Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          JzdIA8/DwU+KvkyUuWL5is/KeMnjq7WtK7FNQl5cvXw=
Subject key identifier:   84:EC:E0:83:9D:64:37:5D:4C:38:1D:EC:16:45:E8:69:92:68:91:C2
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       019368FCD86ECED0561BF2D00556888E6655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          0C73
Signing time:             Tue 26 Nov 2024 15:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:21 +0000
Files and hashes:         1: NZtGTotXj9rRYop4oFcOLTWsNtU.roa (hash: 6o3WOILsF2IZzdO9hv4y9Gw4HnY6mzuf0d0Fvs4ZDes=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: 21Cmgy+truzKLiidM5ZZ567EJNlhjIEIFoKVZT0mRLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fc:d8:6e:ce:d0:56:1b:f2:d0:05:56:88:8e:66:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Nov 26 15:00:21 2024 GMT
            Not After : Nov 27 15:00:21 2024 GMT
        Subject: CN=84ece0839d64375d4c381dec1645e869926891c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:ad:e6:bc:72:c6:d3:52:75:e1:5f:7f:d9:
                    96:31:a2:ba:a0:27:88:46:95:08:90:f6:35:2a:11:
                    0a:4d:42:12:5a:c5:4d:64:48:db:0e:58:dd:94:46:
                    57:76:c8:53:d5:5b:e4:40:54:0c:e4:82:ae:20:14:
                    59:37:6c:0e:05:d4:84:9e:f5:7f:3a:44:05:8e:90:
                    1a:fc:8f:be:4f:6a:18:a1:9b:97:bb:94:b8:4f:b0:
                    53:8d:0e:be:c7:c6:10:cc:81:5c:ca:69:7a:03:84:
                    39:ff:a5:32:29:dc:18:97:ce:4b:4f:e2:83:ad:70:
                    42:ff:40:8c:99:a0:d7:6e:43:fb:46:f9:d4:1b:c9:
                    bb:6c:d8:46:3e:cd:37:da:10:01:c0:87:85:cc:75:
                    fe:f7:d0:9a:46:a4:e1:ec:f7:38:4b:d7:9d:a1:79:
                    09:4c:3d:75:45:53:dc:18:2e:76:ad:f4:89:be:ea:
                    8b:b2:04:ef:8f:7e:20:01:17:6d:1b:e0:5d:2a:09:
                    74:8b:5d:35:77:ee:cb:55:b5:7f:95:68:9c:5a:21:
                    b9:df:75:c9:a6:b9:d2:3b:5e:01:fd:41:7e:ec:f4:
                    e3:b6:9d:c3:55:22:d3:37:67:d9:1d:03:c1:28:c4:
                    ef:2c:01:2d:c2:1b:ad:28:63:e2:b9:5b:02:de:b3:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:E0:83:9D:64:37:5D:4C:38:1D:EC:16:45:E8:69:92:68:91:C2
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:9d:b9:37:91:2c:58:d9:22:ca:24:76:90:2b:f5:5b:cf:
         e7:c6:36:af:e7:d7:c4:dd:0a:73:d1:ed:6d:6e:5a:5d:63:47:
         c3:f7:4b:4f:9e:df:21:2f:75:bc:c6:22:4b:89:dd:3d:93:79:
         8b:4b:fe:32:ea:93:94:7b:c3:57:f4:0f:9f:9c:88:0a:db:6d:
         ab:2d:28:f4:81:39:66:bd:85:bc:92:06:41:02:67:85:85:d5:
         ae:1a:43:0e:28:e1:bc:4e:cd:df:ce:39:1f:d8:7b:0f:2e:66:
         27:8f:b4:99:00:f3:7a:70:6e:06:70:7b:a8:29:f9:05:85:64:
         59:39:de:2d:c6:84:51:d7:3b:a4:93:d8:37:31:da:bd:4f:53:
         d5:db:64:79:08:9d:43:58:bf:a1:44:e9:ec:bf:0a:29:57:22:
         44:c0:c0:14:09:d6:c1:a7:e6:8b:1d:2e:66:3d:80:0e:94:03:
         ea:2b:7b:15:43:ec:ee:84:b4:76:41:55:84:35:bd:7e:cd:f3:
         d1:58:1c:e3:93:3f:17:17:83:96:21:0d:5b:04:1f:30:cf:5e:
         23:64:55:6a:ed:7e:fc:4c:f4:40:d9:2d:98:88:60:b5:b1:3c:
         40:c8:d3:d1:da:b3:25:8c:8b:2e:e2:24:df:25:df:11:2b:e6:
         bd:bf:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:34 2024 by rpki-client on console-fra.rpki-client.org