Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File:                     rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier:          OZgLLnMrDkCN/4aFiR19Dg+0ollDTW45D0S0SUFdViE=
Subject key identifier:   45:D6:9B:D5:C1:60:C0:CD:A5:E1:35:0E:29:8F:6C:BF:E8:4D:99:CF
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer:       /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial:       019365FD26574B79C9E477758FFA0112BBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number:          0F95
Signing time:             Tue 26 Nov 2024 01:01:49 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:49 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:49 +0000
Files and hashes:         1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: IrwHPkQ5X+NtTDbmxdKgau7chvhKHql3pY0ssYleTuo=)
                          2: xR2RbMANlNFhXEYDRfk9sz_rL8A.roa (hash: YW0KNJlV0yM77prNumjT9aDQqgXPWMQ9fpcpd80OP9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:26:57:4b:79:c9:e4:77:75:8f:fa:01:12:bb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
        Validity
            Not Before: Nov 26 01:01:49 2024 GMT
            Not After : Nov 27 01:01:49 2024 GMT
        Subject: CN=45d69bd5c160c0cda5e1350e298f6cbfe84d99cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:a8:13:90:0d:79:9e:25:81:d6:58:a2:cc:
                    96:00:3d:40:b2:7e:4c:cb:cb:91:68:a4:39:ef:43:
                    5f:90:66:74:44:7b:65:b4:a1:6a:4e:64:d2:9b:66:
                    db:de:38:a5:dc:46:5b:76:57:c4:48:f9:40:18:aa:
                    cd:8a:a9:99:d2:8e:33:c2:1d:16:16:5a:33:5f:a5:
                    b8:a6:fa:ab:22:33:dd:c1:e4:6d:c5:f0:94:c7:62:
                    12:46:65:a9:e7:9a:b1:fe:f6:ea:b5:a7:f9:dc:d2:
                    a8:32:f7:d0:08:a8:bf:b1:f0:9a:39:aa:84:cf:d4:
                    23:30:80:c6:65:36:7c:d0:37:d7:28:93:da:2c:26:
                    f0:a8:7c:98:a0:b6:d5:6e:86:89:bf:4a:fd:d8:1c:
                    a6:a9:0c:e3:51:3e:58:fb:32:10:a2:61:e2:23:d8:
                    2f:d8:ed:93:a2:83:d8:96:f0:06:e7:c2:ed:35:6c:
                    c2:89:62:4c:d0:e9:c1:da:0e:94:fa:91:28:dd:b6:
                    f3:8d:58:53:7b:28:cb:b6:c7:a1:5f:b1:c4:7c:9b:
                    4c:e9:1e:81:1b:94:fb:32:99:8e:d4:ad:66:f6:bd:
                    cc:24:e1:1e:1a:a8:6d:23:90:e6:a2:85:26:d3:15:
                    05:a2:43:e3:fe:25:2b:4e:84:18:8d:c8:59:50:82:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D6:9B:D5:C1:60:C0:CD:A5:E1:35:0E:29:8F:6C:BF:E8:4D:99:CF
            X509v3 Authority Key Identifier:
                keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:19:64:13:34:b8:53:e9:39:bc:21:1b:e7:8c:aa:0c:17:
         80:23:6c:d2:a3:39:32:e2:da:6c:8d:1c:16:3e:78:8a:7d:b4:
         d0:2e:cf:06:26:82:d0:66:dd:ec:24:3c:5f:8c:a8:67:12:20:
         69:09:16:60:32:dd:a4:35:96:27:a9:de:4b:2a:89:b0:f6:60:
         cf:66:cf:93:12:f5:c4:aa:0b:6d:93:eb:9d:ee:85:cf:1f:fe:
         d9:d1:0b:84:25:e9:6b:3e:43:4b:03:2e:4b:4a:a7:36:da:7e:
         2c:7d:59:32:b7:54:e2:d0:d1:2c:4c:ce:07:ad:29:af:3e:0a:
         13:13:2e:73:d9:60:04:72:15:03:da:b4:23:36:71:43:29:b6:
         d3:1e:3a:e4:ce:76:02:21:9f:a7:c5:c7:c6:19:b3:40:a3:67:
         b4:7f:27:9c:79:e1:65:62:00:b4:03:b3:5b:68:4e:e1:35:38:
         17:d1:1a:46:0f:dd:12:60:42:03:7d:74:fa:40:31:bd:3d:60:
         41:19:52:ee:51:45:62:f7:ab:c3:e0:1d:96:63:f0:c0:b0:90:
         04:15:8b:5e:e6:fe:c6:85:e8:91:9f:65:62:18:61:07:50:c7:
         50:c7:0b:3d:d8:4f:42:f3:51:c5:8e:d0:27:64:d5:86:2d:9b:
         34:c8:2e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:58 2024 by rpki-client on console-ams.rpki-client.org