Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File:                     tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier:          j+cPRWDXZlQW7fIVXI7Lu+fsQmVcluS3y56jMlq5BM0=
Subject key identifier:   C4:33:66:45:E4:4C:42:EB:A8:81:41:9B:6E:94:3E:33:A1:30:7B:1E
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer:       /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial:       01935952E04844DEB2465D8BF6C2955E807A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 14:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:23 +0000
Files and hashes:         1: djxnhm-b1kR5WeRpLQ2hyPnCDaU.roa (hash: rz9YD6tM2uHByAyZXLUFdVKqby/Ffmhg37m+v3XHeKU=)
                          2: lh3-o4Xlj2IJK4ydI1JVvU1EOVQ.roa (hash: px6Ma2YEJ2eGu4TpGyVxTDYGtw1VtzsAPI67jWbC7qo=)
                          3: sOzXU_n9KsKngetVWgkovBGPkUc.roa (hash: vSS88vGTnegWSe6gx5QSqeU9MAnCxERLqqpJOk4S35I=)
                          4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: YP4IoUhFIRMlkDm7FUwCEiCCneB3B+SUi3Jcg5jBO0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:e0:48:44:de:b2:46:5d:8b:f6:c2:95:5e:80:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
        Validity
            Not Before: Nov 23 14:00:23 2024 GMT
            Not After : Nov 24 14:00:23 2024 GMT
        Subject: CN=c4336645e44c42eba881419b6e943e33a1307b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:f3:66:0d:d0:06:87:a9:7f:24:78:11:b2:
                    ac:10:e9:a6:2a:7e:14:48:88:df:3d:2b:07:66:9a:
                    ee:35:d3:1c:0b:91:d7:30:a7:ad:9e:b5:34:5b:87:
                    b3:41:5c:4e:03:bb:11:68:ae:2c:40:bb:18:a0:e8:
                    4d:96:0f:09:c5:ea:60:e0:f0:0b:03:21:f5:77:23:
                    72:a2:76:c2:75:b6:ad:56:b6:66:76:79:a6:98:b0:
                    30:f8:18:58:98:70:9f:ef:77:7a:c3:e5:d1:a6:d0:
                    16:1d:04:3a:38:37:b8:96:6a:52:c8:c6:8e:df:93:
                    15:c6:89:3c:43:c4:c5:5a:38:4d:5c:07:bd:c7:18:
                    30:ba:e3:b1:fc:8f:d1:40:83:b6:32:41:7c:2f:d6:
                    23:70:27:58:1c:7b:d1:82:11:1f:60:c7:13:ae:1e:
                    a0:58:b1:ae:1c:1b:93:c4:60:9e:7a:3d:4a:14:65:
                    2e:37:01:00:85:8f:27:f5:95:67:a7:36:2e:fe:02:
                    38:4f:75:d5:31:c1:9d:bd:f9:72:84:f9:1a:7f:1d:
                    5e:59:d5:6a:ae:c6:ae:34:47:df:f4:70:9d:f3:7d:
                    57:14:d3:cf:17:bc:bb:fc:41:1b:2f:74:21:40:a0:
                    4a:d7:20:64:48:47:27:d7:b3:dd:95:ea:0a:e6:9a:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:66:45:E4:4C:42:EB:A8:81:41:9B:6E:94:3E:33:A1:30:7B:1E
            X509v3 Authority Key Identifier:
                keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6d:f6:98:e3:90:c3:f0:76:53:33:a4:e1:c4:f9:07:60:3f:
         90:90:55:35:7b:e7:6a:d2:6f:8d:8e:41:9a:15:f8:2d:15:35:
         44:24:aa:01:41:c9:c0:01:4d:fd:2c:2a:c9:5f:90:db:4d:4c:
         1b:1a:5f:d2:38:53:62:60:b5:68:0e:93:2b:50:22:c3:98:39:
         8f:ae:40:2d:91:b3:c2:26:c1:54:e1:67:54:18:62:3e:b4:40:
         4d:6b:d1:13:ad:c1:2d:2c:17:1e:bd:b3:ff:d9:08:b3:d6:63:
         a0:59:99:46:4c:20:b4:45:fd:f8:89:f0:98:dd:26:f6:21:13:
         ba:ba:0b:a0:2d:9b:63:20:28:dd:ad:bf:7e:2c:b8:6a:92:7a:
         a3:4c:f4:4d:d3:e6:be:ca:83:82:a0:b4:45:cf:c5:e5:ee:89:
         5a:4d:26:c7:90:7c:35:64:49:51:3a:fc:d0:4d:80:41:36:22:
         3d:75:70:dd:46:26:74:c4:87:95:c4:b9:06:58:a7:05:5e:60:
         b6:f5:ab:d1:4d:53:38:f5:e5:1d:0c:47:d4:eb:d4:8f:49:df:
         90:0d:4b:e9:19:8b:38:a0:ce:d3:f1:7f:c9:d3:1b:24:f5:ea:
         ae:04:54:80:77:96:44:f2:3c:51:6f:79:a8:4a:90:47:34:ce:
         26:9c:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:47 2024 by rpki-client on console-fra.rpki-client.org