Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File:                     Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier:          pvPzcFROMj0ChShGUKb6/NW/fd4XJ+mJScdYmZqf7e8=
Subject key identifier:   0F:80:A4:05:7E:EA:B9:DD:7E:86:BD:2A:20:EE:B2:75:48:27:F2:A8
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer:       /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial:       01936AEB26D62A59092FD1C8C0405F8D5D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number:          03BB
Signing time:             Wed 27 Nov 2024 00:00:15 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:15 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:15 +0000
Files and hashes:         1: 5dkeGY1pZbXKeN7_YTJeO1i3JwU.roa (hash: 0qI0l3xhD7bR92CncHTlHhww2VtoCS2KQlm7dS/PjOE=)
                          2: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: KY2lLqs9+UcAaOcpNhEk6/bBE31pIXEfiJUbup1Z3lc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:26:d6:2a:59:09:2f:d1:c8:c0:40:5f:8d:5d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
        Validity
            Not Before: Nov 27 00:00:15 2024 GMT
            Not After : Nov 28 00:00:15 2024 GMT
        Subject: CN=0f80a4057eeab9dd7e86bd2a20eeb2754827f2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:82:ba:b1:f8:5b:a9:f1:d7:0d:f2:b2:22:
                    38:49:a7:cc:1b:6c:e2:b0:b3:57:aa:8d:74:da:61:
                    30:87:6e:b6:22:8d:d3:b8:d7:e6:ae:1e:1b:c9:47:
                    b2:2f:1e:8e:dd:67:c1:cc:70:11:5f:2c:90:52:0a:
                    c2:73:6e:02:74:f7:ad:d7:11:6b:49:a3:4f:4e:70:
                    63:95:9d:3e:85:93:33:be:9c:48:9a:5b:99:e4:d9:
                    55:e6:fb:e7:ad:cd:59:4b:25:8a:c4:f2:27:47:f5:
                    9b:f0:2f:59:2d:11:25:30:31:6e:4b:d8:cf:32:74:
                    c2:10:c3:40:3f:1d:76:42:49:94:17:31:ea:08:59:
                    be:14:eb:c5:f1:bf:b7:88:f0:a8:a3:f5:d6:d4:14:
                    05:36:b9:a2:61:1a:02:56:57:05:ce:9a:84:49:d4:
                    fa:ba:80:ce:b9:d4:d5:85:4f:80:09:9b:f9:b2:c9:
                    4c:c4:c9:20:5e:d6:5d:37:ca:00:cb:19:05:b8:65:
                    11:b9:c8:18:ab:ba:b5:09:2f:d0:ce:df:a9:16:cd:
                    75:29:fa:dd:2b:6a:c2:68:f6:10:2b:a7:d6:04:9c:
                    bd:15:7c:c0:1b:b4:ab:55:43:b9:a1:cf:01:97:4f:
                    c1:44:b7:52:83:cf:11:95:e9:4b:11:4f:06:5d:ef:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:80:A4:05:7E:EA:B9:DD:7E:86:BD:2A:20:EE:B2:75:48:27:F2:A8
            X509v3 Authority Key Identifier:
                keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:01:ff:06:78:50:b8:8e:60:b1:d3:fd:9d:23:80:b6:6d:
         4c:5a:38:ed:83:87:87:ba:9e:51:d8:ba:ff:d9:a5:5c:0d:01:
         05:0d:30:e8:bc:2f:aa:d1:83:47:d7:4c:60:84:8d:ae:04:d2:
         31:b8:1e:6b:d3:8c:9b:8c:31:5b:58:18:68:20:17:5f:5f:8d:
         50:9f:47:d5:bb:e3:02:fd:d8:cb:72:12:02:98:70:2e:dc:a3:
         54:74:19:df:0e:92:78:34:90:1b:35:b3:ac:6e:6e:60:c9:44:
         aa:44:a0:eb:b2:f4:60:49:fa:73:d5:f5:c0:a4:24:2a:97:e7:
         cf:a8:dc:75:e6:b3:d1:4a:a1:ae:28:a6:30:17:a5:11:43:9f:
         e2:12:d9:4c:63:c1:d6:b6:26:82:f0:39:39:74:e6:67:dd:3b:
         5c:62:ed:fa:05:44:90:90:17:1d:28:9a:7b:9d:5f:ab:cd:66:
         54:0d:6a:92:c1:40:50:32:75:e3:f4:c2:28:1a:46:b1:c2:5e:
         77:72:65:97:2d:dc:bd:f8:11:1b:d9:47:35:82:52:42:cb:1a:
         d1:2d:72:3b:23:3f:97:0e:e9:bd:04:35:21:b1:82:88:d8:37:
         a9:32:2e:23:45:a1:a8:72:74:92:bf:1e:5f:03:f5:33:f5:1e:
         e1:f3:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:17 2024 by rpki-client on console-fra.rpki-client.org