Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File:                     Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier:          EL0WiHXjcf6AjzNWU1T3dlxnw6MV1zWBjnYjbPju4EQ=
Subject key identifier:   2D:B5:4E:6A:0A:94:2B:54:EA:92:7D:43:0B:D1:47:E6:71:60:A3:82
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer:       /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial:       01936933BA81BDD8409C9B41E0F86AD634ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number:          10B2
Signing time:             Tue 26 Nov 2024 16:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:17 +0000
Files and hashes:         1: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: L4TDe/oWfn/X6kKP/T0vtdcY+8A+0b7ZD8r9knjlgTg=)
                          2: ub7Q4OLhFYoI6B62FDHhScCMDKU.roa (hash: 8tPOa2Ln9k1Y5xbfo10G+8BO0hyHSPYVvdlgkTyyOBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:ba:81:bd:d8:40:9c:9b:41:e0:f8:6a:d6:34:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
        Validity
            Not Before: Nov 26 16:00:17 2024 GMT
            Not After : Nov 27 16:00:17 2024 GMT
        Subject: CN=2db54e6a0a942b54ea927d430bd147e67160a382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:0a:0a:48:48:27:9d:58:d3:32:a9:92:27:
                    83:2f:93:bc:51:a3:d5:d0:04:f3:47:4a:e9:41:a3:
                    64:79:f3:71:24:1c:e1:09:da:36:b4:11:0b:3c:44:
                    60:68:88:75:f8:dc:57:f4:00:6c:c2:70:ad:c8:9c:
                    b7:2f:13:e7:df:95:30:20:03:15:d5:90:fe:01:71:
                    95:9f:51:04:78:10:2d:43:51:85:2a:41:68:3b:96:
                    29:51:1e:52:ea:68:3a:b5:0d:68:bf:3d:aa:2f:38:
                    e1:0e:42:a6:55:5d:72:7c:bc:98:b9:c7:95:10:3c:
                    e7:76:1e:70:a6:09:4a:df:be:73:92:ee:42:ec:12:
                    6c:97:bc:b1:3d:09:af:44:70:05:b9:44:84:96:22:
                    ad:3f:48:97:de:c6:dc:04:fd:78:38:01:51:78:df:
                    ef:61:4d:e4:9c:b7:04:0e:e6:92:a0:ce:0f:fd:75:
                    5f:01:39:09:eb:19:ab:5a:74:53:47:70:63:87:b8:
                    15:de:6c:6e:49:33:a9:a8:56:26:0f:15:49:99:df:
                    6d:43:ee:2f:df:65:d4:30:88:45:4c:ad:33:d2:37:
                    f5:6a:23:e9:08:27:73:d3:96:cd:bd:ce:0b:65:8e:
                    cc:0f:d2:53:e8:dd:5a:6a:4a:b5:aa:ec:bb:02:15:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B5:4E:6A:0A:94:2B:54:EA:92:7D:43:0B:D1:47:E6:71:60:A3:82
            X509v3 Authority Key Identifier:
                keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0c:f2:f9:1c:50:4e:1f:7d:5c:68:06:35:e0:4e:f0:1f:45:
         18:38:49:e0:9e:54:cf:15:30:1e:37:ca:ac:8f:e0:8d:21:9c:
         19:56:10:a6:c2:3d:e2:af:0a:7c:c9:ff:e1:9e:a6:6d:41:43:
         45:29:c2:97:8f:33:0d:06:d7:c6:e1:ba:35:62:66:3a:38:a1:
         f8:7d:13:3f:93:28:d8:78:33:7f:5e:88:96:36:2a:cc:60:5a:
         58:22:ee:04:0f:79:fb:77:c0:0f:3e:3b:59:4e:7f:ca:ad:92:
         6e:47:16:00:bd:4f:71:d9:ff:1d:b9:44:a4:f6:d4:fd:80:12:
         9a:24:ee:ff:29:74:75:76:36:32:4a:e3:a1:d9:33:d6:4d:20:
         30:2f:66:85:68:c1:72:c8:6d:7d:0a:5c:db:fe:6e:c0:8a:31:
         6a:ca:3e:25:38:a3:b8:4e:52:07:01:d1:c4:78:78:c3:b7:ea:
         f9:8f:bf:6e:e4:f5:3e:c8:9b:26:27:a3:fe:3e:c1:3f:a4:f4:
         1a:49:be:ad:ba:1b:8a:2d:b0:f1:e5:af:26:0d:c0:b3:e0:3a:
         9d:34:cf:80:03:47:39:ba:0b:ef:da:f2:48:84:4c:82:d6:1b:
         a1:8a:27:0d:18:de:d1:05:f5:61:ee:1b:05:60:87:ff:e3:05:
         b8:40:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:28 2024 by rpki-client on console-fra.rpki-client.org