Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          paDV46xCD04w8Aw8j+22/apHCBZ5WFjnWggybRtYVFM=
Subject key identifier:   B0:F6:24:F3:91:D1:9B:FF:AF:E7:E1:32:8C:75:69:2D:3D:05:C1:23
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       019355088E490FB86C8D39223B3E57C9FCC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          1377
Signing time:             Fri 22 Nov 2024 18:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:44 +0000
Files and hashes:         1: 0tqGOQLd3qSjXZ49KGNLFRmEOSk.roa (hash: SmZVSy2rStS80vBCBm2Y4v2ekVrPYhpo2YTbGxkhHKs=)
                          2: 80F9flZBiBXX7cYq7Fpe6Y1_XmE.roa (hash: Y34JKxNCm+96WpvR+/eC8NWKCfT+GzSpQDJuXlu4BoI=)
                          3: NEjEiT7f1icTyIMd_PexZfY6MoI.roa (hash: LxGhvtgeTQZ2b9lmEcVp8QGhytcXxIzhziiB11bsAeE=)
                          4: QmHrZpKZKmn3eaPsaVV539_Vms4.roa (hash: EdaEoO7pb8Dv9Gl8Elp6VnUgJRlKR9k8RUuUmBJ/v9k=)
                          5: k5fvAehHxnQNCfnsJaKKvT-9GZs.roa (hash: w01fkXKyMV08CBo2PRl70qccmW2SAEjJbrGa58rLDZE=)
                          6: lw0TiWoewgVW_p66F6cNrz1zZis.roa (hash: yMOY7uozJld9j8CftNGW5J72iQrotaX1OxiZKcUNDZ0=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: XN/rbShvOkuMDflwo7Vxt6fF0mZI53WEHyVxMcXHiQM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:8e:49:0f:b8:6c:8d:39:22:3b:3e:57:c9:fc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Nov 22 18:00:44 2024 GMT
            Not After : Nov 23 18:00:44 2024 GMT
        Subject: CN=b0f624f391d19bffafe7e1328c75692d3d05c123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:98:24:57:c6:46:69:14:a2:47:c1:a2:66:
                    4a:df:c6:cb:12:85:6c:b3:01:a9:6d:8b:c4:9d:c9:
                    06:15:0a:0b:64:5e:b2:0f:1a:df:6f:2d:a8:8b:e3:
                    70:38:f8:58:90:0a:ec:36:3c:eb:85:17:1c:46:d4:
                    70:5e:b8:93:d6:9c:a1:bd:9f:5d:83:2e:03:d2:e8:
                    ba:95:e9:e9:2c:9f:10:d9:0b:f0:ab:30:63:9f:de:
                    08:8d:3f:b0:92:f1:d1:e9:f0:7c:20:f5:30:c9:a4:
                    c3:56:2d:30:bf:4f:11:1f:ac:28:69:76:4b:0f:cc:
                    ed:f2:2c:b4:d2:c2:f3:a5:be:3d:d5:d2:bf:7f:f7:
                    5c:68:c2:eb:76:97:22:3f:28:da:61:c3:cc:f7:37:
                    56:0c:a8:e9:22:74:65:74:f2:58:c3:5c:e4:2b:6c:
                    7f:0c:e1:4b:95:76:b0:1d:88:18:4b:41:46:42:ff:
                    c5:6a:43:5b:18:99:f8:bf:c9:2e:f9:d2:f8:6e:2c:
                    0d:64:44:14:34:d8:b1:90:5d:94:d9:c9:07:37:c9:
                    cb:19:37:4a:ad:90:05:ff:b0:87:ba:81:98:1b:00:
                    2f:92:35:c1:5e:75:30:76:35:90:72:ed:60:c3:d9:
                    61:fe:de:04:9f:d3:1e:80:19:ac:de:98:46:95:95:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F6:24:F3:91:D1:9B:FF:AF:E7:E1:32:8C:75:69:2D:3D:05:C1:23
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:41:23:34:d6:d7:fe:b2:18:62:e8:e2:1c:4b:0b:a2:5b:fc:
         6b:b1:c7:f2:ca:a5:ed:42:1b:43:98:b1:57:b0:16:ac:e5:65:
         1b:2f:82:58:fd:0c:b2:05:4e:92:8a:b2:e5:2a:c9:f8:e5:a2:
         ae:bf:ba:1b:66:2e:e1:fb:6e:dc:a6:79:3f:17:10:5b:08:98:
         49:b5:b1:2c:c9:cd:3f:fb:88:09:e5:80:1b:ce:b7:67:35:c5:
         80:0b:ba:c0:a0:b4:ba:23:b7:db:18:ff:bc:f4:da:be:a7:71:
         a9:68:64:a6:db:c1:f9:70:6f:4f:2e:27:c0:59:5d:1d:63:1c:
         bf:ee:b2:88:1d:dc:39:e9:9f:03:ad:71:9b:96:69:ba:c9:48:
         e8:6b:9c:ac:68:f8:dd:61:87:96:c7:21:bf:e9:c2:da:97:ca:
         8a:51:bd:00:be:4c:92:f3:e0:3b:08:0c:4b:9b:b6:87:4d:46:
         c8:64:7e:73:d9:e6:30:19:46:35:7a:6b:2a:38:0d:a8:24:f1:
         5b:64:5c:f7:8a:06:51:51:79:69:fc:36:38:5a:bf:9f:3e:79:
         18:d9:81:eb:da:fe:78:33:dd:72:52:21:82:e4:26:33:ea:7d:
         2a:bd:70:61:be:eb:ed:6d:14:5f:22:7a:4c:31:9e:d7:50:25:
         c6:2f:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:45 2024 by rpki-client on console-fra.rpki-client.org