Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File:                     AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier:          pGzx+Bkc05/9qZGywpEFrmyha7M1Gh2In+BgRc8SxW4=
Subject key identifier:   98:E4:83:88:22:EF:C8:95:91:2A:B1:BD:87:DE:15:91:BC:C4:CB:DF
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer:       /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial:       01935B7855A40385526537CEB33A5BB77F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number:          1372
Signing time:             Sun 24 Nov 2024 00:00:33 +0000
Manifest this update:     Sun 24 Nov 2024 00:00:33 +0000
Manifest next update:     Mon 25 Nov 2024 00:00:33 +0000
Files and hashes:         1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: gNLAoQK4HhxDofUT0ZdISJD9SjDwW3fZKx+QWGgbMBQ=)
                          2: lMGdYgzwgaT_E7URumGsKGYpRm8.roa (hash: kL2rl4lRguL/8Xce/Og8ZuX7b8NIeWwAkD9AdWaLC6M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5b:78:55:a4:03:85:52:65:37:ce:b3:3a:5b:b7:7f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
        Validity
            Not Before: Nov 24 00:00:33 2024 GMT
            Not After : Nov 25 00:00:33 2024 GMT
        Subject: CN=98e4838822efc895912ab1bd87de1591bcc4cbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:69:1b:99:ef:35:e0:5f:fe:a5:f0:3f:93:
                    28:15:9c:f6:33:56:c4:4c:d7:ec:dc:40:e3:90:3f:
                    24:a5:70:14:c6:b7:bf:56:32:77:06:ae:89:d4:07:
                    b1:ed:a7:55:93:ce:c9:7b:a2:bd:ba:d7:0e:88:3d:
                    f7:be:b7:37:6a:6e:e0:f0:62:45:a3:1f:e0:2b:e4:
                    40:c5:d6:9f:b9:1e:58:ac:3e:ff:10:c1:14:e7:e0:
                    0d:c9:66:93:13:33:96:4b:7a:cd:40:c5:fd:fc:94:
                    50:4a:ca:2b:71:0c:7e:ab:0c:e0:da:d8:5e:63:dd:
                    85:8d:0b:6d:b9:37:b7:67:5c:8c:d0:05:58:44:90:
                    d0:85:87:d1:07:42:43:29:3f:6b:00:10:39:49:58:
                    f7:b9:68:57:cc:8a:54:6c:bf:c3:60:c0:ff:fe:d2:
                    d5:6a:ee:1b:c4:5b:63:21:e4:dd:48:7c:73:2c:d3:
                    94:1e:34:cd:7a:c3:d6:47:3f:97:b8:85:16:ca:07:
                    83:4e:fc:53:81:66:60:eb:af:c5:d9:59:14:e6:30:
                    c5:34:ef:22:d6:80:4f:0b:27:91:2c:46:42:35:35:
                    b5:ed:91:3f:c4:94:7b:7e:49:be:db:1a:52:12:87:
                    f4:da:7c:1c:ef:cb:df:9f:d4:11:20:90:ea:1d:1c:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E4:83:88:22:EF:C8:95:91:2A:B1:BD:87:DE:15:91:BC:C4:CB:DF
            X509v3 Authority Key Identifier:
                keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:f7:af:bb:d4:f8:93:4c:f3:dd:08:0b:7c:da:8e:2d:dc:
         44:4b:e5:7c:27:2e:f9:60:07:1d:b9:70:ef:35:68:5c:a7:a5:
         1a:5e:fa:5d:5b:2b:44:9c:fa:1d:47:85:10:29:22:09:42:8f:
         57:95:16:cc:ee:9c:3c:d0:72:43:d6:94:5b:a2:c7:7e:6f:2f:
         12:6d:75:cb:6c:ab:8e:bc:9a:ba:77:1d:97:0f:84:52:27:a2:
         5b:1b:7d:65:7f:c3:f2:2f:77:67:b4:ab:fc:53:88:0e:79:7d:
         ff:70:55:15:66:05:40:d9:6d:a0:21:72:a2:07:70:24:01:30:
         5f:c2:ae:6a:11:c2:d1:12:3c:c4:40:46:62:7b:da:67:34:e3:
         d1:8b:91:82:55:01:6a:be:8b:c6:9b:57:a0:73:7c:af:f5:07:
         f8:90:e8:74:da:4c:28:da:d4:76:eb:b9:f5:af:06:3a:44:eb:
         92:67:19:cc:3a:bd:fa:96:b6:f7:0b:87:3f:24:bb:b6:86:f1:
         95:16:8a:1c:73:bf:14:32:ab:31:82:22:2f:53:fe:c8:15:a8:
         c8:9e:63:3d:ab:43:f5:8c:98:0a:76:9d:48:86:3a:08:e2:4c:
         3c:6c:ac:a4:63:ae:95:e7:f9:46:a8:ac:2b:32:b9:ef:d8:44:
         07:a1:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:46:17 2024 by rpki-client on console-ams.rpki-client.org