Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          AHxNEKqCv27W98P9XATL64FUOsbHaib0/OeH+ue2qew=
Subject key identifier:   E3:A0:BB:A0:46:F7:39:CD:E0:A4:7D:38:58:52:86:EF:47:95:C0:C0
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019238B9A31389FF92838ACB35EE642A329C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          12DF
Signing time:             Sat 28 Sep 2024 13:02:22 +0000
Manifest this update:     Sat 28 Sep 2024 13:02:22 +0000
Manifest next update:     Sun 29 Sep 2024 13:02:22 +0000
Files and hashes:         1: 3DkqizmY2zz2AjPUucAPJzjdy9M.roa (hash: 0OhrbYN117datgTgR8Z/07MHHT2IhmEBIcOQzzsbbrw=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: 5KSVXL2aR0w8iPsmD55CNAs/2D4QNGpYRW9lkiFV97I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b9:a3:13:89:ff:92:83:8a:cb:35:ee:64:2a:32:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Sep 28 13:02:22 2024 GMT
            Not After : Sep 29 13:02:22 2024 GMT
        Subject: CN=e3a0bba046f739cde0a47d38585286ef4795c0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:45:42:c4:30:3c:93:31:db:de:a9:0d:97:
                    57:35:ee:5e:50:53:51:f3:69:9c:82:b8:1f:73:fd:
                    1d:0b:18:07:c9:7f:ae:33:2e:b0:63:e1:f8:52:fd:
                    58:cb:89:be:8a:68:f5:06:a4:99:d0:18:9a:a4:8b:
                    22:91:bd:6e:aa:82:7c:9e:b2:e2:3d:4d:f2:b5:34:
                    f2:76:c7:01:26:89:ef:18:58:0a:44:8f:73:a7:da:
                    b0:5d:bc:bc:1c:56:cb:dd:e7:d2:9f:9a:8e:ef:bb:
                    0d:c3:04:dc:7c:0c:4e:0e:f2:7a:f5:ca:e5:fc:39:
                    66:bd:21:38:09:6c:a0:61:8c:6b:c0:7f:f9:48:6c:
                    f9:a0:cd:92:5c:3a:a8:3e:33:78:fc:b7:c5:39:28:
                    48:de:69:c1:3c:e5:43:24:bb:3e:c1:3c:48:26:86:
                    b9:99:9a:e7:a6:10:78:33:1b:87:10:60:07:31:f1:
                    48:09:28:b1:42:3c:d1:94:ed:72:5e:53:c2:cc:0d:
                    8e:a8:d2:f8:60:52:3a:45:74:6f:e4:c3:45:69:f4:
                    c1:80:22:0d:5c:81:ac:88:de:2d:48:d3:f9:e3:03:
                    98:c5:e5:29:2e:6b:02:d3:5a:e5:ae:ad:c0:3c:af:
                    67:fc:ad:e1:01:79:57:51:1c:83:78:05:ba:e9:bd:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:BB:A0:46:F7:39:CD:E0:A4:7D:38:58:52:86:EF:47:95:C0:C0
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:dc:7d:3f:ba:b8:4d:b6:70:e9:7c:ba:f3:bb:1d:33:9f:d6:
         09:23:1e:ce:1d:99:a0:b2:fa:7e:00:9c:29:52:42:06:b6:b6:
         ec:f3:29:97:6b:51:8b:6b:11:ed:62:44:6a:e8:d8:34:a8:be:
         57:ad:49:49:b6:1f:63:78:a4:1f:f6:1b:25:6b:0e:c9:1e:bb:
         ae:20:80:21:cc:07:a2:97:44:2f:fd:88:6a:69:33:0d:47:fa:
         30:46:41:e1:86:cf:4b:e0:da:73:95:8f:b1:47:26:6c:85:72:
         59:bc:83:e8:be:1f:fa:e7:9a:32:8c:c1:29:99:87:2e:43:80:
         e5:c7:61:5e:43:e8:cb:fb:a9:c6:ef:f7:55:22:2a:ea:e4:00:
         76:e7:9d:8b:ae:33:d4:35:7b:47:f8:62:67:0b:ed:e4:92:00:
         9e:bc:15:0e:07:e2:2d:6a:85:37:d9:94:de:e9:c3:1c:e1:28:
         c1:be:3c:79:89:29:11:1b:22:75:c5:88:6b:b2:86:b7:34:bd:
         9c:8f:c8:cb:bd:0c:b4:24:6d:be:bc:56:a6:5e:24:07:56:3a:
         74:9e:19:6c:50:51:20:cb:47:ca:36:6f:6d:0b:0b:22:5b:d7:
         20:ea:ee:25:ce:12:7c:1b:10:93:87:94:e7:77:03:c4:82:c0:
         fb:d4:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:16:57 2024 by rpki-client on console-fra.rpki-client.org