Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File:                     R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier:          51tvNfqlHjwYH47qr/NMbi8Sb8N/bIMOFjZtmOMYkGE=
Subject key identifier:   B1:AC:EE:70:3A:A2:D6:2D:16:FF:7B:4E:71:BC:DE:56:7D:25:AE:7D
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer:       /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial:       0193696A9FF7CAC32502EC6B44BE98E7EC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number:          0246
Signing time:             Tue 26 Nov 2024 17:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:15 +0000
Files and hashes:         1: 4bKIEfLG3yVTu5xmI7zZvZdudAk.roa (hash: Q2S2ghL+36U7e1byPU0qyLSRdvWc8zDtATPd1BS6eMc=)
                          2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: rGAc3E9+pQIpkviUeJUaeqSvlAInYSWGkyfJPjsLwEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:9f:f7:ca:c3:25:02:ec:6b:44:be:98:e7:ec:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
        Validity
            Not Before: Nov 26 17:00:15 2024 GMT
            Not After : Nov 27 17:00:15 2024 GMT
        Subject: CN=b1acee703aa2d62d16ff7b4e71bcde567d25ae7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:81:54:63:99:e2:8d:29:b7:ae:89:46:ba:
                    22:42:bf:1b:8b:1f:c9:06:c0:c5:8f:61:a0:8b:62:
                    33:ef:6b:f5:b9:73:97:9a:54:3a:0d:bf:ff:11:ab:
                    b9:52:8f:e7:fb:f9:08:01:fe:ae:6b:a5:70:ab:2f:
                    17:60:35:c9:24:22:a6:02:26:30:12:23:91:83:1f:
                    fe:04:88:b5:f3:35:2e:8e:d5:91:42:e3:a1:07:a8:
                    2f:48:09:09:c1:c4:4b:d7:31:cc:b3:b0:86:c5:5d:
                    bc:bc:fa:d0:2d:ac:39:ee:66:98:b3:4b:11:6e:7c:
                    f2:c4:84:c3:c8:45:96:d3:d9:d6:ae:83:07:65:f6:
                    82:e3:8b:5b:78:6a:ba:8b:9f:be:9e:16:82:19:e1:
                    8d:42:be:6a:f4:83:c4:09:ed:32:ff:37:73:1a:cf:
                    c8:58:1f:d9:1f:97:d2:3d:b9:2d:91:0b:29:09:e9:
                    93:da:a7:8e:07:f7:47:fd:d1:ba:35:fc:62:0e:4b:
                    b9:8e:2f:0e:8b:d9:3f:0e:9f:0c:4f:fe:22:cd:59:
                    35:5f:ad:0f:e0:b5:f7:19:04:0e:9e:aa:a3:82:cd:
                    05:4e:e7:0e:70:6e:2b:9b:51:ae:06:85:a4:8b:e8:
                    fb:85:79:cb:39:41:55:93:1f:40:aa:f4:ad:fe:b5:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:EE:70:3A:A2:D6:2D:16:FF:7B:4E:71:BC:DE:56:7D:25:AE:7D
            X509v3 Authority Key Identifier:
                keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a9:67:44:77:c2:c7:68:ef:89:a4:30:50:42:8b:aa:db:3d:
         40:99:f2:4d:0d:aa:c7:48:ee:7a:ee:de:cc:79:c9:61:be:12:
         94:74:34:27:8b:d4:b7:ca:8c:42:fe:37:30:92:53:29:f1:4d:
         25:b9:72:98:74:5b:9b:d7:45:34:8e:0c:77:ee:dd:3a:c9:fa:
         b6:f7:db:f2:87:34:26:66:31:60:09:1c:4c:e6:71:c6:2a:1d:
         b3:95:72:7f:4e:46:d9:37:0a:c0:d0:28:e8:82:78:e1:05:b7:
         cf:06:f1:0f:35:88:64:c3:c7:5c:a3:a1:79:80:7d:83:54:47:
         c9:7b:c3:a8:03:05:67:45:9d:fc:e5:c4:6f:08:3c:6b:ff:3b:
         8c:51:46:3e:af:0f:33:31:e6:a6:47:e3:f8:61:7c:da:1b:5b:
         e8:d1:1b:42:ba:23:b7:bf:6f:87:2c:d1:54:b1:24:d4:fd:14:
         ea:29:81:c6:50:d3:4d:87:65:39:d4:a2:37:9f:f9:ed:c0:f7:
         e7:12:5b:af:20:e9:bd:2f:10:f4:73:ac:a3:f8:13:51:cc:70:
         3b:75:3d:96:1e:cf:32:98:85:9e:87:d8:21:35:5e:a7:c1:b2:
         c0:ba:6c:51:8b:3f:97:c8:6c:67:c2:ff:03:f5:ec:91:24:44:
         e2:0c:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:38:03 2024 by rpki-client on console-ams.rpki-client.org