Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File:                     haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier:          DwIIWpZE6hKSBrRgMaIjlzhdCVeVOHUlwOL0tRkDtx8=
Subject key identifier:   5A:D4:B4:44:35:78:D3:7F:D0:41:E5:C1:66:24:DB:3F:91:57:7A:F9
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer:       /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial:       0193579BD8E8BFA5872F127846EECC5E7420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number:          02F4
Signing time:             Sat 23 Nov 2024 06:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:51 +0000
Files and hashes:         1: _s2iGPBHZm3y6H1JqtYYuRUrzJY.roa (hash: uREoPrfS49NfR1IXCaCeRnpi1/dx3xNsOJ0y+Lh5h8c=)
                          2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: Q3TTpj3sK2p0ZKIbofMIR4lBGcXzDv6i9d10lNZVHig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d8:e8:bf:a5:87:2f:12:78:46:ee:cc:5e:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
        Validity
            Not Before: Nov 23 06:00:51 2024 GMT
            Not After : Nov 24 06:00:51 2024 GMT
        Subject: CN=5ad4b4443578d37fd041e5c16624db3f91577af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f6:8c:7a:e8:33:62:68:ab:34:20:bb:6e:4b:
                    48:6a:cd:ab:01:c9:b7:df:13:57:47:43:5c:13:e8:
                    62:04:27:74:f3:34:5c:15:d0:62:36:87:b9:df:31:
                    41:fd:00:ac:7c:30:af:e1:cd:4d:fc:ab:59:c4:f3:
                    6f:c6:eb:55:e3:49:3f:9d:5f:47:ca:14:26:d0:a1:
                    82:d5:d1:67:b6:36:e9:dc:45:30:f1:25:80:1b:81:
                    5b:1d:5f:10:4a:26:51:a0:cd:6b:8a:32:b6:cc:a4:
                    ec:87:78:e6:df:58:28:60:fc:72:73:e7:0e:c2:63:
                    f4:27:c7:2e:3a:b0:6f:98:36:da:40:07:62:24:21:
                    73:08:1c:fb:39:d3:08:5e:a4:7b:62:b1:ed:24:fa:
                    14:ff:c5:58:af:31:e0:ff:60:9d:2a:ff:c7:57:9d:
                    7d:ef:6d:57:42:32:14:c2:f8:93:14:b2:63:90:df:
                    db:d7:98:0e:96:b6:b4:1f:cc:0a:5f:04:1b:3a:5d:
                    75:0a:cd:5b:be:30:ea:85:98:c2:0d:8a:66:ed:77:
                    26:59:d8:58:c8:0b:60:c3:11:a9:78:d3:f1:09:92:
                    c3:60:7b:88:48:af:fb:19:83:d0:b4:4f:b5:5f:1e:
                    e5:31:51:49:6b:21:a7:ff:c5:bb:a0:d2:cf:0b:a7:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D4:B4:44:35:78:D3:7F:D0:41:E5:C1:66:24:DB:3F:91:57:7A:F9
            X509v3 Authority Key Identifier:
                keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:84:0d:fd:0f:c0:c9:ae:43:0c:e1:f3:94:fd:20:4a:e6:
         e9:f0:3c:27:ad:88:52:f3:48:1b:05:f4:97:51:fd:ea:54:0e:
         fe:33:28:70:dd:80:5b:7f:0e:bf:ec:28:4c:21:94:f8:0c:98:
         9d:ad:f0:18:25:9e:2a:d9:80:69:c7:bc:56:04:b2:a1:2f:19:
         6a:a6:2e:6e:44:8c:a6:52:0f:53:62:40:56:f2:3f:7d:9a:8d:
         07:51:d6:fc:00:43:04:2d:b1:9b:a3:fb:b0:aa:e6:8f:89:41:
         ea:5d:7f:f5:7d:2d:72:58:ca:45:98:31:51:94:90:ea:e9:3e:
         5f:97:06:e0:ff:a3:bb:2a:f9:d6:fb:35:03:25:a3:21:79:18:
         99:bc:7a:f2:cd:27:17:99:8a:ed:96:c5:80:73:3f:48:89:9b:
         87:f7:62:70:29:ce:81:c7:08:d5:b5:41:19:75:4a:04:2a:20:
         4f:b2:39:6a:f1:94:10:a0:c2:50:44:7c:59:56:94:f8:ed:c4:
         52:7d:75:91:16:80:23:7a:30:3d:32:85:e6:a1:dc:d8:b1:19:
         0d:40:19:dc:a8:ab:55:22:a5:c7:78:f8:40:42:9f:11:16:52:
         d5:78:2b:90:7b:58:e0:32:08:7b:45:32:17:c3:46:dc:01:76:
         d5:f9:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:32 2024 by rpki-client on console-ams.rpki-client.org