Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File:                     RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier:          Rl8PM0SMTfiEvr2Vw/CuhwkS7VP8JInbx3Mfk5MB1PE=
Subject key identifier:   0E:62:99:AC:E0:B3:D5:43:6E:B2:90:24:05:53:90:F5:68:2C:54:3A
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       0193572DC5FAEE732151E47CDB6D602D6DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number:          095B
Signing time:             Sat 23 Nov 2024 04:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:37 +0000
Files and hashes:         1: 9cucg5du_6USztDQTmI6gREGVdc.roa (hash: 2Q9afJNsTFTz0VviWZFXaZIW26EPUrfiQsKyTZzyr90=)
                          2: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: 3Ma3gZ8yg3KeurZGwuUr30JfILudkR6jY/XXzu5pXuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c5:fa:ee:73:21:51:e4:7c:db:6d:60:2d:6d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Nov 23 04:00:37 2024 GMT
            Not After : Nov 24 04:00:37 2024 GMT
        Subject: CN=0e6299ace0b3d5436eb29024055390f5682c543a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:92:90:7c:dc:f9:cc:12:f3:bb:76:1c:2d:
                    c4:6f:3a:6f:3f:f9:af:a5:c5:96:bd:94:ba:d4:3c:
                    3d:e2:a3:09:17:39:7e:e0:56:d2:31:1c:de:fa:74:
                    19:1f:79:88:df:36:73:95:29:df:c7:f5:ef:0d:be:
                    ea:f3:09:4c:b6:5d:57:6e:9a:ab:ba:bb:26:55:2e:
                    2b:49:40:13:bb:c6:c9:52:66:e0:3a:19:34:0d:fa:
                    54:6a:ab:3b:22:e6:bf:b2:e1:e7:f8:b8:8e:dd:bd:
                    3a:6d:10:21:76:85:17:fe:b3:36:12:41:a3:18:16:
                    f0:92:87:98:45:3e:01:a5:6d:55:b4:1f:35:f0:5a:
                    4d:a6:2e:52:ea:20:c7:d9:d5:89:78:02:f4:f6:fb:
                    b3:37:27:9d:54:dd:1f:d8:4c:d4:d3:d0:43:82:42:
                    d1:83:58:a1:be:d6:51:53:f3:e5:fc:61:86:08:84:
                    dc:35:36:c6:1c:9f:fc:3b:2b:ad:f3:43:b8:61:a8:
                    50:c5:d7:b7:d8:79:b7:ab:b5:aa:a9:44:0c:53:cc:
                    2b:8a:57:e1:09:01:cc:bb:dc:13:76:b5:5f:c0:6c:
                    24:71:68:6c:29:fa:3d:fa:42:5c:d0:1f:c7:66:43:
                    eb:61:e6:5e:6c:cc:d4:a6:ae:33:6b:34:a9:7b:11:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:62:99:AC:E0:B3:D5:43:6E:B2:90:24:05:53:90:F5:68:2C:54:3A
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:ba:01:57:62:0c:f4:b1:a8:b5:42:cd:ae:dc:9d:47:8e:
         a9:a0:84:85:2a:a7:cd:92:47:4e:12:db:c6:f9:50:6c:8f:4a:
         78:4d:11:e1:2e:93:6f:56:be:95:af:8a:0f:62:7c:ee:41:2b:
         f6:ff:8a:30:71:09:03:2d:f0:83:78:10:a6:05:a5:8f:b5:69:
         f9:7e:22:ae:e4:db:04:e7:bc:03:6d:6c:15:e2:38:ac:87:3f:
         97:c2:f1:3c:cf:bf:09:e0:71:92:d2:fb:81:bf:7d:d6:c8:a4:
         96:75:22:13:70:fc:04:11:69:4c:55:d1:2e:be:e9:b7:95:f1:
         a8:6a:38:99:84:a4:ea:86:ca:fe:34:e5:a6:33:02:09:99:4c:
         7f:1e:27:58:b3:ca:58:f0:82:c5:84:c4:53:41:ba:30:df:12:
         d0:4c:4b:9b:75:6e:e5:cc:ff:a7:f1:53:69:1f:dd:f0:a5:e6:
         17:c1:aa:9c:4c:b0:72:f9:48:ea:24:f7:f2:bc:7b:38:ba:98:
         bd:95:1c:16:49:8f:b4:95:80:61:6a:68:b1:26:2e:db:c6:43:
         54:b1:20:35:a9:62:14:cb:fc:11:4f:9a:57:07:cc:05:8b:54:
         3c:99:d3:66:01:06:42:49:45:70:ef:70:93:f2:21:e7:ef:e9:
         22:70:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:14 2024 by rpki-client on console-fra.rpki-client.org