12:1a:9c:00:55:
         6e:e8:18:d0:73:df:51:46:d4:9b:ed:ce:9f:92:5d:f1:1d:e1:
         a3:be:58:e6:06:2a:da:92:ac:22:d8:7a:7b:3f:b0:f6:c8:62:
         a6:9e:7b:0e:b7:e3:cc:ef:49:8e:87:c9:b6:b2:5f:41:b8:49:
         46:85:5e:43:3d:66:eb:09:eb:0f:a9:5f:f0:35:1c:bf:5c:3e:
         af:d7:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:40 2024 by rpki-client on console-fra.rpki-client.org