Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File:                     Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier:          owRx8bvwJw2dGvwcsnM8/9YTXmjVkfGX+XgkFxNLBhg=
Subject key identifier:   F0:EF:F4:BC:97:C1:D3:BF:64:95:FB:F8:3A:93:3C:44:E8:A7:60:E9
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer:       /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial:       019355AD963CF05F77D44CBE27537C60DC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 21:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:59 +0000
Files and hashes:         1: 1qHWEUFWJMCtXPnmVFzG6jgSJkk.roa (hash: wXcVrrlO3/qi4sREZ2LZKvg3kN2kKrKiBHjZSJrwKBg=)
                          2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: MScsTkhHoL5JUgDXaVY5+x7gyCsXP38y1OH2e1apOeg=)
                          3: tl4RdW2jq6P3-6N106_qPAd66Lk.roa (hash: Tq7ZGHJwoXuz5Q4M53aVeSrw9r9EKAtjro1f837zVWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:96:3c:f0:5f:77:d4:4c:be:27:53:7c:60:dc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
        Validity
            Not Before: Nov 22 21:00:59 2024 GMT
            Not After : Nov 23 21:00:59 2024 GMT
        Subject: CN=f0eff4bc97c1d3bf6495fbf83a933c44e8a760e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:ae:ce:51:51:a1:8b:c5:be:7c:c4:f1:fc:
                    13:9b:43:31:c3:42:0b:c4:ea:ea:95:cf:1a:03:a9:
                    62:be:6d:79:5b:38:0b:45:69:18:f4:1b:d7:ef:5f:
                    c4:9a:e1:0e:68:08:29:b6:fa:3c:92:31:d7:f0:fb:
                    1b:d4:d1:59:f8:ae:d4:84:c7:5e:91:fd:b5:39:2c:
                    e0:5b:72:52:99:85:be:ee:b9:8e:7d:62:18:fd:d1:
                    6b:25:15:3d:7c:45:2b:1b:23:ca:8e:f0:28:5a:2e:
                    4e:cc:df:2c:a3:31:a2:6b:e6:ed:11:8a:1d:29:86:
                    3b:58:12:60:60:8a:7c:aa:1d:c9:82:d4:b4:ad:c5:
                    d6:5f:4f:e1:4c:9d:2b:8c:36:2d:6f:51:27:ac:d0:
                    de:96:f4:f5:ed:db:ab:38:98:8d:a3:5e:85:b8:3c:
                    1e:46:c2:51:7f:34:19:9b:0e:2a:ff:34:ff:a9:62:
                    43:b9:ab:1e:75:fa:38:7c:f5:50:ed:d6:dd:1c:e9:
                    f6:b2:b1:21:c7:29:e2:67:2a:27:db:b6:0c:67:3b:
                    2b:a3:c9:42:64:b9:9f:3b:a9:2d:6d:1d:d1:c4:a0:
                    0d:19:de:ac:0a:2d:17:6a:c2:d0:ef:6e:88:9d:3e:
                    30:61:8a:07:39:d2:8f:a2:2f:01:99:a1:76:74:f4:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EF:F4:BC:97:C1:D3:BF:64:95:FB:F8:3A:93:3C:44:E8:A7:60:E9
            X509v3 Authority Key Identifier:
                keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4c:15:78:bf:ff:7a:b3:39:17:dd:25:ec:69:b2:4a:69:8b:
         3a:f7:c8:28:0b:d2:4b:32:2e:ab:50:5b:c6:67:e4:ba:88:83:
         8f:38:2a:ec:e7:b1:76:0c:89:1c:fd:be:db:96:90:03:a3:c9:
         17:58:ed:0f:21:90:7b:a1:5a:6c:c1:8f:c4:28:d1:13:81:fc:
         fd:d5:3e:47:27:49:4a:5b:2c:f1:86:e5:4d:20:39:cb:71:47:
         25:22:39:22:69:b9:41:2f:a6:5e:ac:60:b7:3d:9c:74:9b:fb:
         27:6d:14:b9:98:02:4f:94:43:8b:4e:9a:73:f2:4f:eb:50:64:
         36:5b:ee:00:b2:90:1a:c9:70:92:2e:5c:b9:68:27:1c:20:dd:
         ca:1b:db:be:8a:1e:d4:47:2b:aa:55:8b:a3:c1:68:ee:e1:7b:
         e7:fd:a0:88:3b:d3:5a:82:bd:da:c9:58:47:70:76:f7:e2:f8:
         93:f1:de:2c:ee:db:f5:4a:64:8a:3b:c3:30:f1:00:4c:70:b5:
         c0:fe:be:30:74:d6:ce:87:e0:4f:fb:c7:e2:84:0e:a6:d4:75:
         9e:cf:d2:5c:47:38:2e:39:90:fb:8f:70:51:54:1d:21:7e:c0:
         a5:e2:19:d8:18:46:e0:1d:e7:16:96:89:39:43:d1:2a:93:0d:
         af:54:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:51 2024 by rpki-client on console-fra.rpki-client.org