Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File:                     CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier:          Y/wNmYcBwVFArEpPnBkM3QomNU6D7EgT92APvvwbEfg=
Subject key identifier:   E8:51:3E:3A:BF:B8:63:D0:51:9C:F4:64:55:86:25:17:4C:01:79:E8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       0193512BE5A1576ABF6E0297AB871ABBAFB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number:          0779
Signing time:             Fri 22 Nov 2024 00:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:51 +0000
Files and hashes:         1: 1lu41Fz0_vy4RvziQXrtmgu9Wjg.roa (hash: +k+dF5GZ/D15j6Vu4qonsTwB2C9sqYbV38CPZozbw6A=)
                          2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: z+AfpsB2O6nRV0/7OaAW2339lZDl5Xb+QTwGTHEqFJU=)
                          3: GQ0LAK9SKlpXz8UBdN0zTGzlUQk.roa (hash: /5jT80OFLy4R0Uuzi29hVIzm29LvaFKRsDtXG/S8/qE=)
                          4: Nun2w1T01mDhuTgGnWbcHPM423I.roa (hash: wc3dY6VQ87G9u+60GKsrOHUr4qbNnqAPMifUD3yMV7g=)
                          5: W1WMpGbI13dtU5sCCPIwRkjiASM.roa (hash: 7/AFZ8Uhz3BsM2JhsK5T/FYA+815FTwQ3c9PeQGvs8k=)
                          6: WrzpUoFIFug1-KmFj4vQtntCWvM.roa (hash: DA8Jiflg0gzddhInXQXT8IjqwU6HZZJyTe5oWHxyLNk=)
                          7: aWZDtT01LTTyIdJ2c0R3kyNLfxc.roa (hash: Tq+IHeJBXwsRgiggkX/TY2Guckvmyzd+QEJGpkkMnXc=)
                          8: gTX3Cwtg2gH5FsWY2dtBLohjYXU.roa (hash: 0RY0w5MfllqPnn+hC9SxX0VzXBfZy8GGIiQgQXLm79s=)
                          9: o56-xbCEnLsH6EdcMKB8jX6PHGk.roa (hash: aGvZQcL6KBWzikqZTJd1lTqnDEJbaFhlB4ZOi0CoBss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:e5:a1:57:6a:bf:6e:02:97:ab:87:1a:bb:af:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Nov 22 00:00:51 2024 GMT
            Not After : Nov 23 00:00:51 2024 GMT
        Subject: CN=e8513e3abfb863d0519cf464558625174c0179e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:b5:a6:e2:e0:9f:76:5a:4e:16:59:13:64:
                    d5:84:b2:b8:90:be:e7:27:4a:35:0a:cc:07:fa:0b:
                    17:a9:fe:69:62:24:0d:a1:59:63:aa:62:ac:71:19:
                    9b:83:1f:97:8a:e6:b9:8e:c9:b3:4c:ac:e0:4e:b3:
                    58:9e:43:58:24:6f:2a:c4:cf:62:10:7f:49:36:bb:
                    15:9e:89:04:17:97:be:19:62:b8:a4:be:d0:9b:8d:
                    b8:73:c0:21:fe:c4:3b:71:99:38:58:f8:c2:ed:1c:
                    21:41:fc:63:bb:23:8d:a1:1e:e6:69:d9:c0:23:b5:
                    cf:64:7f:52:ad:ba:72:49:86:7b:cc:16:8a:88:80:
                    45:0f:70:00:35:2b:f9:54:3c:8f:25:b8:c1:84:aa:
                    87:ce:e5:bc:62:62:b2:5e:bc:c9:70:de:40:1d:de:
                    9b:2b:78:98:74:7a:27:60:fe:63:17:3d:bd:04:61:
                    6e:59:59:07:72:fb:43:70:36:8b:f0:c4:ac:1d:87:
                    fa:32:17:26:c1:90:10:b9:bb:14:ee:3b:93:fb:26:
                    92:8d:96:b3:da:ff:5a:61:6d:92:f6:d5:9b:ea:0d:
                    7e:7e:68:0b:cf:df:56:79:5f:a9:89:ea:ec:1e:19:
                    e0:50:b1:8f:2d:21:00:e0:a4:b7:4e:1c:67:70:99:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:51:3E:3A:BF:B8:63:D0:51:9C:F4:64:55:86:25:17:4C:01:79:E8
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:6c:45:b3:af:ee:21:9c:e4:66:61:61:52:69:ea:fc:ba:
         b3:39:46:5f:1a:f3:93:a8:8a:3d:ac:fd:69:f9:ed:4e:ca:b4:
         a6:33:1c:23:7a:d3:33:62:2b:4b:7d:62:75:6a:0a:bf:5e:d0:
         19:4c:c2:66:e0:d8:05:4c:f7:b6:5f:59:73:63:eb:f9:34:4f:
         52:e4:19:0f:bb:7f:9d:4b:33:5e:9f:08:af:56:0a:11:4b:80:
         35:20:01:79:7a:2c:5f:09:23:09:b5:c4:fc:37:25:bf:49:67:
         20:e7:87:91:70:43:b4:14:39:d4:f1:f9:ca:89:6d:3a:70:80:
         44:fb:73:aa:5f:ca:d4:05:60:06:09:e8:25:20:8d:84:68:90:
         67:e7:7e:89:bc:98:d9:2e:b9:fc:f3:46:cf:f7:03:95:0a:5e:
         c0:4d:b2:a2:21:ee:8b:80:51:08:aa:74:57:de:6d:e5:aa:ca:
         49:22:1c:82:f5:1d:d0:ef:74:06:d7:b3:6a:b6:07:de:4a:32:
         ba:c0:ad:92:03:44:93:c5:29:81:66:57:81:a9:3f:32:5c:5d:
         cd:1a:af:3c:f1:c3:14:0f:d3:b9:e5:cd:a6:3f:b1:b8:51:17:
         68:4b:ee:85:89:53:ee:35:37:4e:5b:19:f3:9e:2b:0d:1f:0a:
         aa:30:cc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:52 2024 by rpki-client on console-ams.rpki-client.org