Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File:                     iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier:          aYBRz9JM7zQQ3bzfqe5JlB0bMIJBJxqZ8Hi0fq6ndCs=
Subject key identifier:   14:38:C9:69:DE:37:DA:22:2D:E9:44:0F:A8:80:7F:DE:79:6E:72:E4
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer:       /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial:       0193652042F8E2F22FC1239791B728739006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number:          0465
Signing time:             Mon 25 Nov 2024 21:00:33 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:33 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:33 +0000
Files and hashes:         1: hM2TXILjwRXKu19RCABsoim6Yx0.roa (hash: yD4bfloOB0QmM5WElpoC2NCau7DP9NvpFOTIvDCmumg=)
                          2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: GdZO9tXB/pk6NRl4YAcRqjaEhf7zzGsHvd+tXBE9Mpk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:42:f8:e2:f2:2f:c1:23:97:91:b7:28:73:90:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
        Validity
            Not Before: Nov 25 21:00:33 2024 GMT
            Not After : Nov 26 21:00:33 2024 GMT
        Subject: CN=1438c969de37da222de9440fa8807fde796e72e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:c6:1e:ba:0e:4d:3d:26:96:0c:7b:02:92:
                    2f:51:2c:61:b1:cd:19:4c:fb:db:a4:23:1b:70:56:
                    bd:66:c5:ab:ec:b4:22:11:ba:21:0e:a9:de:dc:06:
                    1c:6b:f2:97:93:84:4d:ee:82:68:3e:4f:ea:02:4b:
                    19:63:41:33:82:1a:dc:e0:3c:71:57:1e:51:88:71:
                    cc:54:7e:f7:87:2f:c7:b2:48:e4:3c:99:af:b7:ab:
                    a9:28:ff:a9:31:5a:05:ac:a0:8a:77:29:c6:44:f6:
                    5d:b7:07:17:61:fe:6c:84:58:7e:b9:c7:72:f5:27:
                    51:16:3f:0d:31:9b:be:0f:fa:e8:ad:82:3c:34:8a:
                    6f:75:1c:71:4a:ae:8b:fb:d8:8e:5f:78:b4:de:f7:
                    8e:55:02:72:15:bf:76:70:0c:68:82:f0:f4:7d:51:
                    8e:89:78:b3:0a:8c:88:6b:b4:da:0b:1c:d8:0b:04:
                    ca:6e:c4:c4:60:9f:14:ee:7a:9a:fd:8f:a5:77:1f:
                    59:0a:d4:3a:23:9c:5e:21:14:46:6c:a7:45:ed:48:
                    14:99:a1:6b:93:3c:dd:a6:29:1b:97:ef:be:dd:71:
                    53:79:a1:24:85:04:72:3f:a9:41:74:93:bd:df:0b:
                    51:5b:da:81:20:47:d3:16:1e:4f:88:ac:e0:5c:d0:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:38:C9:69:DE:37:DA:22:2D:E9:44:0F:A8:80:7F:DE:79:6E:72:E4
            X509v3 Authority Key Identifier:
                keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f7:50:8b:6f:89:a0:b0:6d:5d:be:1c:6c:fb:c3:b2:d6:30:
         b0:ee:1d:e8:69:fd:5e:54:ac:69:98:95:38:cd:43:04:35:9a:
         5f:76:d8:80:d0:8e:69:b2:65:87:8f:0e:9b:59:40:d9:bc:1c:
         79:6e:14:aa:2d:51:96:b6:7e:7f:c5:f2:0f:f6:d5:57:33:de:
         1c:f1:aa:01:64:3d:d1:6d:37:38:d3:78:db:7a:94:7a:7f:8a:
         38:82:bb:16:29:c4:e1:fe:1c:db:0f:8f:3a:99:a9:98:eb:8d:
         0f:e2:65:bd:51:67:f9:a5:8a:d6:ad:e2:ba:f9:21:a5:7a:42:
         0f:f9:9f:25:02:c0:34:41:93:9a:4e:26:09:a0:e1:36:4b:e0:
         94:6d:4a:10:0c:aa:64:2d:c0:17:e3:0d:fe:7b:fc:fb:c9:e7:
         33:26:fd:3c:16:fc:fe:20:f1:95:4e:7e:c1:12:2a:96:a2:b4:
         4b:a0:75:d2:e5:5b:33:76:6a:af:8a:4e:40:ba:36:11:96:a9:
         1b:c1:f5:ce:49:ea:96:13:b3:c5:e0:f5:b2:aa:a4:39:49:f6:
         10:4f:95:4c:86:72:24:93:5b:f9:46:68:62:04:86:f0:bc:d8:
         d7:62:0a:3a:bc:79:38:d7:88:5e:a9:b8:07:f6:74:d9:d7:f1:
         b3:50:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:04 2024 by rpki-client on console-fra.rpki-client.org