Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          Vc/gSfePn3WbFT+/+EYIpdM2inaTpPmfdEuaeGbT85k=
Subject key identifier:   5C:25:52:39:61:8C:DC:8C:1A:8C:34:4C:1D:E3:73:78:A2:16:D0:7E
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       01935575F85DA4FD3D49771C11EB374A5AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 20:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:14 +0000
Files and hashes:         1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: OVoV34ubH/Dqz/xYZ+RCGjSqoubt2CM5tgp6eg7sFQQ=)
                          2: pt6zw4hIVJDWAcxY0bzU-YY9ei4.roa (hash: aka2cRqPn+Bi5piL1W2OL0T+xEvvg30jbAfTUqiGcGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:75:f8:5d:a4:fd:3d:49:77:1c:11:eb:37:4a:5a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Nov 22 20:00:14 2024 GMT
            Not After : Nov 23 20:00:14 2024 GMT
        Subject: CN=5c255239618cdc8c1a8c344c1de37378a216d07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:f2:2d:51:e3:6b:7d:a0:1e:04:fd:39:e9:
                    a1:15:39:dd:32:20:ca:9b:b6:80:ef:8b:94:ba:dd:
                    94:be:6d:c5:11:65:2f:a4:74:95:78:1c:c1:4d:16:
                    88:1f:f2:e3:91:e5:42:77:57:b3:95:05:66:86:bf:
                    f5:b7:02:4e:54:72:e1:e9:1d:9b:60:ed:49:16:4f:
                    33:d3:25:3a:d8:5d:a1:5e:56:ef:3d:b2:ba:b5:9f:
                    57:65:da:48:3e:f9:62:ab:93:10:16:3f:ef:22:9a:
                    c8:54:e9:70:83:4d:45:68:e7:08:73:6c:ac:c4:9a:
                    03:4b:9d:58:5a:76:36:4f:90:c9:f3:9f:f3:bb:82:
                    b7:c1:23:a0:0f:54:1e:37:a1:9d:9e:7d:fc:9e:9e:
                    7b:49:86:b8:ca:8b:13:60:01:7c:d4:17:47:1c:f9:
                    dd:7e:7c:a1:cf:a0:31:db:ea:c7:40:9f:2d:c1:50:
                    3b:a5:1c:cd:ea:cb:23:56:c3:61:1c:7c:d8:57:4e:
                    6f:57:77:e7:71:e6:de:ce:80:92:ba:fd:fd:5c:df:
                    70:9a:e9:ee:70:07:d6:64:52:17:d0:ef:71:4b:cb:
                    20:78:64:d3:cb:a8:16:41:5b:a3:97:0a:41:ce:72:
                    cb:ce:a0:75:30:58:93:47:50:20:e8:91:02:3a:f4:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:52:39:61:8C:DC:8C:1A:8C:34:4C:1D:E3:73:78:A2:16:D0:7E
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:a0:f0:e7:51:08:c8:66:fa:7c:a5:67:3a:de:81:3e:f2:
         6d:17:5d:2d:cc:bc:b2:da:f4:34:2b:5a:25:06:d7:45:d0:95:
         7a:45:2a:fc:60:fb:f7:77:91:3b:a0:90:e0:aa:c9:c8:a6:4d:
         7a:ed:50:69:97:94:a3:2c:83:c2:06:4e:c2:e2:12:3d:24:8b:
         ad:fc:c0:4c:40:85:19:7b:7e:6a:95:45:f2:36:f6:b8:e8:54:
         ca:b7:b7:79:9a:98:92:bc:f9:9c:f4:23:11:d6:2e:4b:d1:9a:
         32:c6:a9:c4:60:11:b9:de:0d:22:a6:2f:80:56:2c:3d:29:56:
         be:92:63:a3:06:8f:93:15:2b:19:1a:47:f2:3f:2d:76:9d:65:
         57:77:08:d1:1c:60:5e:45:7d:bf:4e:79:6d:a8:d0:31:79:ce:
         91:54:c1:1d:fe:65:b2:92:e9:e1:81:a7:37:54:60:76:10:b1:
         92:f8:08:44:db:e2:4c:8a:67:b4:0f:b4:92:1a:a8:56:33:1b:
         bd:6b:42:54:34:ef:57:de:d8:f7:d6:63:4f:9c:e4:4e:eb:4c:
         98:6d:ee:9a:9f:4f:80:e2:b5:1d:c2:b7:b0:a2:a3:ed:a0:8b:
         57:d8:ea:02:c5:dc:d2:20:bf:61:b5:0b:e4:42:00:00:ee:07:
         18:96:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:30 2024 by rpki-client on console-fra.rpki-client.org