Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
File:                     h64K8oLdTpvBuCGUrtOxlpPYcpg.mft (raw, json)
Hash identifier:          qk2zKXhkzfm/Mo+P8fVR99RzNfmZ0RtFIM8XY/UhF34=
Subject key identifier:   71:A2:B2:69:1C:78:2A:DC:46:03:74:E4:A1:D5:CD:0E:7A:E0:31:CD
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Certificate issuer:       /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial:       019365575A5DC3C934784EE6244C99F834E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
Manifest number:          1310
Signing time:             Mon 25 Nov 2024 22:00:43 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:43 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:43 +0000
Files and hashes:         1: MvIi3tv5UQL-lumr2vl08Fg7XMM.roa (hash: U0i5Y5G0rdkLJR7dbWdu2KjZXsAqVKo0nendc3MID84=)
                          2: NusJh_P0McPkZcD12dDvwISr_bI.roa (hash: p/sMdJIsf8ujrci2lDdoGRjNkM8yZuVKyeo2UzyJxrc=)
                          3: h64K8oLdTpvBuCGUrtOxlpPYcpg.crl (hash: UpJgv4yQ0MjzYnJ3oSOG0wi0bnp6b45w2zy9aV+L5O0=)
                          4: mqvFBum27JNaeI5IVDDo8-82Rjg.roa (hash: BIQJE7atqJkxP316P43OodCdb+DczO+FsWQfrvWy258=)
                          5: zateVzh1zBRiX9I7-2sJJP-ixaw.roa (hash: D1z2ejbCilyyxDKWxlKERJpO4jG2GVN94SZIYtniJO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:5a:5d:c3:c9:34:78:4e:e6:24:4c:99:f8:34:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
        Validity
            Not Before: Nov 25 22:00:43 2024 GMT
            Not After : Nov 26 22:00:43 2024 GMT
        Subject: CN=71a2b2691c782adc460374e4a1d5cd0e7ae031cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:53:16:f0:26:65:7c:5f:31:39:89:6f:58:
                    b2:65:c2:dd:12:2a:1a:cb:f2:54:44:6b:5d:a9:7c:
                    bb:fa:15:4d:9b:e6:65:5a:2e:7c:ae:fd:e3:d8:22:
                    63:c0:69:bc:8a:fb:82:73:57:85:29:a3:a2:37:46:
                    b3:09:0c:4a:7b:36:07:e6:a1:6e:a1:32:ba:0a:c0:
                    32:b0:ca:ed:e7:dd:26:95:a4:19:ab:c1:d1:87:a6:
                    30:2d:e3:fb:be:1d:f7:8c:f0:d2:95:3a:52:ca:e0:
                    99:2b:27:95:12:3f:ef:f9:51:69:9a:d5:8a:57:19:
                    7e:4b:2b:ec:a0:31:35:45:3d:93:72:b7:5a:66:59:
                    39:c2:f1:52:3a:7e:e2:30:93:b1:80:45:3c:ff:ba:
                    9e:63:8d:4f:0a:05:e4:1f:6a:6c:a1:89:97:b7:ca:
                    d8:95:64:f8:ff:c3:23:76:fd:8d:2c:07:ec:ed:05:
                    9b:e1:e6:f7:99:25:f7:e8:43:b9:b6:8e:01:e1:c2:
                    15:f0:0f:59:e8:39:e8:24:f1:31:d2:77:5a:84:59:
                    fb:1f:ab:be:36:b5:98:fe:c4:84:f1:5d:8a:84:4d:
                    49:32:4c:a3:d3:cd:d4:de:1e:95:fe:cf:ad:a3:78:
                    0b:7b:ad:e5:19:0e:16:60:ac:e2:36:b8:dd:be:2a:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A2:B2:69:1C:78:2A:DC:46:03:74:E4:A1:D5:CD:0E:7A:E0:31:CD
            X509v3 Authority Key Identifier:
                keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:70:66:e1:72:45:5f:61:ad:c2:2e:58:80:bc:28:3e:6b:d1:
         e0:90:db:4c:b3:0a:a0:b9:32:97:7a:6d:90:d1:ac:f4:4b:a4:
         37:fb:f5:7e:11:cc:72:9d:17:7a:89:f1:11:e9:17:bc:79:f5:
         67:4a:6c:8a:88:b1:a1:c7:f7:0f:fd:75:f2:c8:73:ce:2d:b9:
         c1:6c:90:5f:ea:c0:c2:d1:9c:75:8c:10:47:58:f9:c5:e6:d6:
         d8:9d:1d:b1:1e:de:24:34:87:6f:b3:d7:ac:a5:00:71:3e:2b:
         89:c8:3c:36:73:3f:1c:12:14:71:6a:4f:d2:74:c8:74:9a:f2:
         13:18:e2:00:1d:4e:c8:83:81:a9:43:06:de:35:db:8f:41:a6:
         9f:c4:5c:8d:d7:e2:1e:a2:c8:82:99:ef:c7:50:db:71:8f:c8:
         eb:9d:62:e9:bd:50:9a:ef:f8:87:e2:07:c0:04:b2:3d:9e:14:
         c1:46:c6:d0:31:97:ff:d1:9d:e1:3b:31:4c:ee:8e:36:88:64:
         1b:b7:26:c3:4b:9c:9a:4d:57:6a:62:f3:e0:96:61:58:87:ef:
         e4:fc:73:11:b4:58:c4:73:6d:92:0d:57:e3:be:b5:79:e0:1e:
         b0:73:81:47:b6:26:ce:a2:83:aa:2e:82:14:63:44:5d:c1:9c:
         8b:87:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:29:43 2024 by rpki-client on console-ams.rpki-client.org