Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
File:                     edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json)
Hash identifier:          HKuEnnWNeyJluZV7C5G0Y6WG33A9qrE5TWoE8dkvjfc=
Subject key identifier:   12:0F:76:4E:3D:B4:C4:BE:E3:26:A2:DD:24:C5:6D:4A:FE:36:AC:79
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Certificate issuer:       /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial:       0193572D95AB9BCC1C7BEBD9AA69EF617B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 04:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:25 +0000
Files and hashes:         1: eNkm65rDZIawGpVRtOG5I6SHb54.roa (hash: WXRPt2vRT0L34fbZa2L7DZ06/e0TPnaukcRuk6KGz0Q=)
                          2: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: +A9bnrTCJknu/Qpg/RZ1nkba8Mhe7cChEJvn3LpkKlE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:95:ab:9b:cc:1c:7b:eb:d9:aa:69:ef:61:7b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
        Validity
            Not Before: Nov 23 04:00:25 2024 GMT
            Not After : Nov 24 04:00:25 2024 GMT
        Subject: CN=120f764e3db4c4bee326a2dd24c56d4afe36ac79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:79:e3:24:f0:b8:ef:1e:fc:41:60:86:f2:
                    17:26:01:dc:97:d0:85:b9:7f:20:dc:78:8b:9b:8b:
                    b7:d1:cd:01:1b:81:c1:16:7e:8d:8e:56:39:8c:b9:
                    c5:74:90:e1:9b:42:3a:0c:be:41:a7:8b:13:92:86:
                    d5:db:65:46:b0:c4:95:f7:36:0d:13:d0:96:3f:7f:
                    2c:a6:50:6c:3a:00:42:61:4f:5e:dd:14:de:94:c6:
                    23:c6:ae:51:cc:ad:96:27:9f:08:4d:6a:55:0c:f8:
                    de:ee:b1:f4:ef:20:70:01:fe:40:19:a0:ff:9e:a2:
                    7a:04:44:cb:b2:12:f0:2e:1d:d5:c5:68:6c:a8:db:
                    38:1c:e8:05:19:52:d2:b0:fc:94:a1:e4:4f:68:ab:
                    54:84:1f:e6:32:6a:cd:ce:c5:7d:a6:70:53:4a:ce:
                    83:60:a3:29:7c:d2:dd:9b:bf:30:5e:96:37:f5:20:
                    af:e3:05:ca:ab:67:62:03:9a:84:a9:1e:0e:b1:a1:
                    de:74:11:ea:9d:1d:d0:62:27:5e:9b:96:d5:f8:54:
                    14:cc:33:68:69:6e:a5:b5:d1:e1:c4:cd:2b:4a:73:
                    6c:4f:d6:ac:7e:04:89:11:74:cc:c5:da:26:a4:3b:
                    26:60:21:c8:d7:85:70:82:07:d2:02:42:52:7a:01:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:76:4E:3D:B4:C4:BE:E3:26:A2:DD:24:C5:6D:4A:FE:36:AC:79
            X509v3 Authority Key Identifier:
                keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:0d:06:29:74:1b:c7:a9:8f:32:6e:fc:6a:dc:e5:ae:60:
         2a:eb:11:31:6f:d8:d8:33:47:49:e9:45:3a:8e:32:6f:f6:77:
         67:cf:13:5a:c7:93:2a:0c:a2:6e:61:5b:44:8a:6d:da:aa:5b:
         81:b4:f9:81:34:fd:73:34:05:e5:48:03:ea:bd:68:ad:7c:ff:
         29:e4:4a:f8:c1:f9:96:43:d8:af:2e:13:33:24:ac:8c:55:7f:
         6f:3d:b9:77:c3:29:93:e4:01:6a:3c:10:cc:18:b7:63:e9:23:
         34:99:b3:7a:ac:45:5b:1e:86:75:df:61:43:03:c0:88:4c:74:
         d5:6c:76:cb:10:dc:98:ef:34:f2:94:2a:f5:39:16:a7:a5:ec:
         71:b1:b5:d8:52:6d:0d:e0:fd:c9:72:bf:2e:b9:df:05:3e:b4:
         ef:dd:bb:30:08:de:c7:bc:6a:63:54:06:7a:b4:aa:b9:fd:8e:
         4e:15:09:f8:5b:ef:59:8e:0f:54:f3:78:20:07:4b:44:b0:9c:
         b2:0c:8b:d2:b9:29:f4:b8:c0:10:69:f8:db:d7:22:c1:90:f6:
         af:eb:2f:54:a5:ce:b2:b5:ff:f8:71:6b:30:af:18:c8:68:6c:
         66:ab:9b:47:54:a9:20:16:ad:85:af:f0:1c:f7:ea:50:08:38:
         d5:25:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:54 2024 by rpki-client on console-fra.rpki-client.org