Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File:                     MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier:          gKfSZUZ2yQSiSHSlcojZDMi/DIBltoVWcUUWD6D41B4=
Subject key identifier:   DF:9B:DF:3A:5D:31:19:7C:2E:02:7C:71:97:F5:38:D2:D4:FA:4C:97
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer:       /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial:       01923A6FD948DB6A2AC8C43D40AD49F3FC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number:          0E7C
Signing time:             Sat 28 Sep 2024 21:01:01 +0000
Manifest this update:     Sat 28 Sep 2024 21:01:01 +0000
Manifest next update:     Sun 29 Sep 2024 21:01:01 +0000
Files and hashes:         1: 0Z4UINo-i0OZ4wqEf6tHWZlgKes.roa (hash: 5EprPere+U89zcZoAWOvap77HYO2+2uiFZsuqKvvfHc=)
                          2: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: ZQSYfN6RdkPaZpAYl9uGzPN7X9t73jV3VwEL91IJ0HQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:6f:d9:48:db:6a:2a:c8:c4:3d:40:ad:49:f3:fc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
        Validity
            Not Before: Sep 28 21:01:01 2024 GMT
            Not After : Sep 29 21:01:01 2024 GMT
        Subject: CN=df9bdf3a5d31197c2e027c7197f538d2d4fa4c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:48:d0:47:c1:d0:a9:5d:99:5c:2a:39:99:
                    9d:3c:82:6e:d4:8f:d5:8c:20:bf:37:d7:18:08:53:
                    17:3a:55:39:89:40:24:b1:b6:30:4d:12:db:86:53:
                    ab:fc:b3:d2:a0:40:82:ec:10:f0:63:d2:78:07:0d:
                    ed:4b:a1:b4:c0:a8:66:b3:c5:f5:02:a4:3b:7a:db:
                    ed:5e:75:49:e2:e2:74:cf:f5:de:2a:67:ca:cc:1f:
                    d8:1b:c1:ff:ad:31:62:10:c6:02:27:c5:a5:f8:2d:
                    18:91:28:6b:06:c3:3c:0a:e0:b6:d2:a9:29:50:45:
                    7a:1f:3e:1b:a1:1c:3a:c1:9f:18:b2:cd:c4:6d:59:
                    a2:08:9d:66:79:61:44:d4:45:fe:40:66:89:8b:aa:
                    66:dd:67:80:bc:1b:f9:58:59:fc:3c:15:dc:18:7a:
                    b1:c9:60:c9:bf:ae:66:3c:44:ea:fc:d9:56:72:27:
                    97:b6:d9:93:6f:b7:de:2f:9f:d2:e7:d8:ec:a3:74:
                    24:36:3e:3b:34:08:7b:96:c9:7f:dc:14:78:c5:d6:
                    53:a0:03:67:1c:79:5e:65:f3:8a:6b:c9:f9:cf:b1:
                    ac:8c:b9:3b:32:66:5a:96:8b:78:73:6b:c9:f7:1c:
                    9a:1f:91:c4:67:93:85:43:94:c7:ac:a0:09:54:ba:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:DF:3A:5D:31:19:7C:2E:02:7C:71:97:F5:38:D2:D4:FA:4C:97
            X509v3 Authority Key Identifier:
                keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9f:41:35:37:c4:0c:30:d9:e5:6d:31:32:c5:9d:4f:f7:9c:
         88:6f:80:9a:9b:1c:d9:fe:ff:f7:22:04:aa:82:c9:b9:e6:be:
         92:22:4e:42:bc:87:b1:ec:9a:06:c1:2d:11:5c:e7:65:5d:3d:
         24:8d:00:8d:20:54:c9:28:ef:6c:41:d9:94:f4:4c:10:b3:04:
         81:71:8d:a2:39:ee:d5:30:42:f4:ed:19:c9:85:b4:37:5b:50:
         78:6d:c8:ac:fd:00:1d:d6:3f:76:77:ce:12:3d:70:b5:04:13:
         e8:c4:3b:83:57:55:51:07:f6:42:67:4c:06:d6:89:59:57:26:
         ff:73:ee:f0:59:22:23:79:10:d8:bf:9f:1b:f2:a7:f8:8c:b6:
         cc:7e:70:9f:64:db:6b:50:ae:d1:49:fb:dd:c3:07:d0:1a:8d:
         f8:a0:c7:9f:17:b8:ae:5f:5d:26:fc:da:33:62:c7:aa:d7:3d:
         2e:09:fa:ad:aa:ee:bb:4c:95:93:f0:6c:5a:56:a5:53:f6:85:
         36:3b:69:40:d6:f2:fc:b1:d7:a2:56:f0:60:01:f8:30:8d:23:
         89:59:56:8f:d6:84:1b:1e:93:74:ff:5f:92:11:4f:7d:45:6c:
         e7:1f:5a:2b:6f:08:41:8c:53:b8:bd:54:63:c2:17:bc:c4:96:
         81:ef:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 22:19:37 2024 by rpki-client on console-ams.rpki-client.org