Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File:                     gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier:          6oyW8OXEzD31nOZG7FSCw663W9UGg8uD8SMH0rs/Ie0=
Subject key identifier:   4A:E0:61:71:A5:A1:10:FF:EF:39:6B:E5:A7:36:17:54:A4:D2:13:53
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer:       /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial:       019369D9B089D36F37D34CA35DFDD40E02D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:01:34 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:34 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:34 +0000
Files and hashes:         1: EBiJ3aQaltoRD9MLuy2zv1nRp70.roa (hash: 7GKQ7GSUAPWwCQwXf/G7nhiN7DbTdWYb4xz2ezGm74I=)
                          2: _FrXU6Wkf3mHSPICoCAMktkmmJM.roa (hash: twM8u5KM5Opy5uT/f/vpbuxgJU3zqoS3QCro0uS5RR0=)
                          3: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: orDQ+aZdBUnhF4w5E/puiFauXGl4dbHLOclhwYTgONI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b0:89:d3:6f:37:d3:4c:a3:5d:fd:d4:0e:02:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
        Validity
            Not Before: Nov 26 19:01:34 2024 GMT
            Not After : Nov 27 19:01:34 2024 GMT
        Subject: CN=4ae06171a5a110ffef396be5a7361754a4d21353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:b0:03:43:72:32:42:80:3d:88:bb:c3:73:
                    03:72:a7:75:e4:7c:46:e9:f5:9f:ed:a6:fd:64:bf:
                    d5:5b:61:cc:5f:33:56:4e:21:ff:af:e7:a0:4f:b8:
                    1d:6b:43:a8:cf:e8:9b:57:4c:d8:40:7b:a7:58:4b:
                    6a:0e:51:08:11:cc:36:b7:db:1a:2c:72:66:55:8b:
                    ba:cb:68:2f:f7:de:fd:4a:83:3d:aa:c7:16:e9:03:
                    14:c9:e7:89:80:09:61:0a:da:c4:38:13:92:b0:62:
                    95:0e:8b:13:9c:d9:88:8d:a0:cb:14:f4:1f:46:55:
                    30:41:a3:22:28:f3:6f:74:fb:88:f6:70:1a:b5:e5:
                    72:a7:5f:59:be:1a:e1:3b:db:4a:c8:27:9e:29:ff:
                    a0:10:dc:7e:78:0c:c0:f7:fa:28:80:a7:46:49:e4:
                    81:a2:d1:93:b3:51:49:79:99:e0:85:14:a2:4f:db:
                    0f:6a:9b:75:3d:49:2b:d9:4d:7f:ca:23:a5:1c:c9:
                    9a:d7:ff:86:28:52:6c:fa:60:c5:0e:59:2e:73:9b:
                    54:6c:a7:93:aa:58:dc:8f:dd:a0:63:06:cd:1b:51:
                    43:29:f6:e5:22:c9:ee:6b:10:68:59:3f:a4:13:c2:
                    ad:e7:d6:b5:61:fc:d4:f8:44:e5:51:40:c1:2f:a2:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:61:71:A5:A1:10:FF:EF:39:6B:E5:A7:36:17:54:A4:D2:13:53
            X509v3 Authority Key Identifier:
                keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:39:17:47:50:68:8f:aa:af:57:0d:3f:dd:b0:bf:ba:f4:85:
         89:27:0f:80:f8:85:31:b8:6b:f4:a2:30:51:30:d8:b8:c7:79:
         a0:2b:72:a2:c9:f2:7f:91:fb:28:65:9f:ca:26:54:e2:7e:30:
         6a:04:c0:f6:80:15:cd:5a:8a:e8:f3:22:49:33:76:c7:a5:d9:
         27:b4:43:51:0e:ba:34:93:c8:41:9f:bf:1e:84:b5:68:37:a3:
         f2:b9:a3:52:90:f9:4c:5d:fd:96:de:43:34:b1:2a:8c:da:94:
         5c:1b:dd:2e:72:cc:51:0c:f9:11:b4:a9:0f:dc:19:c7:f5:06:
         fd:8a:2e:a4:de:93:23:9a:30:2e:45:55:cb:a1:fa:1d:e7:10:
         e4:c5:b5:80:b1:eb:f8:81:72:2f:d0:59:0b:9f:62:8c:19:83:
         85:0c:2e:e2:53:10:89:f0:46:8e:d6:00:f4:7f:b4:d7:09:7f:
         09:37:1c:f3:14:c3:4c:0d:04:78:ed:ff:78:f7:8a:00:d8:d0:
         b8:41:1c:1d:1f:70:01:3d:70:c1:79:43:d8:7b:2a:e3:57:dd:
         8c:54:d3:84:bf:7f:c4:9f:ed:8e:67:b6:20:45:d8:0e:87:83:
         a7:e8:58:fb:16:59:27:13:8f:c2:af:16:ee:40:2d:a2:59:0c:
         f7:e7:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:38 2024 by rpki-client on console-fra.rpki-client.org