Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File:                     A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier:          CObno5XsIARcjvKBJdEXiVoKT+E8iAJTRbwm4aq1R7k=
Subject key identifier:   EA:9B:F6:E7:0E:7F:5D:BD:9B:3B:0E:52:59:53:D4:4A:D5:27:E2:43
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer:       /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial:       0193572DD7DFE7BAD43CBE66194AA53E7676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number:          04E2
Signing time:             Sat 23 Nov 2024 04:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:42 +0000
Files and hashes:         1: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: SpSTlpZwTs71DpyVKqWW0LVJEqr3OPVSQUPIkczLHEo=)
                          2: ve_3KWddJE6k8nkIEUTlcgZgLcQ.roa (hash: zpMQEjxwRrn410jALjz4Jub/x663L8d9Ywwr6xfsMiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:d7:df:e7:ba:d4:3c:be:66:19:4a:a5:3e:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
        Validity
            Not Before: Nov 23 04:00:42 2024 GMT
            Not After : Nov 24 04:00:42 2024 GMT
        Subject: CN=ea9bf6e70e7f5dbd9b3b0e525953d44ad527e243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:57:8f:3e:c7:1c:0a:2c:84:6e:57:b8:42:
                    7a:4e:9c:de:c7:21:9c:28:f7:d3:9b:ab:3f:5f:6c:
                    78:f0:43:70:bc:8f:65:f0:e4:df:ae:47:03:56:24:
                    96:f5:39:d3:a3:c8:eb:11:71:bf:33:0d:0c:eb:e6:
                    9b:a1:67:22:03:62:8a:92:e5:1b:f9:e3:8b:38:20:
                    ac:92:cb:63:8a:93:71:98:d9:ea:2d:7a:38:b3:e9:
                    4f:62:d5:08:47:ae:66:03:d0:89:41:6f:40:9c:89:
                    f5:c4:e8:c5:54:82:7f:c5:4a:e1:f5:ad:dc:43:8d:
                    f7:2d:94:a1:39:0a:d6:ea:30:0f:2e:9d:24:f3:d4:
                    df:1e:89:5b:59:e9:13:6e:ad:42:3d:4d:b2:01:db:
                    67:70:25:1f:da:15:b4:36:91:88:4a:12:42:2e:c6:
                    b5:68:55:86:8f:ea:3d:70:57:f2:c1:5a:83:4c:41:
                    b3:ee:e9:96:03:dd:a7:c0:b5:87:98:4d:f2:49:0e:
                    27:14:92:85:5b:ac:73:1e:fa:94:25:5c:8c:ca:bf:
                    95:04:82:2d:b3:c1:83:f9:73:f8:15:ce:45:0e:2e:
                    b1:9f:58:ae:71:b3:d5:d1:3b:fb:cb:d9:2e:db:6c:
                    a4:05:b0:b3:eb:04:72:6b:7d:f9:4c:09:f9:60:26:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:F6:E7:0E:7F:5D:BD:9B:3B:0E:52:59:53:D4:4A:D5:27:E2:43
            X509v3 Authority Key Identifier:
                keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:57:23:f2:95:49:f9:00:6d:6f:81:17:21:28:5e:d0:9c:
         5f:11:b3:69:48:f2:a9:cf:4f:a8:e7:66:66:b3:37:a9:19:f7:
         35:2e:f1:1e:10:ec:cc:8c:f5:fc:9f:e2:69:6e:08:4c:74:3b:
         b2:10:c8:81:ec:9e:da:01:3f:d2:6d:7f:71:48:a0:f3:8d:87:
         f7:4e:2a:70:e0:06:ae:c7:53:64:bd:71:60:d8:d6:94:c6:22:
         33:58:05:23:83:98:c1:a0:6f:91:8b:78:d4:4a:cc:5b:72:b9:
         bd:22:38:b9:c7:05:c3:07:bf:ba:3a:ca:71:0a:aa:db:82:07:
         ba:40:f7:7e:a3:c0:9c:04:3b:11:07:6b:ca:e5:9f:8e:28:89:
         1d:5f:d9:c9:fd:60:bc:2f:85:0f:ce:14:d7:82:c5:8c:58:25:
         5a:d7:69:da:1e:91:5b:73:22:2b:64:2a:26:43:bc:84:89:66:
         5c:c8:13:57:e3:d6:49:f6:ca:b8:2b:4a:48:c4:99:24:c5:ff:
         4c:ad:91:ae:04:80:8a:00:1d:4d:f0:4a:ef:69:c2:5e:96:fe:
         e9:43:4b:c3:51:75:cd:d9:90:ad:66:fe:ac:95:81:fb:5d:3d:
         b4:da:25:ce:e3:bc:22:09:61:51:23:e3:62:11:c8:0e:df:de:
         ad:d3:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:07 2024 by rpki-client on console-ams.rpki-client.org