Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File:                     32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier:          1pQz62JXd1fFTOW9AAlKM4xPCcvrCUgVtE8WExAQDno=
Subject key identifier:   C8:52:96:5E:0B:38:31:CB:E4:6A:39:E7:71:E4:24:B3:F5:7A:BA:A2
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer:       /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial:       019406479D66C74D06912D3126A3448948A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number:          0A5E
Signing time:             Fri 27 Dec 2024 04:02:24 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:24 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:24 +0000
Files and hashes:         1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: +1ROKHS3djztrVWUIcF+21adI92djtHNjyQIWhisK6s=)
                          2: ESSqtK2wO7i2bUMK9L2wNaQe-eE.roa (hash: w1T7eC5xYqPCUrRh0ms1cvMKA8DmkoPGGFP2qqm45z8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:9d:66:c7:4d:06:91:2d:31:26:a3:44:89:48:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
        Validity
            Not Before: Dec 27 04:02:24 2024 GMT
            Not After : Dec 28 04:02:24 2024 GMT
        Subject: CN=c852965e0b3831cbe46a39e771e424b3f57abaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:cc:aa:6d:8c:f6:ee:40:b9:28:b2:0f:8d:
                    20:ea:b3:fa:5d:32:8e:54:bf:41:43:7a:85:51:0b:
                    0c:01:87:9a:75:6f:f7:df:5b:91:c2:23:a4:94:a6:
                    e4:84:b8:44:86:2a:e5:78:06:01:a6:2b:ec:08:4c:
                    72:77:8e:94:96:a6:32:36:70:a2:62:2a:77:4f:b3:
                    37:af:21:a7:2a:87:6c:8e:e0:b9:c7:09:7e:f3:a4:
                    4d:bc:c7:42:b4:cb:43:77:41:8f:d3:57:39:a7:28:
                    92:c4:a8:5c:2f:c6:fe:e4:47:c6:f5:e3:4d:c5:e8:
                    d5:a1:ac:bd:83:98:6c:f7:78:fb:ae:07:e9:9f:7c:
                    a6:ab:5e:e8:08:7b:88:22:2e:ff:7d:1a:bc:8f:f2:
                    f6:5a:b7:e1:9a:9c:9f:49:21:1b:d1:0b:96:85:eb:
                    48:ac:37:ce:44:36:8a:0c:66:87:ec:e5:83:e5:45:
                    b1:67:9f:77:1d:ef:b6:43:d2:29:87:34:d4:b0:17:
                    d1:6c:ff:0d:73:a1:8d:08:c5:bd:22:5b:27:68:d3:
                    0b:4e:81:48:63:d3:cb:b3:bf:b4:a4:47:2a:1d:95:
                    2b:cd:27:47:93:ea:66:e5:fe:5b:0d:a7:f2:c8:b0:
                    fc:4a:d4:3f:af:e9:55:25:ca:f6:7b:9b:31:87:46:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:52:96:5E:0B:38:31:CB:E4:6A:39:E7:71:E4:24:B3:F5:7A:BA:A2
            X509v3 Authority Key Identifier:
                keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:72:10:8f:56:1d:92:87:68:da:00:19:51:26:07:1c:b4:ed:
         c2:f0:3d:84:65:7d:fd:f7:4d:80:8a:0c:a6:06:d9:4a:f7:dc:
         8a:de:70:26:5b:34:b5:5b:31:e0:8d:eb:25:51:a3:c9:7b:28:
         0c:f3:77:94:5a:44:b1:17:47:81:26:f6:a0:23:e8:d4:f5:15:
         20:21:4a:b8:d9:54:7e:e2:5a:95:a4:3b:d7:a1:bb:39:4f:16:
         b2:83:e5:5f:4e:09:db:e6:0e:b9:25:c7:94:e2:09:56:5c:e3:
         0c:d5:50:9d:4f:7d:e1:22:86:74:c7:9d:5e:b0:fb:78:b6:a6:
         b5:52:63:c4:50:5c:63:50:a6:4e:b8:c9:26:7e:b4:ff:5f:25:
         5f:8a:4b:1d:fc:43:6d:5f:a8:46:f2:b2:b7:f1:33:08:49:1f:
         56:d0:cd:38:da:92:8a:2d:d1:76:20:48:ee:7a:ac:ac:97:ad:
         5a:60:bf:a4:49:ef:fb:4b:66:d2:37:c4:4a:d0:4a:38:69:bc:
         cc:f3:b6:d2:b4:70:8c:f4:7c:a2:dc:6d:4c:5e:46:71:35:1f:
         2d:f0:c6:49:ca:a0:ee:77:bf:ff:21:af:2d:68:27:1f:30:be:
         54:62:92:9c:0d:af:ac:de:b3:59:fa:a1:d3:5e:61:9d:9c:11:
         c7:fc:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:02:19 2024 by rpki-client on console-ams.rpki-client.org