Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File:                     oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier:          mZyldQF8HDM42OyKFnr/KzKGCvNVs3UKYASWCwrgMjY=
Subject key identifier:   94:5F:76:AD:48:FB:50:C0:B8:C8:05:C4:1D:3B:F8:A5:1B:1B:A9:81
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       0193549B5295118CE51A1A95366719F5A9CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number:          0C31
Signing time:             Fri 22 Nov 2024 16:01:25 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:25 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:25 +0000
Files and hashes:         1: 7RaN415Q_vyZCQaHZE1qpwIxZCI.roa (hash: eeS3BLVnmid9RvaQxw2I3Qj4g9ylUHzmUcNSTxnF708=)
                          2: A_8Jb0wbzITZAuFKlrA84rQA43A.roa (hash: HFY+67QkfqIdB5A13X1FebmJrJlckRyQ80ZmDlihsF8=)
                          3: QysO0qawEGUHPTTIFhTfDDwZg3c.roa (hash: PU8cFJInuNjtw2Kqax9XRI+pkn/0u93G88e4vULyyDU=)
                          4: ZNcZ6L6imD4fymMeD6TcDnM6hXM.roa (hash: A0wl4JB7GiENDj6MwKGgkSFM8YsuIJhAlSQR1i0IK54=)
                          5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: G3Vkvg4WgrRguYq0sCw+ojwj8+i9xc+/qcivbZ9TJb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:52:95:11:8c:e5:1a:1a:95:36:67:19:f5:a9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Nov 22 16:01:25 2024 GMT
            Not After : Nov 23 16:01:25 2024 GMT
        Subject: CN=945f76ad48fb50c0b8c805c41d3bf8a51b1ba981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:3d:0b:e0:a0:10:0d:cd:bd:39:c7:43:39:
                    e2:1e:b0:81:c5:0b:82:20:21:86:40:cd:86:aa:48:
                    cb:ea:09:0a:75:09:4d:05:71:42:1e:18:17:2a:56:
                    d6:3f:db:d4:50:08:9d:41:b0:d8:08:f8:01:19:e7:
                    cb:87:de:29:16:9a:80:21:48:d1:21:ff:30:95:0a:
                    46:01:21:19:99:62:78:1d:33:5b:7d:20:29:25:0c:
                    bc:ad:9b:ae:9f:11:1f:8d:5c:42:3f:9f:e8:ec:96:
                    67:d0:20:be:78:02:74:bc:6d:b8:67:c6:c4:e6:fc:
                    3a:47:d6:a2:1d:a3:a2:0e:54:ff:89:ea:cb:3f:db:
                    d7:28:7a:d0:9f:18:e6:03:58:c6:8b:ec:07:38:3c:
                    f1:03:5d:4b:f1:3f:a1:15:67:97:20:f4:52:35:4e:
                    0d:d7:a7:d8:73:b9:80:0e:d0:c1:19:6c:33:1f:44:
                    9f:9f:5a:77:1b:4a:be:47:10:50:b3:24:63:1b:56:
                    61:ac:a7:de:90:c3:bb:ae:cc:0d:5a:12:6d:51:86:
                    5e:30:ae:79:1b:df:76:66:1c:32:fa:71:f5:61:1f:
                    b2:f9:ad:b1:ac:20:e1:2f:5c:5b:e8:1a:85:ad:1d:
                    14:08:23:07:58:09:a1:d6:2b:3f:6b:df:07:6f:80:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:76:AD:48:FB:50:C0:B8:C8:05:C4:1D:3B:F8:A5:1B:1B:A9:81
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:17:6c:3c:89:43:e1:39:01:71:58:17:da:62:4d:88:31:82:
         21:f3:a2:92:15:03:c9:9c:c0:6f:04:9a:ff:94:1d:45:9b:e0:
         ed:48:18:50:d0:8f:ba:b5:77:6a:28:15:29:53:a9:a0:63:e1:
         4b:60:5c:02:b0:a8:af:b5:dc:61:72:0f:6a:a8:73:dd:66:d3:
         f8:1a:c9:4c:8c:4c:c1:73:fe:70:7d:0f:2f:c1:45:95:03:e9:
         3b:73:b1:88:1b:0e:08:96:e9:9b:58:ab:27:88:0b:ed:36:9b:
         e4:2d:0d:a9:9a:f8:0d:c0:e4:c5:ed:c7:93:ea:3d:88:68:41:
         0a:7d:af:3c:5b:49:d4:a5:ce:4b:a7:af:84:0f:01:fa:26:a3:
         9f:19:bb:24:e1:d5:fe:da:2f:ae:9b:6e:73:8d:f6:82:17:c7:
         40:e3:70:cb:6a:b0:9f:eb:3c:ca:4e:5f:79:d5:75:8f:a9:7b:
         55:d0:2c:85:da:ba:19:ab:cb:f5:32:1f:4c:2c:cd:5c:64:af:
         fb:cd:9e:b5:a1:fb:10:2f:da:87:d2:39:51:33:11:b8:5b:1e:
         b1:78:fd:cf:91:8b:c8:8b:46:d3:41:51:d6:4e:47:1c:8a:e3:
         0d:5f:58:1b:55:f6:fc:69:9e:c2:3e:f0:48:c6:e8:dc:f8:9f:
         cd:39:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:28:47 2024 by rpki-client on console-ams.rpki-client.org