Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File:                     494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier:          UqTk9Lq9JY7cU0lHi1harxgah4Mrqg9MLAX7dZM8uyY=
Subject key identifier:   A0:8B:86:95:5E:68:B5:6F:BE:AC:AF:19:A4:02:DF:B9:F9:67:F2:31
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer:       /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial:       01935689F51BE2185CC644019AFC76C4F1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:01:41 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:41 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:41 +0000
Files and hashes:         1: 0lOKYm7qKbzB2f1lvqrxg_ymWMA.roa (hash: BEKXX6A0Hkez8DnaqAKB2xI1MdgHWuhz09uJClaLhLw=)
                          2: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: U+zN5xxOQm1RM+Vf6XQOQNLMioT7q6HvniDSXaP4d94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:f5:1b:e2:18:5c:c6:44:01:9a:fc:76:c4:f1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
        Validity
            Not Before: Nov 23 01:01:41 2024 GMT
            Not After : Nov 24 01:01:41 2024 GMT
        Subject: CN=a08b86955e68b56fbeacaf19a402dfb9f967f231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:c9:97:77:ca:7b:99:44:4c:a0:59:02:a7:
                    88:91:5b:19:1f:cf:75:5a:0a:48:e1:af:bb:50:8c:
                    53:47:3b:7d:b9:d2:6a:ff:25:74:31:fc:11:d3:24:
                    94:60:75:fa:b9:72:68:8b:44:ef:d7:69:7d:65:ae:
                    2f:fc:56:2b:26:79:ff:c4:19:e7:43:48:05:05:41:
                    34:17:47:c9:63:6c:e0:30:b2:0c:4f:4f:4b:99:66:
                    68:8f:e1:c8:85:bb:34:03:4b:87:70:28:2e:ec:38:
                    a1:69:19:9b:2a:fc:bb:7b:c3:48:8d:5c:eb:da:da:
                    af:f2:47:d6:0c:c5:0d:f6:29:05:fc:72:4a:31:b8:
                    25:70:46:3a:be:1b:77:52:72:ff:8d:40:64:46:73:
                    00:3d:8b:09:a4:cc:38:c6:76:e5:43:96:2b:10:95:
                    28:1e:e0:34:4b:85:f1:4a:26:18:ab:66:97:c8:58:
                    62:0d:ff:e3:d0:c6:7e:ed:c6:e7:0a:8a:f6:f2:8a:
                    dc:bd:c5:3e:59:7b:4d:9b:50:5e:76:19:75:58:a4:
                    b6:aa:23:c6:d4:15:bf:ac:6f:57:bf:0e:f1:6d:94:
                    a3:f3:b7:34:2a:b6:22:c6:46:ce:3c:2c:cc:9d:d9:
                    ef:c9:24:fd:55:27:c0:38:51:3e:26:cc:15:a0:a6:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:86:95:5E:68:B5:6F:BE:AC:AF:19:A4:02:DF:B9:F9:67:F2:31
            X509v3 Authority Key Identifier:
                keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:6d:c6:ee:03:e7:39:27:1d:82:14:a2:d0:e8:bb:4b:57:
         95:c0:74:9a:1b:47:c0:83:6c:a9:20:b5:08:73:3c:6d:f5:f7:
         49:20:dc:2e:2d:5d:20:a5:da:0b:06:83:e2:b2:59:ec:41:8a:
         a9:45:5e:be:6d:a4:91:af:f5:e4:ad:70:55:a8:cd:97:81:89:
         46:58:9d:f3:bd:42:de:49:40:36:c1:af:ff:bc:fc:92:1c:f4:
         7a:c2:77:b1:d8:f2:c0:23:e1:62:7a:4f:5c:3d:c6:e8:04:b3:
         ed:4f:00:5a:9e:77:c4:5f:20:f2:bb:5e:15:f7:6b:8f:d7:dc:
         ee:9d:63:d9:b0:54:a9:69:92:d3:01:c9:b9:10:29:07:06:96:
         a7:24:2a:c2:fc:0b:f1:e6:e2:83:1b:a3:85:82:06:2c:f3:ee:
         8c:9d:65:cd:a3:f3:df:8b:e2:56:ff:d8:1a:b1:ba:66:3d:7a:
         f8:67:e4:61:9e:58:2f:95:c1:90:4e:bb:d1:78:c8:4b:c5:a9:
         5d:eb:45:f7:bc:ac:2a:48:ad:5e:f6:d0:3c:d0:d4:c8:9e:ce:
         59:dc:9c:f1:3a:cb:bd:e9:f1:10:48:44:a2:2a:45:3f:56:6b:
         e3:a0:7b:8f:c5:85:9f:5a:d6:31:c4:6d:00:17:38:f2:26:da:
         87:e9:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:33 2024 by rpki-client on console-ams.rpki-client.org