Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File:                     _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier:          ujP8w0FIMYyyDIrWyLdSCFYAIXcDXigMXmkzf4m6zNg=
Subject key identifier:   FB:8E:A7:23:5F:C0:5C:9F:FB:27:CC:0D:64:9D:6A:68:AD:EA:21:81
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer:       /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial:       0193572D9AC4DD7EC5AC3060CC9DF140FB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 04:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:26 +0000
Files and hashes:         1: 14pfV4nKv4Bma3_1Jh3J9_t-eJc.roa (hash: OXDphgmvfOQt5XyN/bTDy6A8yIHIcXuPWelWCLl95hU=)
                          2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: On4oJW77wW0sHbm2hCmub+H0/KHQOvee4nBeLtBEgIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:9a:c4:dd:7e:c5:ac:30:60:cc:9d:f1:40:fb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
        Validity
            Not Before: Nov 23 04:00:26 2024 GMT
            Not After : Nov 24 04:00:26 2024 GMT
        Subject: CN=fb8ea7235fc05c9ffb27cc0d649d6a68adea2181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:f6:76:01:ca:b5:33:e4:4d:1f:f6:49:2d:
                    9f:a2:65:b6:8b:4f:39:b6:fd:83:dd:cb:98:0a:93:
                    60:a0:6e:72:c5:72:66:40:77:fe:4c:81:2d:cd:37:
                    7d:08:87:88:6d:e5:a6:35:ba:ea:e3:3a:96:5f:67:
                    e2:db:1c:99:6e:0f:a2:af:3d:3c:78:06:d3:7d:60:
                    9e:5a:1e:a8:b3:60:9e:ea:44:24:f9:84:ad:b7:9a:
                    a1:47:a5:8f:5f:be:88:1e:f4:f1:0d:8f:38:47:58:
                    b9:16:eb:5b:b0:f9:27:d4:d9:59:cf:cc:f3:b8:b1:
                    c7:51:42:34:b1:94:32:75:93:e5:0f:a6:1a:55:6f:
                    14:25:8a:8f:d3:86:03:f1:b6:2d:3f:10:04:1e:26:
                    a2:14:b0:05:89:f9:ed:a3:5d:14:06:a9:98:fa:39:
                    fe:2f:eb:21:bc:17:44:ef:e8:9a:b2:84:95:7b:af:
                    16:18:c8:eb:c1:a1:83:56:cb:ea:8f:65:c8:07:93:
                    8f:39:74:7e:24:b7:ee:f6:a2:f9:0a:e3:a2:a0:71:
                    a9:b4:69:0d:df:48:4d:66:34:45:8a:a6:8a:70:c8:
                    99:93:ce:7f:01:53:8b:fd:95:89:f6:ff:cd:39:37:
                    43:63:b3:b0:cd:f2:fa:a2:f8:4a:7c:7d:8c:0a:bf:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:A7:23:5F:C0:5C:9F:FB:27:CC:0D:64:9D:6A:68:AD:EA:21:81
            X509v3 Authority Key Identifier:
                keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:10:be:1c:1e:ba:f6:a3:2c:cb:8f:d3:78:15:90:ff:29:29:
         a3:ec:42:90:a5:27:bd:e8:77:3c:7f:cd:2e:89:48:12:59:bb:
         fb:00:f2:6c:07:5a:2d:03:e5:fe:62:e3:2e:fc:7c:2b:2f:7a:
         18:8c:ed:3b:98:74:4f:94:4d:32:22:5d:23:36:88:62:e9:09:
         88:e6:8c:6b:c0:a6:d8:cb:e0:35:f0:1b:6c:dd:c8:38:d9:d3:
         c7:ca:da:52:40:f3:f7:fc:5c:5e:97:9f:aa:1d:2e:be:cc:b8:
         67:d0:d8:98:db:26:cd:57:bc:07:4a:f4:49:2f:ad:60:87:3c:
         d7:27:22:a7:26:fa:c9:b4:c8:5e:98:28:f5:14:9e:e2:7e:84:
         7f:7e:0f:ec:2d:a9:bb:ea:a0:67:f1:21:07:a6:95:7e:cd:77:
         35:ae:f3:e4:b2:6c:54:53:79:55:37:a0:ed:91:5f:1e:50:55:
         a4:19:15:e3:8c:9a:2d:6f:75:d6:42:8e:4c:79:28:85:68:b9:
         c4:43:e8:fd:35:7e:a5:0a:1a:43:9c:72:5e:d4:96:94:4a:f1:
         22:63:b5:a3:b5:4a:89:ae:85:26:75:a5:ea:f2:46:16:0b:02:
         7e:6a:85:43:6e:57:37:ca:62:15:6e:3f:da:1e:36:2d:40:23:
         01:e0:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:33 2024 by rpki-client on console-ams.rpki-client.org