Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File:                     PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier:          vMwbB21+wNzCbnBIFyVP1DkcpUuu2EK8fp2mH9+NBzw=
Subject key identifier:   76:24:EE:4C:BB:A6:BD:74:47:87:60:AB:50:CC:6F:3E:C9:44:41:FB
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer:       /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial:       0193572D74CA47E9FF7F5627F64AE5E8EBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number:          0876
Signing time:             Sat 23 Nov 2024 04:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:16 +0000
Files and hashes:         1: 4PY0RSRufu3piQyas7UV0NVxqNc.roa (hash: /Np4O4Q38qq+lasSC7y5UH/F56qO0Glm45v3apT9Gxo=)
                          2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: C7+83aeyB0cplW7F8mBkTXMfExJp1PmZUz6zP2O60W4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:74:ca:47:e9:ff:7f:56:27:f6:4a:e5:e8:eb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
        Validity
            Not Before: Nov 23 04:00:16 2024 GMT
            Not After : Nov 24 04:00:16 2024 GMT
        Subject: CN=7624ee4cbba6bd74478760ab50cc6f3ec94441fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:5d:a9:a4:38:47:88:c7:80:53:d4:a0:2d:
                    d3:ee:71:85:95:ad:84:e6:c2:cb:70:74:f2:f8:14:
                    d7:96:af:41:22:56:fb:10:f5:03:a2:01:7c:0b:da:
                    78:ae:25:fe:81:0a:26:1c:d9:2a:e3:7c:b7:aa:f1:
                    64:59:d2:d4:19:33:ce:ed:0c:56:0f:cc:3b:89:4a:
                    d3:cd:cf:c0:7c:83:d2:60:9a:3e:63:55:ed:f0:7a:
                    23:6b:85:c3:ed:8b:fa:70:6a:96:f6:08:59:98:e0:
                    f7:31:d0:9e:ad:35:dc:06:7c:62:40:80:89:7c:34:
                    18:5d:31:6d:b1:14:06:3b:80:2f:3b:da:e7:9b:26:
                    4a:2f:ca:a3:97:6e:0e:33:82:bb:30:57:b1:f6:a3:
                    a5:39:d7:0b:1a:d8:e6:25:44:a9:26:52:f8:ad:1e:
                    6e:74:d7:48:df:53:40:97:6e:d2:07:d8:91:33:8c:
                    e0:93:58:f6:44:0b:da:8d:ef:4e:02:0d:57:c0:19:
                    8a:24:90:27:17:36:ef:59:d0:7d:91:17:8b:c0:e8:
                    2a:0d:13:e2:c4:88:7d:ab:9a:5f:37:8c:0a:bb:07:
                    93:3e:b8:35:bf:c4:08:c3:fa:91:a8:03:8e:0b:9f:
                    4f:39:aa:db:c3:4b:99:aa:0c:a0:fa:79:a5:a5:5e:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:24:EE:4C:BB:A6:BD:74:47:87:60:AB:50:CC:6F:3E:C9:44:41:FB
            X509v3 Authority Key Identifier:
                keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:1c:e2:a7:71:d0:43:4d:cb:69:f7:80:0e:10:75:0a:4e:
         07:95:f3:4c:07:f9:2c:5b:a9:93:0c:a3:5b:04:0f:90:a7:2a:
         ae:1b:98:f8:44:fa:b0:04:5b:7f:00:8c:d2:4b:7f:4a:7c:c4:
         95:ce:c1:11:7d:d5:d1:cd:f0:e1:4b:a0:a4:3f:76:de:79:3f:
         74:eb:78:5a:2d:d9:e6:07:50:71:37:cf:84:71:15:e5:a6:8a:
         34:e8:6d:34:8b:c1:79:64:7d:69:84:94:a2:c1:3f:70:8c:01:
         fe:7d:4d:94:a0:85:c6:54:80:52:48:aa:0d:68:92:3a:e1:f2:
         60:81:34:29:f2:73:33:e1:fd:2e:6b:5c:d7:b1:33:cc:10:e9:
         66:b8:58:8b:31:64:44:e0:93:c7:de:1c:ad:f8:5e:eb:5f:da:
         81:08:00:0a:2f:75:16:b4:8f:95:81:72:3b:24:4b:be:9e:8a:
         7b:05:93:f6:f3:f5:b7:75:09:da:ae:e1:bf:e0:af:0e:10:e7:
         46:98:50:1d:f9:0f:c1:87:57:f7:41:19:19:fd:86:5c:6e:ca:
         89:56:0c:80:2d:5e:83:30:86:f1:df:db:a1:b0:68:87:92:fa:
         69:c8:b9:22:af:5a:56:37:05:69:ed:e0:c2:ae:96:a3:cc:6f:
         39:62:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:01 2024 by rpki-client on console-fra.rpki-client.org