Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File:                     y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier:          T5rmhrJYvui0oa2ud8d+yNfjuKRZ4IRu27zVENUcKaE=
Subject key identifier:   E0:53:64:12:91:3E:4C:6B:85:0F:0F:A7:3C:96:A6:39:F7:06:32:82
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer:       /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial:       019367EAD028683AF9C54531ECE212884B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number:          0855
Signing time:             Tue 26 Nov 2024 10:01:02 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:02 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:02 +0000
Files and hashes:         1: 22roCiU6j6261Tf2xHjOeaVXPf8.roa (hash: PuMLQ30DfEoEKDxeny2h0jxhmq5+Wq4VxfLmEZEXgYo=)
                          2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: 7MnSxJ0YQwwr8gj1HP/TeIsZDAVvZU0HR1cPlEZ5gPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:d0:28:68:3a:f9:c5:45:31:ec:e2:12:88:4b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
        Validity
            Not Before: Nov 26 10:01:02 2024 GMT
            Not After : Nov 27 10:01:02 2024 GMT
        Subject: CN=e0536412913e4c6b850f0fa73c96a639f7063282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:6a:64:cd:20:b6:ee:33:ab:e2:40:4e:b2:
                    42:7f:f7:c4:33:d0:7a:e5:ab:f0:bc:fc:c9:f9:27:
                    9c:a9:9e:70:4f:60:14:81:92:59:eb:e3:36:f4:84:
                    c7:1b:df:3e:f3:bc:e9:de:5a:2d:b5:10:67:66:2d:
                    3e:af:ea:9c:b4:bd:67:1f:65:18:91:56:d4:59:72:
                    18:43:e9:9a:da:44:08:7b:5e:7f:fb:4f:de:3f:a4:
                    56:5e:59:97:01:28:db:bf:21:ee:5c:8c:48:72:67:
                    0a:d7:80:75:0e:b0:7e:c3:32:4f:dc:9f:36:02:7c:
                    a8:78:5d:b6:0d:b9:80:a3:29:44:54:bf:43:ed:f1:
                    f2:65:09:93:52:44:bb:69:03:a1:39:ab:67:60:d9:
                    5d:52:cb:2e:58:c8:b0:77:78:34:0f:52:fe:42:fc:
                    8f:eb:cb:19:c1:a2:f3:12:cc:45:66:65:3c:e9:e5:
                    81:4f:0d:47:44:20:7e:53:ce:fe:2c:06:b3:06:16:
                    b9:7d:87:60:cb:07:8d:07:11:85:84:9a:61:63:da:
                    87:9a:34:57:e6:c6:42:63:f5:ac:1f:87:7d:61:e9:
                    1d:2b:25:80:41:f4:6f:97:08:a6:ef:1f:a0:f6:97:
                    e3:29:3a:db:91:46:a9:09:d1:2f:76:1e:9d:cb:56:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:53:64:12:91:3E:4C:6B:85:0F:0F:A7:3C:96:A6:39:F7:06:32:82
            X509v3 Authority Key Identifier:
                keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:8f:f8:6a:7c:44:99:ff:8c:71:0f:47:a8:5f:69:4b:00:
         45:d8:75:56:db:47:f8:cb:2f:95:df:78:43:62:b6:db:5a:30:
         d0:54:6e:64:9a:21:42:e3:ac:2c:10:4b:13:4b:55:1f:77:41:
         21:77:d4:bb:dc:bd:1e:d3:5a:4f:d8:e4:6f:da:c0:4b:dd:5c:
         04:4e:11:7a:27:20:24:20:c4:22:d7:79:9c:93:ba:ef:ea:00:
         e0:3a:49:11:6a:8b:36:c2:31:86:00:06:e6:c8:77:fd:ab:fa:
         69:16:27:f3:bc:35:c6:23:33:d1:82:82:3c:5a:b6:17:0a:17:
         4c:ed:7c:e0:f5:f4:3a:12:1e:fd:96:c2:97:cb:19:ee:fb:02:
         5a:9d:3c:0c:d7:7d:6e:4c:2b:55:d1:93:70:99:bc:5b:a3:5f:
         13:96:ae:9a:22:2c:67:e6:48:4c:a3:ae:ee:cb:48:66:5b:5b:
         01:18:4f:bb:49:d9:c8:19:4d:16:57:24:90:48:96:b4:48:07:
         90:52:7e:ca:87:28:6d:b8:f4:ba:e6:55:fa:75:da:bd:b7:24:
         cd:ff:f7:49:2e:3f:ba:cd:91:fd:ec:2d:93:21:25:38:b7:23:
         60:f8:17:48:33:d2:12:a6:d9:f9:38:73:cd:02:52:5a:81:25:
         b7:cc:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:51:21 2024 by rpki-client on console-fra.rpki-client.org