Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File:                     PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier:          7cLC5e7MHTe/bETeQVpIUvDohRucu9UFVH33kTbieJg=
Subject key identifier:   5F:DB:9C:FA:3C:EE:AD:4E:84:2B:2C:2F:7A:5A:46:66:C1:A0:96:5B
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer:       /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial:       01935764A0A1B20D992E44BB8E7ED0F79542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 05:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:32 +0000
Files and hashes:         1: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: ImA1rRHHhUKDb4utEHBAJAurLWwq+JKs15X0atX0ONo=)
                          2: hIJ8_6H-eKSMfFhwtJEFqfHt7pU.roa (hash: iW1gb51LxK7Ob8e1PNQoxfjYaJQIYl0Jq5JU+FQgy7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a0:a1:b2:0d:99:2e:44:bb:8e:7e:d0:f7:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
        Validity
            Not Before: Nov 23 05:00:32 2024 GMT
            Not After : Nov 24 05:00:32 2024 GMT
        Subject: CN=5fdb9cfa3ceead4e842b2c2f7a5a4666c1a0965b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:94:5f:eb:7e:77:d4:04:94:04:4b:f0:6a:
                    a2:45:bf:a4:85:e2:9d:69:fd:f3:35:e6:9e:ed:a0:
                    b1:cc:0f:50:e3:87:df:f6:e1:74:84:e8:6d:17:f8:
                    04:bb:8e:64:16:3d:0c:ab:8f:a1:fe:1f:f9:20:03:
                    11:25:f5:5b:7c:c0:f5:2d:5a:47:6e:49:18:d4:cd:
                    cf:d3:12:66:29:cc:db:72:0b:f2:60:d3:b7:41:d7:
                    2f:bf:9e:68:d7:b5:a1:dc:5f:9a:d9:a0:5d:fe:17:
                    ce:03:1f:f0:d8:65:ca:a1:9b:cd:15:9c:dc:e1:60:
                    ea:61:60:bb:8a:55:fc:1b:4e:8c:0a:63:66:e0:eb:
                    aa:af:ca:aa:19:79:fa:72:ee:3c:bf:f7:c0:80:a9:
                    89:16:0a:3e:c1:77:e2:a9:d7:2e:8b:3d:47:af:ab:
                    ab:2c:de:f2:8a:9d:41:ce:ce:4e:57:8d:75:5b:89:
                    f4:5e:86:ea:36:fb:59:2f:89:a5:55:85:6b:cf:31:
                    1a:f1:c6:83:d1:ec:b6:ce:5d:9f:bc:e0:e0:98:c1:
                    d3:b1:73:2e:25:a3:e7:7f:84:41:65:ce:f2:06:43:
                    0e:0f:44:c6:d1:24:28:8f:4f:74:45:b2:16:ed:9b:
                    24:18:10:2c:ae:99:77:88:33:18:aa:5e:fe:35:72:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DB:9C:FA:3C:EE:AD:4E:84:2B:2C:2F:7A:5A:46:66:C1:A0:96:5B
            X509v3 Authority Key Identifier:
                keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:d9:29:bc:57:43:3c:ed:8e:9e:a9:b4:48:60:55:7a:27:
         f6:36:fe:d6:6e:db:33:bb:e1:e6:80:19:57:d6:be:a5:6d:ac:
         1c:74:7b:12:fb:18:3f:66:65:be:57:87:bb:d5:ca:62:42:6b:
         41:05:cc:b1:44:ce:78:dc:b9:69:40:27:ef:80:41:48:95:b7:
         12:54:8e:b4:85:89:95:59:8a:e4:54:8f:ac:08:47:d7:5b:93:
         56:26:97:57:e6:8f:95:af:76:31:55:10:f9:79:77:f3:5b:65:
         cf:a3:38:b6:47:ac:88:f7:5c:f0:a8:c8:7a:9c:0c:df:dc:a5:
         61:b1:3c:76:ba:41:5c:69:95:d1:be:44:5d:63:73:67:ea:54:
         c9:1c:fd:ae:cf:94:1e:e0:dc:60:2a:08:2a:e7:9b:f5:24:eb:
         c7:12:68:54:74:bd:b2:be:ac:3b:6b:a6:2d:65:22:94:fa:70:
         b3:e0:c2:f0:81:b4:1b:52:db:d1:fc:e8:7f:09:ec:e4:08:5d:
         53:4d:27:57:a3:6b:fb:05:63:59:fd:9c:c7:0b:e4:17:c8:70:
         0b:98:79:3e:1d:d0:bf:f9:73:36:87:f4:af:f9:d3:fe:49:7b:
         2b:8e:06:8d:58:15:9b:3e:1a:55:d4:2d:a2:b2:cf:07:7e:6c:
         7c:6d:fd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:49 2024 by rpki-client on console-ams.rpki-client.org