Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File:                     fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier:          MZZACaz10Gc/4NdXbZEFVA7CKc1Xq00Bev8C2m8NbYA=
Subject key identifier:   C9:33:34:A0:DC:26:E8:8D:5A:2A:B7:0E:72:F0:6E:AB:EA:8B:63:E3
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer:       /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial:       019358785FD60D71DE37C0220E506154DCAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:01:44 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:44 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:44 +0000
Files and hashes:         1: E9a2cPt81Zg3KoC7MdcSs6nGf4k.roa (hash: Jr1tFkjqLCVhZB/pm48eGERjpHI2JMSx1tltUlospy4=)
                          2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: vrTHCjI/lwnr+7s0wMoaBzkLJCRXAxDctvRu6MXLEyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:5f:d6:0d:71:de:37:c0:22:0e:50:61:54:dc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
        Validity
            Not Before: Nov 23 10:01:44 2024 GMT
            Not After : Nov 24 10:01:44 2024 GMT
        Subject: CN=c93334a0dc26e88d5a2ab70e72f06eabea8b63e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:58:6a:07:d0:c7:f8:be:db:76:96:bd:f9:9e:
                    8b:e0:40:e4:0c:70:c6:bd:d3:cd:54:5f:63:32:65:
                    35:f9:f2:38:aa:23:6b:72:f6:80:cb:dd:45:e2:3a:
                    d8:13:ac:15:27:da:9c:a7:90:ac:c1:c9:7b:79:ce:
                    7c:99:3b:02:55:70:9a:7f:3c:d5:22:46:b2:6e:dd:
                    cc:84:65:bb:c5:d1:79:b1:6c:ef:de:63:42:39:dd:
                    ce:48:4b:d7:89:ab:c7:d4:5c:53:e0:11:f9:eb:fe:
                    26:70:53:5e:c4:3d:ea:40:f0:40:ea:ad:4b:5a:12:
                    40:b6:79:bb:c1:32:8c:70:82:18:31:0b:fb:ea:a4:
                    15:0c:ac:47:37:a7:f4:0d:58:cc:4f:09:ad:a3:28:
                    4f:c9:18:3d:36:1e:99:d0:0d:32:04:c4:ca:22:d2:
                    60:ca:f4:91:80:74:5d:4a:93:14:c4:6f:d4:78:6e:
                    eb:fd:35:29:39:2d:28:fa:78:5d:a0:b4:3a:10:fa:
                    5b:66:51:d1:fb:12:1f:1e:b5:7b:c1:d7:48:a4:04:
                    4a:10:70:57:1b:4b:b6:02:6b:e5:f9:d0:b8:81:6e:
                    f3:41:aa:e5:20:d8:a6:7c:43:55:3f:50:53:cc:59:
                    51:03:d9:73:aa:cb:59:df:22:af:6b:04:dc:89:de:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:33:34:A0:DC:26:E8:8D:5A:2A:B7:0E:72:F0:6E:AB:EA:8B:63:E3
            X509v3 Authority Key Identifier:
                keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:70:25:1e:44:d2:a5:cb:ae:b2:1b:30:96:45:fb:9e:d8:fc:
         43:ba:97:ce:25:d6:d9:3b:37:21:88:2b:44:4d:53:ca:87:91:
         9c:1b:7a:3d:6c:93:66:36:b1:b0:3e:a4:ea:1f:f8:20:78:c8:
         19:46:6f:ea:72:76:25:9d:39:0e:d0:ac:31:1f:f2:5a:99:bd:
         2a:86:a0:0a:0b:92:1f:4c:85:9e:92:3e:58:ad:16:7a:5f:31:
         20:e9:6c:19:51:7d:45:fd:b5:7b:f6:64:d1:45:71:ba:15:ea:
         4e:e3:03:c6:3c:0a:dc:5d:ca:2f:88:aa:ea:db:40:98:be:32:
         5f:00:05:ff:35:17:5e:d9:47:a6:52:3e:38:e5:d4:24:e6:84:
         2a:91:0f:93:1e:a4:89:eb:78:f3:ce:7c:16:17:a3:81:07:7c:
         fb:55:52:3d:d0:60:e6:64:95:d6:ba:b1:cb:dd:8b:dd:d9:61:
         f5:f9:1e:2c:e5:28:e2:4d:ef:1a:43:04:c7:fc:74:2e:b2:98:
         df:a5:13:2b:e1:e6:db:1f:1e:a7:9c:5e:c1:70:d6:be:6d:40:
         97:15:75:a5:1a:ef:86:c4:ab:3e:73:74:ff:2b:b3:4b:1a:e8:
         4a:d0:b8:57:6a:cd:a8:16:4d:2c:28:e3:78:69:90:50:54:5e:
         72:0c:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:40 2024 by rpki-client on console-fra.rpki-client.org