Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File:                     CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier:          87vSvoUrZjJi9LAf2LbLcvrS1vSxb2XX7CSfSpeq6dc=
Subject key identifier:   73:32:3D:1D:53:96:F2:59:61:76:A2:F9:E5:56:FA:D1:09:46:2B:5F
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer:       /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial:       0193640D6802D01CB7C7B2AAE66764225C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number:          1376
Signing time:             Mon 25 Nov 2024 16:00:20 +0000
Manifest this update:     Mon 25 Nov 2024 16:00:20 +0000
Manifest next update:     Tue 26 Nov 2024 16:00:20 +0000
Files and hashes:         1: BBzsBRL4I_ri_fk1fk1TZQPLW8o.roa (hash: wdrzqoIvinUddLOeL6vzf1Le3nYRGKCtQHUDF/0UOLg=)
                          2: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: Y8AtBZOEOaGgAO64iwyLUCNm/vzRjzErUj8js4P+bfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0d:68:02:d0:1c:b7:c7:b2:aa:e6:67:64:22:5c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
        Validity
            Not Before: Nov 25 16:00:20 2024 GMT
            Not After : Nov 26 16:00:20 2024 GMT
        Subject: CN=73323d1d5396f2596176a2f9e556fad109462b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:ed:63:f9:92:9c:db:db:09:ed:5c:aa:ec:
                    5f:7e:40:33:b4:06:6b:33:d5:88:75:0a:26:d6:59:
                    dd:8f:81:9f:50:07:a3:c6:63:8b:e7:82:cb:4c:1b:
                    3e:2e:a2:a9:6d:99:e5:52:07:20:8c:bc:ee:73:77:
                    a6:a6:d5:82:cf:dd:7a:d7:48:20:5b:61:55:2c:03:
                    39:3b:83:8d:11:57:c7:3f:33:f2:c9:19:c9:30:66:
                    53:15:ed:68:4c:e1:61:e8:09:d5:6e:f8:07:a8:99:
                    58:6c:ac:fe:c6:de:8f:fa:12:03:f8:44:d8:ea:78:
                    6b:5b:ca:b0:59:2a:da:4d:f4:52:5f:35:f2:ac:c7:
                    af:4f:72:55:7c:3a:14:9e:38:c5:a5:bd:e4:bd:45:
                    e1:86:2b:7f:f6:0d:17:50:b0:c2:5c:71:60:26:3c:
                    17:dc:61:31:d3:01:0c:35:2a:37:6d:52:8e:b1:4a:
                    bb:68:29:9a:50:41:5e:eb:3a:83:85:ef:21:a9:0c:
                    c7:ca:b7:1f:23:67:f7:b7:1f:3e:88:22:e3:58:d6:
                    c1:a9:af:aa:fa:03:be:0c:2e:03:93:11:69:4c:28:
                    ac:dc:17:98:42:ba:13:f0:8c:fd:95:df:45:1b:c8:
                    23:4e:9b:a4:9e:af:a3:08:69:20:7a:26:42:1e:b4:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:32:3D:1D:53:96:F2:59:61:76:A2:F9:E5:56:FA:D1:09:46:2B:5F
            X509v3 Authority Key Identifier:
                keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:e9:2c:87:b6:50:7d:9f:9e:6a:d1:59:0d:62:4b:d4:c5:
         0b:39:0b:c1:ce:1c:f6:00:3b:8d:a2:32:08:18:b2:04:fc:38:
         49:02:d7:0c:8b:c3:bd:d6:8e:41:8c:dc:93:93:1c:a9:b9:38:
         a7:3a:74:3c:cb:d6:e4:68:25:a2:59:c7:09:2b:67:0e:b9:5a:
         cb:57:b8:63:59:0c:51:bb:76:dd:72:15:4c:5f:41:96:af:70:
         38:22:e8:ad:6e:ea:af:f8:00:6f:ab:09:04:a7:38:fd:13:47:
         6b:35:d7:fb:c5:77:01:f9:cf:e4:b5:aa:81:fd:6a:54:a3:13:
         a5:9a:fb:93:ba:a3:50:c3:99:dd:3a:44:64:31:e6:68:32:ae:
         88:eb:d8:fe:77:29:e0:1c:03:da:16:36:33:7b:94:2a:79:68:
         8c:7c:d7:78:a8:d3:7b:42:34:13:e8:04:5f:c6:89:8c:6d:c6:
         44:ef:45:76:86:97:35:ce:00:5c:e4:e3:80:14:7d:fd:81:e7:
         05:1e:b2:23:73:35:ec:9d:4b:a3:a7:fa:fa:1c:88:a3:2d:3c:
         40:c1:91:51:41:ec:13:f5:28:ed:17:5f:92:b6:ba:13:40:8b:
         e7:32:77:1f:72:6c:a8:3c:b1:be:bf:9f:25:d9:9d:23:ec:f0:
         a2:02:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:55:29 2024 by rpki-client on console-ams.rpki-client.org