Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File:                     1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier:          kHhnElcfepJjxAgfEeN+WLvjPv73KpVaNKjzQsPTnQI=
Subject key identifier:   C1:AB:AB:98:55:49:81:4B:A0:33:30:01:53:39:B7:1C:61:68:D2:66
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer:       /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial:       019356895D37DD44478B06804657907A398E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number:          0895
Signing time:             Sat 23 Nov 2024 01:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:03 +0000
Files and hashes:         1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: Q1/uwDZqhwrGucm15AHTWWQVdtz+OCUWa1HVF2paMhc=)
                          2: 39w5IDPXVnMQlNErMvXQtaKEiak.roa (hash: T/lnV5m+EFIBtbBrXnEDpqKZjmNonpmMvPfM2m7xQwk=)
                          3: dZ5ZaWx5tRbEWBH2z9b-ZmHJ4U8.roa (hash: Q8ihpbFj7BqJ0eQMGgRANldZFHY8qTHpgqT/IdoHZWw=)
                          4: zse0o_iVmfmbFipTgxMTrqtUOPw.roa (hash: u9fjSRENGQLwjGKJrLE533a5i4ytxRMwChFqJFMv5n4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:5d:37:dd:44:47:8b:06:80:46:57:90:7a:39:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
        Validity
            Not Before: Nov 23 01:01:03 2024 GMT
            Not After : Nov 24 01:01:03 2024 GMT
        Subject: CN=c1abab985549814ba03330015339b71c6168d266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:7e:2b:d3:a4:0f:26:0a:64:6b:72:ae:68:
                    21:b2:da:3e:70:5f:6f:4b:fc:9b:43:a0:2c:a7:6c:
                    d1:01:22:23:7e:ba:37:ee:be:85:d5:00:9b:fb:29:
                    24:19:21:8b:95:5f:78:48:8b:5a:4b:d6:53:03:40:
                    6b:b3:57:c2:7d:1a:2a:c2:2c:30:ac:63:cd:1e:43:
                    e5:d4:45:d9:9d:6f:e7:ba:81:66:14:d8:10:b8:83:
                    62:02:08:19:61:11:0e:de:dc:20:81:8c:f6:d4:38:
                    58:81:19:be:98:21:4f:87:14:b4:9b:e6:3a:86:04:
                    85:64:b3:76:06:a7:47:44:90:2b:9f:17:f7:fd:c1:
                    76:71:ae:1e:c7:13:90:c9:63:80:28:18:7d:0d:ba:
                    2a:ab:54:52:8d:07:b4:26:7d:aa:9f:d6:b3:90:9f:
                    4b:8b:de:ae:c6:b6:a4:58:ee:65:a3:50:d2:8c:10:
                    d9:90:6d:7c:cf:50:e6:c5:4e:dc:96:3b:fd:f5:12:
                    1d:a0:bf:78:5d:81:c0:41:34:12:4e:d5:e5:30:d1:
                    ee:71:cc:40:3b:a7:15:1d:5e:75:c3:13:00:fa:51:
                    aa:3c:c1:f9:04:7d:40:70:45:b7:4a:d7:0a:07:aa:
                    fd:64:2d:76:39:20:46:87:01:92:cf:2c:19:78:45:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AB:AB:98:55:49:81:4B:A0:33:30:01:53:39:B7:1C:61:68:D2:66
            X509v3 Authority Key Identifier:
                keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:da:66:02:79:c8:dc:40:f0:f1:c2:cc:cb:1a:de:17:7b:
         2a:2c:f1:8a:36:cd:41:dd:79:bc:d5:fc:c3:33:a6:d9:e1:21:
         8d:f7:68:40:54:30:5d:47:b5:f2:27:18:2f:a7:f1:60:59:cb:
         95:15:fd:65:ef:cb:c0:69:d2:b1:68:ea:00:70:b9:f7:0f:f8:
         50:7a:9c:49:c8:c7:1f:19:0a:5a:0e:f7:8e:31:6a:7c:73:01:
         dd:9f:4c:88:b0:91:f0:c3:f7:8d:b7:33:1b:4b:2c:1c:f8:23:
         91:49:4f:b2:ce:bb:d0:53:97:4a:0f:e2:08:34:ef:dd:17:45:
         a2:a9:ee:6f:fa:48:f4:62:b4:e4:d7:96:f1:f3:23:4e:37:a5:
         9b:b5:7c:72:c5:82:e9:2f:f4:94:76:02:af:cc:c1:85:0f:90:
         f5:3d:e4:65:80:85:6d:89:3d:93:c6:50:41:01:30:31:13:0e:
         28:d3:a4:76:63:19:34:c4:cc:9f:ff:f9:b0:9e:0c:6e:3a:8a:
         e8:6e:6c:4a:ca:f8:e1:ad:df:b6:70:35:38:a9:19:74:cf:23:
         c5:e8:6e:b1:41:82:f3:87:d7:8e:48:b4:b3:88:96:2d:09:85:
         4f:7a:ab:51:f2:19:58:f3:f4:53:9b:de:68:44:27:64:85:8e:
         fd:85:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:00 2024 by rpki-client on console-ams.rpki-client.org