Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          Pv0SQRdYm/FTLLcVXHsT5G+hyUTBBFNgW1BnjaeXdDE=
Subject key identifier:   DC:85:18:AC:98:51:CF:A6:D5:80:31:52:A0:30:2F:80:C4:F2:E5:60
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       0193696AC31A9D753903528E57B410A1BCE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          1386
Signing time:             Tue 26 Nov 2024 17:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:24 +0000
Files and hashes:         1: 1-GUJOX3Jx6nFu8a1ttq56DiRPM.roa (hash: w80WJqZ2eiwl5yJwH9FVE0RzApOJ3l8Rcu23EbK/BD0=)
                          2: CJ38vsUglLYOya47YrmR1ErxmKI.roa (hash: cIKHObsWsy+6Sw2GuTn0LnMh/KmxRXbeL+4vm5WKnz4=)
                          3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: R7dkdVLa+nMAX0+58WPchIp9siFHOPMkjgxzngUGxZc=)
                          4: Qz1afKSLj-kUmZS1t6WSTBIBWtg.roa (hash: oAl+aZIJfhpIJl64ugQJiw3d2KDxKbKYb7Yse8ltPjs=)
                          5: _aDHy8crGCk2GPJaE52dMLe10vA.roa (hash: jVW/CA6PBREHWSPkIStUs46TCsR+/zLW+VPd8f4YrL4=)
                          6: brMKD2kQ_k3I889RG9UmNawYygw.roa (hash: A2ldBKtNe9zhvZh/YVVPD65ScvDYSQmBf6K53XBEbRU=)
                          7: c9x1IHh8_iCOG8QK_cvLQvBE5qs.roa (hash: 1HTkoM1VdeHfcBLFtNBuiCl4BZcKtrwtAkBYBS1kEqg=)
                          8: uCOmrTYkCgJPFH1ftm5Kx_l9LBQ.roa (hash: ctYQR+Zy7jUgkrvCITnf1EysHhdHiU0sv2pw0Y48wIs=)
                          9: wOTCxkH7jfXpZlBXif2Q3ObS718.roa (hash: 1AS+gBFKaAp2JqevLphf64Y91zjiIjqMe6PmE5X48Gk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:c3:1a:9d:75:39:03:52:8e:57:b4:10:a1:bc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Nov 26 17:00:24 2024 GMT
            Not After : Nov 27 17:00:24 2024 GMT
        Subject: CN=dc8518ac9851cfa6d5803152a0302f80c4f2e560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:39:e7:0d:bf:80:94:f8:21:96:a3:4f:17:
                    ea:71:cf:0e:8b:12:0a:99:f9:27:b2:11:0a:e3:52:
                    75:71:52:7c:ca:ba:fa:76:8b:be:43:1a:78:a5:e1:
                    75:d9:3b:69:18:ca:86:57:1a:7c:02:26:b8:24:a5:
                    f4:a0:e1:7c:a6:67:3e:df:5d:fd:95:ff:fc:f1:f9:
                    c0:79:06:ad:e3:85:39:80:6c:ab:6f:88:e2:0f:ca:
                    8d:39:ea:8a:9c:3c:6d:90:5c:74:b5:13:62:cc:a1:
                    84:41:7b:f5:6c:f4:a1:a7:a5:e8:21:3d:0f:de:68:
                    b3:6c:4b:84:7d:72:41:9e:80:30:dd:4f:20:2c:4f:
                    19:6c:bb:07:ba:e7:95:70:d0:40:c4:15:52:ad:a0:
                    d9:45:b4:e2:5f:c9:40:26:99:56:fd:92:26:d1:f8:
                    43:81:d6:7a:98:e9:fc:18:ca:3d:1b:e1:bb:3e:f9:
                    56:cf:0b:55:0b:61:d6:08:20:2d:de:10:49:37:06:
                    8f:36:17:a6:e7:c4:14:1c:fa:c5:57:d6:12:14:72:
                    51:a5:a6:9c:76:1a:ae:91:0b:c8:1b:cf:a0:cd:b8:
                    7c:3f:9c:b2:dd:b1:cc:cd:c0:f9:02:a6:ae:62:d6:
                    91:5e:f9:e2:b2:7d:de:a8:6e:ca:8c:45:bf:3f:c8:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:85:18:AC:98:51:CF:A6:D5:80:31:52:A0:30:2F:80:C4:F2:E5:60
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:04:d2:74:9a:57:65:61:43:25:4d:5a:b9:c8:32:45:cd:71:
         f2:3d:17:c6:a3:09:f9:65:5b:1b:90:08:18:52:23:a5:07:9f:
         bc:8b:2c:5b:17:8d:b7:1e:da:d8:75:77:8d:b8:5b:52:61:ae:
         10:da:b8:19:e3:af:56:f5:c4:89:6c:65:48:fb:6f:f3:f6:48:
         4c:85:94:f5:58:7b:d6:9c:1a:0e:8e:b7:4d:8c:18:89:3d:f2:
         2c:67:a1:81:c7:b4:44:5c:d0:96:e9:29:56:f6:10:da:dc:a6:
         4c:ed:a0:70:0e:f8:f8:1e:3c:f3:38:a2:58:fc:de:a2:25:03:
         42:12:88:84:88:b4:77:ca:a2:1c:48:af:8b:77:f5:0a:38:dd:
         5d:c6:a6:c1:0c:bd:aa:30:f6:ba:70:96:e8:01:3a:d4:31:8a:
         cd:24:e3:dc:56:f2:8d:48:68:89:17:91:a9:bf:fc:7c:b7:79:
         60:e3:90:4c:35:d7:28:ec:b2:13:31:ac:a4:5f:12:41:26:32:
         32:f0:21:d3:55:36:c3:47:f1:1b:3e:cc:29:76:1c:97:92:1b:
         90:b8:db:59:14:0f:1f:42:98:f8:cb:64:fa:b4:37:ec:e8:15:
         44:be:9d:43:31:9e:9d:22:36:67:dd:2e:b0:0c:5e:13:94:b3:
         0c:7e:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:55 2024 by rpki-client on console-ams.rpki-client.org