Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          oFIiUCm+/CLozI7LERkPo3cftMRHC6jCjZ6lu7Jz2s8=
Subject key identifier:   15:C5:8E:10:42:A3:2C:25:7F:53:7E:BD:37:DB:8F:52:50:7E:F3:EF
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       019369D94BE7804C1C5EC4355FBD246DE36E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:01:08 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:08 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:08 +0000
Files and hashes:         1: 4LfQIyNS3wgm6LAXqN9CIwg1no4.roa (hash: wlodZ+XO9DSSfHWD8e+4FGfD1EaEbct4hhmmo+/1Dhg=)
                          2: FZLlY1xNtsRczC17H8P2a-lFzag.roa (hash: BlDc8axFMwRKM8Fzrz5Gqnrzw1Inps23TDkau8UeIKQ=)
                          3: W5sm7cvxU1BnnQ88R_KAVoph7FA.roa (hash: uNnrMxIVi4AwJKkjA34LwVfPS8a2KMSKWs5uSaCaf5o=)
                          4: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: vSZE8e3pAMBQXTSxE1epvzlvoC6sa1sLTBBp/YmVjZ4=)
                          5: x1UwtH740BQslyINuqtIZRrGmrA.roa (hash: mTEAForReWf/++kNhtzK2fbMg3Fh6KY1O9DYPxifARo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:4b:e7:80:4c:1c:5e:c4:35:5f:bd:24:6d:e3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Nov 26 19:01:08 2024 GMT
            Not After : Nov 27 19:01:08 2024 GMT
        Subject: CN=15c58e1042a32c257f537ebd37db8f52507ef3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:2e:14:2a:42:05:07:7d:2b:f7:5e:de:c4:
                    00:5d:32:9a:ff:09:a4:4b:77:28:21:7b:79:9e:11:
                    36:c4:e9:c4:7a:d5:1c:a7:ff:c4:fe:96:cc:7c:1b:
                    81:4d:93:67:f8:1a:88:77:ba:cd:89:25:0d:4d:5a:
                    c7:57:6f:56:3f:12:c9:11:63:8b:9f:bd:bd:a0:99:
                    5b:5a:26:87:af:83:5d:54:ad:43:0f:13:4c:bd:a8:
                    ac:f3:e3:5a:2b:30:21:c8:5a:09:81:64:85:86:cb:
                    3e:ee:cc:89:59:2e:0a:8f:1d:41:04:0a:20:ba:f7:
                    54:5b:b5:7a:6d:76:e4:df:cf:36:21:8c:46:29:cd:
                    c1:46:d8:6c:58:eb:88:97:77:d4:63:a3:58:d5:d6:
                    e2:82:a1:9c:70:4a:96:f9:a7:74:a9:30:66:84:c1:
                    f0:95:cd:a0:68:ef:05:18:97:ae:5e:c0:a5:24:23:
                    c1:d2:87:10:5c:1a:56:d7:61:7e:a6:48:5a:ed:3c:
                    94:95:94:ee:0f:c2:87:a2:54:d9:9d:30:37:d6:fa:
                    f8:56:ea:8f:0c:2d:a1:e4:99:d2:ef:ed:0f:b6:1d:
                    d3:e6:97:72:31:58:30:6e:c9:64:b4:56:9c:ca:be:
                    d3:3e:14:bc:98:fa:af:59:b8:9b:c1:69:90:11:fa:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:8E:10:42:A3:2C:25:7F:53:7E:BD:37:DB:8F:52:50:7E:F3:EF
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:6a:2d:d2:90:ac:94:79:74:d7:6e:1f:0a:e1:22:0a:6c:
         89:95:d4:e9:af:09:f8:15:5e:5a:56:f9:58:04:2f:b6:93:86:
         6a:18:11:97:bb:b5:63:58:37:8a:cd:cb:3d:c0:cb:2c:63:b1:
         60:69:3b:92:b2:62:0e:bf:a8:a7:b0:5c:cd:87:00:85:c1:2f:
         cb:37:1a:82:34:d7:a7:76:c7:e0:b5:ef:d2:c1:a0:50:c2:eb:
         a0:74:cd:40:d8:80:d2:76:cf:80:d5:fe:65:1b:2c:80:bd:fa:
         a5:d0:35:b6:ef:a7:d7:55:68:39:ee:39:ee:e8:78:25:69:86:
         2c:b9:1b:50:77:d3:18:a2:ab:9d:44:d5:72:f2:95:8e:c7:92:
         89:fa:2b:42:73:cf:f9:98:cb:5c:d4:f2:e5:fb:57:ad:5d:2f:
         8e:e1:5b:19:5b:ab:45:4b:ab:52:4b:83:a3:f5:39:3c:2b:f4:
         d1:7a:c2:d9:dd:ac:3c:65:53:1c:d2:3b:25:0a:d4:ff:ab:29:
         92:6d:5b:79:31:a9:08:e2:cc:1a:14:32:a4:17:66:39:cc:4d:
         c4:0a:ad:63:34:08:a1:84:54:2a:b7:94:34:aa:8b:4d:75:05:
         85:fe:d3:a8:8e:6c:10:96:96:8e:fd:60:d5:dd:35:f5:35:45:
         b6:35:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:58 2024 by rpki-client on console-ams.rpki-client.org