Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
File:                     fbwuyjJHd9dL8uc8FbDMf_PudaI.mft (raw, json)
Hash identifier:          27q6mVemsiUIrGtKbg7kmfyJTYRAb4e7lFY+Al1m80Y=
Subject key identifier:   AD:19:C4:E7:48:AC:89:D0:65:AE:48:DF:A5:4E:09:96:05:2B:38:56
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Certificate issuer:       /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial:       0193549C0F2314A3C5FADA76381D5F08FF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
Manifest number:          0A5B
Signing time:             Fri 22 Nov 2024 16:02:13 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:13 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:13 +0000
Files and hashes:         1: 7moaA1JDSpolpcKJyvMGVncB-KI.roa (hash: SH+c2YN9XWZEG6gVRyjjW+2TRKVOu/P/HHY4uB8tzGg=)
                          2: fbwuyjJHd9dL8uc8FbDMf_PudaI.crl (hash: 0mMOw2K/LhtXYikicVF2B96eQNgkX8DEeZyJtAySQN4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:0f:23:14:a3:c5:fa:da:76:38:1d:5f:08:ff:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
        Validity
            Not Before: Nov 22 16:02:13 2024 GMT
            Not After : Nov 23 16:02:13 2024 GMT
        Subject: CN=ad19c4e748ac89d065ae48dfa54e0996052b3856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:28:19:0b:03:f6:31:8f:f7:6c:85:d9:1b:
                    a8:31:6b:37:2a:73:b1:8a:e9:81:ce:af:e6:56:4f:
                    ea:2d:05:59:de:c4:01:ca:a9:78:98:f6:11:bb:5f:
                    59:a4:66:7a:f7:f6:43:d0:34:bc:fc:9a:52:1e:70:
                    fc:21:3b:12:22:82:4f:d5:87:b8:43:e8:b6:05:51:
                    71:9a:3f:26:9f:d6:b8:48:71:cd:9b:85:82:54:98:
                    1e:74:f8:14:b6:71:e5:d2:ac:2b:14:06:fb:23:33:
                    b9:9a:60:d9:05:b2:ca:6a:e4:9f:e8:be:71:75:3e:
                    3f:0f:e7:11:f0:75:ef:61:5c:69:41:23:fa:47:41:
                    97:6f:53:d1:b2:45:34:84:b6:fd:8a:8a:6f:6e:e3:
                    e4:f3:a2:da:7b:4e:fa:87:32:ec:3e:a6:08:65:c2:
                    c7:c7:a1:ae:9f:19:e3:6c:89:07:bc:79:6b:08:82:
                    e6:06:05:f9:ad:00:cd:ee:b0:f3:b8:cd:d3:f1:27:
                    ab:2d:15:d9:06:c2:b6:85:ac:57:49:92:1c:cf:f4:
                    91:92:8d:02:99:7d:0d:b1:01:07:b2:53:69:c8:79:
                    db:03:60:b0:35:d6:f2:2d:49:7c:6e:ae:a8:30:85:
                    cd:d6:0d:c9:f9:b8:f7:0b:36:05:fc:f5:8e:1b:b7:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:C4:E7:48:AC:89:D0:65:AE:48:DF:A5:4E:09:96:05:2B:38:56
            X509v3 Authority Key Identifier:
                keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:b5:e4:d0:9b:13:d8:49:fb:de:bd:46:16:65:53:58:2b:
         0f:5d:aa:de:b2:f8:60:f2:58:4b:2e:3a:64:78:4a:31:93:80:
         b1:ee:31:fe:da:08:b4:55:ca:f5:c8:05:f3:48:b2:44:d2:ba:
         c5:c7:64:cb:28:f8:6f:15:40:69:ee:07:11:23:63:7e:0a:4a:
         24:18:47:b2:f8:68:85:ae:35:8b:e2:a3:ae:c0:37:89:42:d7:
         b6:fd:c0:9c:ee:20:4f:44:66:8a:14:09:e5:76:a6:37:10:5f:
         ed:65:75:06:d8:52:3d:cd:82:f2:57:7d:6e:d2:0a:b6:0e:07:
         49:0e:af:a1:13:fa:ff:ff:73:78:12:45:aa:cc:1d:87:fd:c3:
         87:48:f3:8a:2d:eb:77:4b:89:65:bb:a1:de:dc:40:be:76:fd:
         d8:ea:5d:04:2c:68:d9:41:54:05:c1:b3:6a:48:82:69:08:d8:
         b6:1c:38:95:79:92:c6:e1:2b:61:ff:bd:08:85:49:75:6e:2c:
         6b:75:22:35:c3:cf:20:a1:fb:8c:b1:6f:7f:fb:1a:15:6e:a4:
         f2:75:1b:4a:53:82:65:4f:fc:c0:62:4e:96:b5:7c:af:31:f9:
         fb:15:c2:11:a6:73:f4:c9:0f:e2:be:d8:eb:ac:74:1f:a0:88:
         a9:38:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:44 2024 by rpki-client on console-ams.rpki-client.org