Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File:                     N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier:          7V2Go90zSD/LdhsJv6J5mUCA/v9DawV6zMBJO0XgzYA=
Subject key identifier:   4A:B5:05:D1:CD:C0:D6:3F:C5:B5:01:F0:32:9C:5D:5A:02:B9:34:C2
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer:       /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial:       019353BEE50746FE6E838EB05045015577C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number:          1352
Signing time:             Fri 22 Nov 2024 12:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:39 +0000
Files and hashes:         1: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: yo8RCuAmlW19I4h75MDtPL6dMCD/QFSiLhoyaOoSy/0=)
                          2: SgXsJQ6eL_5WBVaW5Q_IyO-0eCo.roa (hash: dSIedMh3pJj+pMRXANEA2AWi+InM1SBeD6YnfgdWi+A=)
                          3: kP9ZbsB38pfPeHjroT3rZbLJZCE.roa (hash: 3bzIoxaFXJy6q7VcpbTno84yvogV1DfsC/rHcSE9WO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:e5:07:46:fe:6e:83:8e:b0:50:45:01:55:77:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
        Validity
            Not Before: Nov 22 12:00:39 2024 GMT
            Not After : Nov 23 12:00:39 2024 GMT
        Subject: CN=4ab505d1cdc0d63fc5b501f0329c5d5a02b934c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:54:7f:fd:9e:96:65:64:15:57:d7:a0:17:
                    f3:51:45:b5:3e:ba:8c:4e:3c:9f:f3:21:f2:eb:f4:
                    9b:00:50:80:08:5d:5d:ec:e5:41:94:44:45:6d:ef:
                    50:6b:e3:39:c2:ff:bd:a2:db:ce:fb:af:3b:bb:1f:
                    ca:e9:ec:9f:be:67:7c:2c:93:86:0a:14:89:b7:62:
                    7f:e6:eb:d2:b2:f6:8c:c3:77:b6:38:cc:95:95:4b:
                    6b:eb:ab:85:22:76:0c:86:b3:a2:be:9f:29:a3:eb:
                    67:89:b6:3c:e2:29:b6:87:25:39:41:8c:14:1a:cf:
                    65:75:b3:30:fc:34:17:b2:ee:a7:f4:f2:29:dd:f0:
                    91:f7:3a:bf:2d:a4:85:5b:62:61:1e:76:a4:48:e3:
                    4f:99:29:ed:29:2f:e4:e2:9e:bf:d9:99:3a:5d:c5:
                    35:97:6b:94:2a:8c:48:fb:e5:1b:93:4e:30:ed:56:
                    12:43:36:f6:f4:c4:d2:e7:02:2e:9f:e5:76:0d:ae:
                    6c:a5:73:67:bb:31:fd:2d:98:64:cd:88:25:d6:df:
                    14:b6:c5:1d:97:f1:cc:8f:57:0c:c4:e2:00:b1:2a:
                    e8:a1:79:e4:6f:8d:ef:76:8e:0d:f3:1c:af:c4:1b:
                    43:a2:0e:6d:15:80:12:71:bf:4d:9e:07:47:bc:47:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B5:05:D1:CD:C0:D6:3F:C5:B5:01:F0:32:9C:5D:5A:02:B9:34:C2
            X509v3 Authority Key Identifier:
                keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:bc:35:20:36:de:7e:1c:30:1e:62:74:85:1d:ee:a1:e6:
         53:0f:4f:7e:1b:5a:50:42:95:b2:c1:26:17:e0:7f:d7:bd:9a:
         21:4e:df:90:95:c2:4b:b8:51:11:a3:6c:3c:e2:7d:1c:5b:97:
         03:10:1e:35:51:ad:62:90:01:82:e9:d1:00:33:4b:35:4b:84:
         42:3c:ad:77:b6:85:f3:88:3a:f3:8e:2d:2e:4c:15:fb:21:f1:
         37:43:c2:9d:a3:90:a4:07:bb:19:8c:cf:d2:8c:89:b5:3e:07:
         5f:5c:bf:f7:a6:3e:03:69:db:13:94:f6:81:0a:3d:c6:6d:53:
         a3:0e:f7:df:5b:3d:3b:4b:93:c3:ff:55:8b:90:e1:4e:6f:3d:
         e4:70:aa:23:3d:c6:03:61:dc:d5:86:23:ba:de:04:2e:fd:ee:
         84:ef:e7:8a:6a:05:b5:6f:4d:6b:82:5f:b0:4e:ae:6b:e1:83:
         bb:ff:a0:22:a0:75:4a:12:04:08:f8:54:1e:e4:62:98:84:75:
         e5:2b:24:cb:37:04:9f:4a:e1:3d:f9:35:45:dd:36:9b:d9:fe:
         c9:2b:34:33:e8:9a:51:77:35:91:57:08:6a:92:ae:1a:16:84:
         9b:59:5b:ed:ba:34:93:a6:3f:31:ae:ed:06:cb:e7:aa:75:5f:
         aa:8e:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:39 2024 by rpki-client on console-fra.rpki-client.org