Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File:                     SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier:          qIzUFnAFGXbHahRL364wtph+IsBX0uoUIm1DE3DptNI=
Subject key identifier:   1F:0E:DD:B2:75:DB:F9:4F:64:C3:5C:0E:62:17:67:4B:BB:9E:6E:2F
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer:       /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial:       01936A7D7050A2B8C449AE86D37696F0A1A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number:          0FD7
Signing time:             Tue 26 Nov 2024 22:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:25 +0000
Files and hashes:         1: HzdEd_L9GboUmQgo9i1YsUpTZLE.roa (hash: JdS0Z9rWjFDY5NNFvpILZRDwGuzBz2dzcSr0kJHaxjA=)
                          2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: a5ZFJJmvCbfrxdVyaz2gx7kEtX8sodOZfj4m5vUhlEQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:70:50:a2:b8:c4:49:ae:86:d3:76:96:f0:a1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
        Validity
            Not Before: Nov 26 22:00:25 2024 GMT
            Not After : Nov 27 22:00:25 2024 GMT
        Subject: CN=1f0eddb275dbf94f64c35c0e6217674bbb9e6e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:15:0a:1f:57:ef:ac:cf:e8:95:59:97:2c:
                    65:ae:69:c4:d1:45:8b:33:54:47:66:61:41:5c:b4:
                    57:37:d0:c3:44:35:0e:da:81:ed:84:e1:da:4f:a1:
                    d9:5b:cc:e9:92:bc:76:f1:c3:e8:64:75:65:41:9c:
                    5d:d1:74:75:16:73:75:02:12:a2:91:21:72:54:ac:
                    e3:5e:50:de:4e:19:7c:d8:bd:92:7c:ac:04:f3:42:
                    d3:16:22:75:0f:07:34:f0:b5:9e:da:6c:8d:fa:e4:
                    79:58:e7:f6:45:9f:93:aa:9b:7a:53:2f:c1:8f:6d:
                    73:ed:15:d7:7a:08:18:7e:da:02:7b:a3:d7:ec:fc:
                    e0:18:38:86:ad:7c:64:c8:b3:84:be:32:ad:2b:39:
                    9f:70:4c:95:f4:9f:2c:46:af:19:42:9e:d2:72:50:
                    1f:a3:f2:21:38:34:11:56:1e:c1:78:41:d8:b2:aa:
                    f3:3a:fd:6a:2c:c7:26:c1:d9:6c:21:6e:13:80:ad:
                    05:8d:e5:11:d1:b4:ef:3d:06:72:45:ee:e4:42:6d:
                    c2:89:87:14:e1:ee:7f:12:35:25:3c:6a:67:39:11:
                    33:1d:a7:d2:97:c8:02:ce:c2:24:b4:59:d7:81:aa:
                    57:5d:32:fb:d1:e4:a5:f5:a8:66:93:71:14:b9:7f:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:DD:B2:75:DB:F9:4F:64:C3:5C:0E:62:17:67:4B:BB:9E:6E:2F
            X509v3 Authority Key Identifier:
                keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7f:7b:4a:42:a9:63:62:12:d4:27:c5:5c:e6:b3:64:c9:fc:
         e0:9e:b7:b7:ba:a0:34:96:90:79:7d:a7:09:53:10:e2:f9:7a:
         b3:c8:2f:c9:25:86:23:84:5a:4c:13:b8:7b:de:ed:e1:d6:a9:
         90:8c:57:06:28:73:6c:d5:d5:a9:fd:23:b3:53:28:95:e5:cd:
         93:7a:b6:e7:c4:48:f5:07:2e:31:b7:8b:c3:a4:64:78:b8:be:
         4c:18:e0:88:25:c8:4f:af:40:2d:d8:5a:05:43:70:06:31:8b:
         33:f0:d6:05:bb:d7:5a:c0:e9:f4:2e:dc:41:7d:96:cf:64:2a:
         6a:36:94:89:07:33:ad:38:e0:90:60:e7:58:5a:6b:ad:51:01:
         8d:79:dd:0f:24:e1:37:c8:18:3b:de:79:0a:7d:7c:f9:67:9a:
         7c:a7:e6:e1:da:1e:f7:47:09:56:37:ae:4b:c6:75:a1:d3:d8:
         cd:5a:de:ea:7e:d1:ae:62:e9:91:a0:98:b4:ac:a4:42:7e:c1:
         25:56:64:e8:75:67:80:29:78:40:6c:d5:c0:c0:33:b6:d2:88:
         00:b6:3a:55:3c:77:b6:ce:91:99:7c:70:1a:27:09:71:fa:b4:
         98:86:d0:7e:71:cf:c5:5b:5d:cc:7a:0c:3a:8e:12:5b:ec:83:
         55:11:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:57 2024 by rpki-client on console-fra.rpki-client.org