Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File:                     cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier:          UMOev+26qzaREOi/JN+TqOxcCC06A9D+IT1PYI8Dib4=
Subject key identifier:   CF:52:CA:C9:6B:87:DC:E6:44:B2:8B:DC:55:66:EC:35:82:B9:41:71
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer:       /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial:       019369DADF6E4A72FBC50AEF8FCDF5CE4E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number:          0FDE
Signing time:             Tue 26 Nov 2024 19:02:51 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:51 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:51 +0000
Files and hashes:         1: U1ju-BCNdcdYG7qDHuD5b12RfK4.roa (hash: CFSTl4ULgOVhFKtJxANzm5rAg2ERPJSf4/R0HTAsrF8=)
                          2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: 7visRNIZ+ItpFbVPbM5nl3IJeWLAv6EURipcggYpABQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:df:6e:4a:72:fb:c5:0a:ef:8f:cd:f5:ce:4e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
        Validity
            Not Before: Nov 26 19:02:51 2024 GMT
            Not After : Nov 27 19:02:51 2024 GMT
        Subject: CN=cf52cac96b87dce644b28bdc5566ec3582b94171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:ef:3d:35:61:13:26:18:79:3c:a4:ec:74:
                    16:b4:a6:9b:77:c7:e4:f8:c2:75:5e:60:52:6e:85:
                    d0:51:7f:b5:fa:0b:0c:a0:fe:3f:d4:8c:e4:34:4c:
                    3e:cd:98:94:f1:ea:dc:90:ee:15:26:67:33:18:74:
                    8d:da:0f:d0:7a:73:8d:30:5a:3e:c9:fa:61:ed:28:
                    df:1a:d5:ab:d3:37:d6:cc:09:35:2d:01:7c:39:0e:
                    7a:77:4a:30:d9:8b:31:38:2e:c8:bf:ff:51:c9:3a:
                    99:1f:8e:76:36:a1:cf:71:1c:a2:19:ea:b1:39:30:
                    2f:38:14:6c:d7:9c:38:28:e6:e6:02:f1:b3:eb:87:
                    41:6b:dc:84:ab:1e:fb:fb:9e:59:30:9c:d3:1a:97:
                    26:3f:a5:47:2b:69:a9:a8:3b:84:02:16:9c:f5:df:
                    fb:df:35:f4:33:7a:8e:05:f9:bd:8e:20:d9:54:33:
                    74:c7:dc:fc:86:1e:c3:b2:0a:fb:45:13:22:71:57:
                    28:21:aa:5a:80:0a:11:55:97:e4:56:0c:a1:27:e4:
                    82:74:a6:b5:22:86:05:58:fb:88:9b:e1:35:71:ec:
                    bb:87:88:87:fe:ef:43:8f:1a:b9:aa:0e:30:34:21:
                    e0:04:5b:8a:39:9e:d8:22:7a:d2:20:fa:85:8c:d6:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:52:CA:C9:6B:87:DC:E6:44:B2:8B:DC:55:66:EC:35:82:B9:41:71
            X509v3 Authority Key Identifier:
                keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:64:57:77:1a:2e:71:f8:de:91:d8:9e:61:ad:40:5a:89:b9:
         e4:8f:eb:bb:48:bd:f3:d5:75:d1:42:5c:37:28:49:7e:cf:c3:
         ac:53:30:85:74:c2:df:0b:e1:df:83:7e:66:38:7e:68:7b:07:
         2f:e7:8b:f0:93:2e:67:6a:9e:d9:fe:54:12:1c:b9:bb:c5:85:
         0d:84:08:7f:35:90:2e:9c:9c:5c:72:80:90:43:2c:2a:93:5f:
         b1:70:39:ad:ea:c8:48:62:ea:86:58:69:3d:fa:1b:34:e1:15:
         67:cf:45:8a:9a:b2:16:ec:ed:c6:10:a5:3a:4d:f5:d5:0c:80:
         54:de:c8:19:18:63:b9:f5:02:ab:a6:09:d8:0c:eb:b8:d3:4e:
         89:fa:b2:aa:2e:76:79:96:7f:85:2a:28:00:b2:9a:53:17:4f:
         45:96:13:19:4d:e2:ab:b6:18:ec:cd:5e:27:39:94:0e:b0:d3:
         63:cb:4f:75:2d:00:0d:61:f6:c6:96:8d:bc:6b:05:62:7e:de:
         f1:71:1d:d4:94:7b:39:62:ca:83:8b:b4:8e:07:68:ff:fc:44:
         d9:23:e8:cf:4b:d7:eb:1d:1c:94:b4:83:da:3b:f8:25:17:26:
         88:e7:2d:3b:8c:10:47:ee:cf:b0:3d:d1:b5:2f:b2:43:c3:82:
         81:a7:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:38:05 2024 by rpki-client on console-ams.rpki-client.org