Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File:                     CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier:          Ssw5p/PpD/edIpaEo8DH2HiiG3QSy9iZQi4ipcXRTjM=
Subject key identifier:   9E:20:13:B4:04:25:56:53:1D:53:AF:AD:CA:1D:6B:FA:5C:CE:F1:96
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer:       /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial:       019352E2C9583E29A68FE76896AEE855EFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number:          0194
Signing time:             Fri 22 Nov 2024 08:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:14 +0000
Files and hashes:         1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: Zg1MI9Sluv749L8iE/ng4WiBdENE38ICCtj3dBH8iSc=)
                          2: MfPQ-BjwLMfWFITDXA0Px_bCGz4.roa (hash: Yv5uQzFQd7ZuIeljFghDlTOYLi/Q4Mx16y2099C3OgE=)
                          3: vnzz_HwfvY8vw-eSD_C6PXKBfcM.roa (hash: 1ddTGlZQgh50jPcoT7u1QbcmXkj+1OWiX4FvUYrN1GE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:c9:58:3e:29:a6:8f:e7:68:96:ae:e8:55:ef:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
        Validity
            Not Before: Nov 22 08:00:14 2024 GMT
            Not After : Nov 23 08:00:14 2024 GMT
        Subject: CN=9e2013b4042556531d53afadca1d6bfa5ccef196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b1:1f:c1:29:ff:9e:d6:82:b1:3e:82:c5:ae:
                    41:aa:70:0a:de:5a:34:1b:fa:ce:98:d4:70:4a:2c:
                    eb:e6:f0:96:fc:55:5f:b5:27:86:5d:a8:a1:14:3c:
                    e7:38:15:5e:b8:5a:f3:29:96:d2:31:95:fc:67:3a:
                    8e:8e:6c:a2:5d:b9:e5:0d:94:8b:2e:e0:3b:7a:98:
                    36:aa:75:9b:24:65:0c:c0:aa:39:9d:b5:59:25:98:
                    cb:ee:09:bf:76:0b:63:f4:42:07:fc:ab:b8:f6:3a:
                    fd:ac:0f:a0:c7:7f:30:69:ec:42:cb:b7:da:2b:5c:
                    1e:74:97:68:b4:72:d3:a2:15:1b:3c:8d:63:82:cd:
                    4f:ec:d0:8c:06:50:1d:b9:c6:40:11:80:69:df:d8:
                    55:97:78:70:20:ee:bd:02:ec:61:69:83:33:86:cf:
                    ed:99:f3:5b:12:d9:3b:03:ce:de:6c:9f:fe:d0:2d:
                    a7:90:33:5f:16:b1:cb:e0:79:88:07:e1:29:94:5e:
                    68:7c:99:45:14:9c:cd:ef:54:ef:87:88:23:21:f1:
                    4f:f2:59:5d:4a:f5:ea:c3:27:40:b3:94:91:30:7a:
                    d1:15:c9:e0:e2:67:2c:2d:42:fc:d9:fa:05:86:3a:
                    6d:6e:1b:2d:c8:30:0a:e2:33:68:3b:95:a1:8e:1a:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:20:13:B4:04:25:56:53:1D:53:AF:AD:CA:1D:6B:FA:5C:CE:F1:96
            X509v3 Authority Key Identifier:
                keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:9d:86:e6:22:dd:59:81:52:c2:b4:fa:34:a1:c4:4f:cc:c4:
         23:27:e3:84:88:cf:d7:4a:48:e6:06:15:b1:56:e7:19:9b:2f:
         0f:dd:78:1e:ef:4f:1d:06:58:0a:7f:e2:57:ba:62:d4:ec:60:
         8c:6b:df:26:d2:a6:0c:32:2e:58:d2:a7:17:b1:5c:aa:f7:17:
         bd:9f:09:2a:2f:b9:f0:d6:50:6f:21:43:5b:4b:ae:fe:79:d3:
         02:ca:b9:4e:92:8c:59:83:7e:4d:5f:bf:a1:e7:47:71:9e:69:
         6c:f0:d9:57:47:7c:8f:a2:00:1d:46:95:57:9a:67:a6:62:69:
         5a:e1:e4:5f:8f:e3:2f:2e:b7:03:54:9f:83:4b:f6:3b:9c:68:
         db:25:40:67:a8:2b:d7:37:b7:e2:4f:fa:db:ae:aa:c0:c0:69:
         67:da:dc:7d:cd:07:b0:eb:90:cc:59:15:6a:3a:ac:2b:60:3a:
         b9:6d:b0:9e:a4:85:49:63:a3:74:b0:2b:14:9e:bf:dc:67:73:
         16:53:51:49:b4:fc:8a:3c:fb:e0:96:46:a2:a2:76:ee:9c:32:
         7c:32:e2:6e:81:14:83:02:3f:11:eb:ec:d9:c0:77:04:cd:68:
         a7:d6:6e:de:b8:09:b3:d8:f5:44:39:2d:dc:bb:f4:28:a3:16:
         18:93:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:03 2024 by rpki-client on console-ams.rpki-client.org