Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File:                     D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier:          7ki5D4pWWfwoXEFbjdOMko8JQaGF0yZVu4KctzfaIfw=
Subject key identifier:   E6:91:FF:6F:07:4C:D7:38:4E:3D:AB:33:04:FC:D9:66:4D:E3:C8:49
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer:       /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial:       019358797C23882BC4FD7088ED6D8F4D52EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number:          0A07
Signing time:             Sat 23 Nov 2024 10:02:56 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:56 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:56 +0000
Files and hashes:         1: 7OBhVCWGPb4C8DuwHr_IKYVl85U.roa (hash: 1WmncQZLHYUxN4dr5t90mmtAep9gtOGQgsFy43AbUBU=)
                          2: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: ua3M3CkCiWbOMtRuTRCyKPc1a3gQusKJjefGibR55Cs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:7c:23:88:2b:c4:fd:70:88:ed:6d:8f:4d:52:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
        Validity
            Not Before: Nov 23 10:02:56 2024 GMT
            Not After : Nov 24 10:02:56 2024 GMT
        Subject: CN=e691ff6f074cd7384e3dab3304fcd9664de3c849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:fc:c7:4a:50:a9:38:84:8f:86:0e:4a:a0:
                    7b:bd:88:06:a4:c4:0e:c1:3c:ab:09:98:18:43:1f:
                    25:5a:0c:ce:5d:b0:a2:02:17:63:20:93:a6:23:97:
                    4d:64:8a:06:25:18:56:e9:86:db:52:ae:d9:92:e1:
                    6f:5a:84:76:9c:75:a5:81:ab:e8:37:d1:18:66:35:
                    e9:01:86:ff:9f:c8:16:eb:20:ef:57:26:94:e3:a8:
                    ce:40:cc:4d:9e:ba:a9:6d:38:26:7b:37:d2:a3:0a:
                    c5:de:e8:05:f7:41:8d:20:3b:2e:05:47:76:9e:94:
                    3b:2a:48:b7:1f:f7:0f:17:a2:49:b1:dc:1a:49:cf:
                    04:0a:df:ff:25:e4:0f:d6:a9:ef:69:70:2c:a4:25:
                    26:23:c6:3e:26:b5:b5:2f:9a:b1:29:f7:de:da:84:
                    48:91:02:19:ab:b4:1c:e9:4f:79:56:31:12:48:2d:
                    14:6a:66:3d:f9:4f:4e:99:b2:69:ae:2f:dd:08:2e:
                    0b:7c:0b:1a:db:0d:34:c8:85:7f:84:ef:75:ff:a5:
                    90:c1:d0:1d:dd:1c:d0:88:1b:a0:9a:d5:54:e2:23:
                    40:82:fd:16:a4:af:bc:c2:79:f6:c1:16:a3:05:9f:
                    82:b6:c6:2f:78:4c:88:01:78:2a:3c:ac:86:16:13:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:FF:6F:07:4C:D7:38:4E:3D:AB:33:04:FC:D9:66:4D:E3:C8:49
            X509v3 Authority Key Identifier:
                keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f2:04:05:e9:a0:53:98:b0:6e:3e:4d:e5:ee:47:5b:d8:db:
         17:1a:66:a3:09:8d:50:4b:89:94:16:94:b0:7d:86:9a:13:2a:
         95:7d:76:63:e7:5d:cb:ed:a2:bf:2c:0c:04:04:ce:55:cd:d4:
         46:58:3d:b0:4e:98:ab:ef:d7:11:00:53:d0:ac:70:1a:a4:9f:
         f6:4c:4a:ec:f6:a2:2e:ea:fe:40:83:09:fd:1b:57:74:73:3b:
         2d:33:3b:84:1c:6e:72:82:13:ad:77:ad:05:57:75:ae:45:cb:
         48:87:38:8b:98:aa:68:5c:a0:ce:a4:fd:86:5c:57:a8:50:3a:
         57:56:b4:56:10:62:17:4d:0b:8b:d5:d2:e1:7f:d3:61:f0:d8:
         43:f8:e5:1f:2c:1f:7a:dd:18:43:b6:54:2f:fd:7f:3e:a6:be:
         33:70:1a:9e:3c:4b:55:a9:b0:32:8f:1b:7f:11:25:f0:d9:de:
         32:83:56:bf:02:63:36:ef:3e:80:eb:14:cf:5d:cf:33:f7:ce:
         63:41:8e:bb:48:ed:bd:b4:d9:d9:9e:3f:bd:00:a4:a4:66:6a:
         4b:e2:e9:85:77:d6:23:ee:72:f5:7a:5b:46:01:b7:33:9f:1b:
         ba:7b:aa:e0:4a:46:fa:d2:95:39:f4:ca:a9:e9:75:38:b5:cc:
         b2:b0:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:19:10 2024 by rpki-client on console-fra.rpki-client.org