Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File:                     t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier:          5AFY5O6OMU2IlvsrDzrasBUYI9piPD0pmH/Ip0B368w=
Subject key identifier:   18:9E:64:9C:81:82:F3:67:63:43:5B:CC:50:B8:A9:20:FC:12:BD:43
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer:       /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial:       019356BFA23DFEB0AE34A0D2FC2F0FC2ED4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 02:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:19 +0000
Files and hashes:         1: Cl3B7bcUl_zIkyT5cu787IaCCgo.roa (hash: o+Gr64WzU329/FDIQLe9ZX1Rh5jTjVre+DhLC+X3XIE=)
                          2: KbUJ34puf7gHSkW4fPIzV67pEuo.roa (hash: FJSao2Ighjznkh91U+0M9a7cU7KpviY8CnJ7kp8fjzI=)
                          3: NgUjLy-F9McNKJOuWdUiMiSRPsU.roa (hash: JaorxcTMgtmsJEu5p+BMFtUSZDH+fkSv8erwXaF99E0=)
                          4: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: rRpx6X52ITq2IzSktmmyf0iT7PRTuE7S7LSE92d12q8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a2:3d:fe:b0:ae:34:a0:d2:fc:2f:0f:c2:ed:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
        Validity
            Not Before: Nov 23 02:00:19 2024 GMT
            Not After : Nov 24 02:00:19 2024 GMT
        Subject: CN=189e649c8182f36763435bcc50b8a920fc12bd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:8d:2b:88:34:89:b0:43:86:4d:52:da:36:
                    1a:b9:3b:46:f4:36:c5:60:04:bd:7c:a9:4d:56:9f:
                    76:42:33:00:02:cf:19:07:65:c5:be:52:77:aa:8f:
                    d8:20:a0:da:63:f0:6b:a8:81:7b:54:8d:c5:f6:11:
                    b2:38:bf:c4:cd:78:a3:66:92:52:35:4f:32:36:3e:
                    a6:10:89:8a:c1:d8:c0:cb:24:cb:17:7a:22:3f:18:
                    84:6f:f0:29:18:ef:2c:18:31:0c:9b:01:6b:62:9c:
                    cd:ba:1d:34:55:b6:c8:c9:fd:a2:42:39:aa:bc:8f:
                    02:87:7f:f5:fc:50:35:fe:9b:e6:30:0d:73:ef:95:
                    7f:c6:f6:8b:d6:21:17:ac:c3:8c:ac:7c:de:21:f4:
                    e8:43:7f:68:2f:1a:23:eb:38:41:df:66:65:d3:cc:
                    fb:bf:ac:74:51:73:56:d5:0a:af:64:91:3c:d0:ef:
                    b7:27:5d:f0:3d:16:56:73:92:90:92:dc:5f:63:08:
                    fd:7c:fe:a9:cc:5b:f5:24:77:58:e4:82:e2:7d:93:
                    30:d9:3b:23:f5:c9:5b:f7:ba:5f:37:15:c4:94:47:
                    f0:f0:00:62:ce:f6:06:1e:9f:aa:7c:df:b2:ff:07:
                    71:8f:43:1d:75:a7:19:5b:03:3d:04:37:9d:d1:ce:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9E:64:9C:81:82:F3:67:63:43:5B:CC:50:B8:A9:20:FC:12:BD:43
            X509v3 Authority Key Identifier:
                keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:81:43:00:6c:5b:3a:8d:a7:52:db:32:5d:9f:d6:77:33:e4:
         a6:05:8a:5a:3e:7e:d8:41:09:f6:7b:f7:8a:9c:88:a9:4b:b7:
         0b:d5:fe:2e:be:75:6e:47:c8:2d:44:2e:21:ae:44:7c:d5:79:
         5d:23:6e:d4:7c:9f:01:2d:83:9f:4b:2e:b4:e1:f8:24:43:cb:
         cf:2e:40:97:fe:cc:0e:d2:57:8c:c7:ff:ac:c0:20:03:0c:06:
         95:8e:70:81:5d:78:d6:ae:3d:41:c2:a8:3b:7e:dd:d4:1c:17:
         af:af:de:3d:e1:9f:d2:66:ef:21:39:fb:16:48:cc:3c:51:b4:
         0f:8d:58:c1:ed:67:4e:d4:c0:72:f5:e7:4d:56:62:89:19:f0:
         c2:68:35:1c:18:56:d9:3a:92:fc:ea:1f:7c:c6:56:14:b4:3b:
         c8:53:3c:1d:a1:0d:7f:b7:05:11:0f:fe:10:20:a1:0d:9e:b4:
         3e:cc:ad:48:e5:b0:fb:da:40:32:35:2a:2f:a8:2f:f6:a7:4b:
         82:9e:5c:e8:b8:7b:6c:e6:38:a8:39:3c:92:b3:cc:1c:df:f3:
         8a:0d:94:89:b0:06:86:e7:ba:ed:4c:13:a4:96:56:4b:96:7f:
         1b:2c:12:5c:10:c9:2f:0c:db:0f:68:e7:17:2d:77:07:3e:72:
         0d:62:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:31 2024 by rpki-client on console-fra.rpki-client.org