Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File:                     SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier:          ZzzFFMTRDOgoHLStpOaYfAhqS14THiipxk2oJl5vIw0=
Subject key identifier:   EB:98:0A:D5:45:40:0C:70:4C:34:BD:D3:50:47:6C:3D:4D:52:4E:2B
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer:       /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial:       01936933D24CC3ACA0B7A751709F6A80EE51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 16:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:24 +0000
Files and hashes:         1: 9J-hVVMxPO-FlhvuCZ6xowBsK58.roa (hash: FWIHmjn0c1e5ckIQrgocJ2xOjbPgibtsdofcG9S2BkU=)
                          2: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: UWx3Oktgc0lWjsMH1IIQPKqggZd4eraJIzdEewpEZjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:d2:4c:c3:ac:a0:b7:a7:51:70:9f:6a:80:ee:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
        Validity
            Not Before: Nov 26 16:00:24 2024 GMT
            Not After : Nov 27 16:00:24 2024 GMT
        Subject: CN=eb980ad545400c704c34bdd350476c3d4d524e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:2a:c8:5f:49:ce:ab:8f:34:01:54:94:98:
                    34:aa:11:57:98:f0:7d:a2:b9:aa:04:99:79:40:34:
                    cb:ed:ff:a0:c9:db:69:fb:8d:46:55:18:02:3d:40:
                    7a:d6:94:0e:91:73:8e:f2:f6:65:b4:ae:71:45:70:
                    50:82:cd:f1:2a:3d:bd:78:ae:97:50:94:d8:3f:c2:
                    a9:cb:e0:d2:ef:c2:7d:4c:cc:09:5a:cb:af:6f:39:
                    d6:f6:f8:5d:41:e5:d5:9a:67:14:fd:0e:38:72:ae:
                    49:41:7a:e7:ce:9d:2a:7e:d1:04:ed:fe:3c:10:36:
                    a5:10:21:af:ef:57:13:a0:30:d7:66:ec:5d:34:0d:
                    d2:32:12:e2:68:c4:0a:97:5d:bf:7f:c6:b9:95:20:
                    e2:87:18:61:5d:94:d2:e0:3e:70:ea:97:bc:27:bb:
                    75:81:11:95:2a:0f:bb:7e:18:df:6c:ec:6e:f0:bd:
                    2f:5e:2d:c6:fe:41:45:ba:3b:c4:72:13:7b:1b:7d:
                    bd:e4:6d:f7:7a:3a:c3:f1:32:4f:ce:58:0f:34:8a:
                    15:d1:f5:88:99:64:b8:98:15:02:fa:d9:cc:ea:c1:
                    98:8b:11:a5:c6:87:1e:33:18:63:7f:f4:ac:04:ac:
                    0c:9f:5a:41:ef:97:16:ba:d3:3f:9b:3c:ed:43:a7:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:98:0A:D5:45:40:0C:70:4C:34:BD:D3:50:47:6C:3D:4D:52:4E:2B
            X509v3 Authority Key Identifier:
                keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:06:2e:73:14:f7:97:c1:86:37:a4:0b:72:aa:cb:69:1e:f8:
         7e:4d:18:b6:61:23:b5:9c:d7:09:59:18:90:59:04:dc:59:25:
         e1:3d:c8:bc:84:d1:8c:d6:19:e0:4f:75:dd:3c:a6:ec:fa:a2:
         e2:fd:db:d5:5b:b4:e2:2f:d0:df:f3:bd:2b:10:8b:b0:32:c8:
         4d:ff:95:1c:01:2b:56:aa:93:21:a4:82:db:3f:28:1e:18:72:
         ca:fa:82:d4:89:a0:8e:1b:3b:57:19:9b:6d:c0:cc:95:79:d2:
         2e:45:b7:37:29:55:32:eb:f5:41:2d:d8:e3:5b:58:47:1a:ae:
         e9:75:d5:5f:8a:ad:3f:f4:a9:64:c0:c4:2e:6d:43:7c:eb:c3:
         bc:93:1a:5a:0a:a0:cb:79:b2:b1:6a:12:52:4e:53:ee:a7:59:
         f9:01:b6:85:8e:37:6f:e4:46:79:e7:a0:94:b9:92:52:00:89:
         6a:9b:f2:d1:66:58:73:96:7c:f4:60:dc:10:43:a7:9c:eb:7c:
         f1:2d:26:9e:01:87:7b:b2:c3:53:5b:75:34:05:f3:2d:b8:b5:
         40:4a:83:55:6e:23:69:4b:4d:8c:c1:67:fc:b8:d0:da:26:3d:
         f7:59:0a:f2:d1:72:03:57:81:c6:05:c9:38:3f:bc:7c:53:42:
         ed:21:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:32 2024 by rpki-client on console-fra.rpki-client.org