Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File:                     TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier:          UaFA9V+ezlDz2YyKA66jUocXGrmJ3TWDp8Ap+iUs/Z0=
Subject key identifier:   DF:7A:1B:B2:F4:D6:F0:88:4F:0C:7D:C8:20:5D:0C:39:E4:A5:F9:2B
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer:       /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial:       01935688FC4E49314B39A3D442098BC12309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number:          0F86
Signing time:             Sat 23 Nov 2024 01:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:38 +0000
Files and hashes:         1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: AkqwV7cdTU3e0TjH8XyBU+xq88XZE2YbH67BeT2hXBY=)
                          2: muavikCogXjBAvR5lF7l2Q4rqdU.roa (hash: c68kE9jMTOmAi83nbGJXMRDNrCn1c/Q783A8AcROqkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:fc:4e:49:31:4b:39:a3:d4:42:09:8b:c1:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
        Validity
            Not Before: Nov 23 01:00:38 2024 GMT
            Not After : Nov 24 01:00:38 2024 GMT
        Subject: CN=df7a1bb2f4d6f0884f0c7dc8205d0c39e4a5f92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:e8:cb:73:15:72:a1:6d:ac:9c:ac:01:32:
                    3d:14:c5:5b:fb:0f:5b:58:bb:26:1e:fa:ea:01:05:
                    11:a7:31:70:aa:ca:ca:d5:2d:51:41:3b:dd:b3:b0:
                    84:a2:c4:e2:c8:7f:b4:fe:01:aa:c2:56:dc:85:31:
                    bb:f7:40:d3:6f:90:c0:55:28:07:98:04:89:10:b1:
                    3a:1c:5d:ca:3b:5d:8f:e9:e8:df:a0:89:ae:00:4f:
                    82:43:21:25:cc:c1:07:52:b4:98:30:aa:e9:4c:b0:
                    32:a6:68:14:e2:86:fd:fd:71:5d:d4:8b:10:f7:3b:
                    63:60:c3:90:ad:0d:43:18:86:31:fc:5d:1d:07:1b:
                    0d:12:9c:98:5c:07:0d:37:dc:2b:a9:cc:b1:d1:e6:
                    5c:8a:41:82:b3:ab:a4:1d:11:c3:4c:4c:f2:e8:14:
                    af:3e:9e:29:c2:ed:72:40:9e:4a:6f:ba:b8:9a:34:
                    f3:01:ba:0a:b1:45:25:da:cf:67:25:65:8b:66:68:
                    40:e4:27:9e:6c:59:d3:07:9c:e6:bf:50:b7:e5:a9:
                    97:eb:48:f7:05:eb:01:ff:dd:d6:00:cd:fe:73:ce:
                    19:d6:91:ce:e2:b5:27:b8:37:28:19:24:b2:9f:d2:
                    5a:07:b5:99:22:19:cb:4b:63:2e:49:2e:ad:23:b0:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7A:1B:B2:F4:D6:F0:88:4F:0C:7D:C8:20:5D:0C:39:E4:A5:F9:2B
            X509v3 Authority Key Identifier:
                keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:66:ce:04:ea:7b:c7:8a:cd:80:15:6a:33:60:6a:3c:53:
         61:dd:ec:8b:46:ca:1c:9a:0c:1b:19:15:df:79:6c:f9:01:98:
         92:c8:2a:63:78:5a:0f:1d:0a:da:c5:4a:08:7c:77:06:57:41:
         93:94:da:ab:83:64:ac:a9:0c:ed:20:17:2b:ea:7f:42:53:87:
         2c:8b:94:df:04:6b:ab:c2:94:f1:6d:78:41:d4:29:45:7a:09:
         9b:2f:38:75:00:e5:4b:7f:c4:1e:62:9a:36:14:c5:ee:22:d8:
         8c:f2:30:20:5b:b2:e2:99:d8:cc:47:d9:ba:73:5b:4f:70:64:
         eb:92:30:80:2b:10:8b:e1:37:6c:67:26:f6:68:3f:26:4c:b0:
         f7:24:b9:a6:22:d1:c0:50:5c:45:d7:3f:c6:ef:92:92:ed:c4:
         ca:e5:c0:b3:ff:91:ee:79:b9:90:44:fc:5f:2f:a9:0a:6e:c3:
         34:29:dc:b0:c4:f3:be:ca:ff:c5:01:28:40:b9:2b:d3:5b:43:
         1d:6d:85:13:20:c1:7e:97:d7:49:c3:11:fa:3f:66:09:d8:bf:
         ad:e2:1e:22:4b:67:79:56:16:91:ec:2e:f1:2a:2f:8a:82:e2:
         16:e6:bd:c6:a3:b8:24:14:46:21:d6:9e:49:59:9e:e4:a4:f6:
         9c:0d:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:15 2024 by rpki-client on console-ams.rpki-client.org