Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File:                     I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier:          5FRUP6e8Y7sqIwTlJBk1BcI5TJPK84fKgEi2q4tv4C4=
Subject key identifier:   73:1E:2E:61:2E:C7:35:0A:2B:12:7C:C1:D6:38:62:D3:B2:D4:B6:9C
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer:       /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial:       0193591C2CC3C6ED905198FF4B0F1A7A73F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number:          0AC5
Signing time:             Sat 23 Nov 2024 13:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:38 +0000
Files and hashes:         1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: 1QzhoY4XUctETedEpmbJ86hswvSOdUkaYbR9VUAjWl8=)
                          2: dWcRkvNvK-ARasQXCle_5kBtItE.roa (hash: L0E2a8Fzy7LlakGMRj42m3kfG6OGKhwkH8vDW+4qE2c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:2c:c3:c6:ed:90:51:98:ff:4b:0f:1a:7a:73:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
        Validity
            Not Before: Nov 23 13:00:38 2024 GMT
            Not After : Nov 24 13:00:38 2024 GMT
        Subject: CN=731e2e612ec7350a2b127cc1d63862d3b2d4b69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:5b:a8:db:a8:0c:76:25:54:04:d3:f1:5e:
                    1c:39:53:28:7b:2a:55:97:80:e1:e0:1f:ce:b3:47:
                    87:0e:08:8c:9f:05:c2:cb:bb:fc:53:ee:fa:4e:55:
                    e9:75:9b:d8:7f:7b:16:21:7b:5e:2f:ba:40:f0:97:
                    d6:97:5c:e7:56:94:0a:95:9d:23:c4:a4:0a:08:fd:
                    5e:3f:96:a8:3f:21:ef:61:67:c0:d6:1d:56:e8:84:
                    a1:0c:da:7b:14:35:de:67:ca:15:b9:a7:c7:77:34:
                    b1:23:a9:fb:32:6c:30:d3:d5:b8:2b:d3:bd:fa:01:
                    c6:32:a5:2a:01:0b:2c:65:86:6b:10:b1:ab:d9:5b:
                    f1:7a:67:e9:08:85:d6:3c:eb:9c:b2:76:b4:fd:98:
                    64:05:cd:4b:f1:64:0d:50:be:37:a4:ac:4d:8c:ec:
                    bf:9a:f8:a9:d0:45:ea:2d:73:78:cf:4b:99:f3:65:
                    72:21:fd:f1:a2:9d:8c:1b:17:a5:62:8a:da:0f:39:
                    60:f3:08:c2:dc:88:37:56:b0:3f:ff:db:be:92:98:
                    ac:94:33:00:a3:a7:c4:2f:05:3b:ca:b0:eb:e4:46:
                    e7:6b:ad:b2:ae:0e:6b:70:4d:ef:10:93:46:34:a4:
                    1a:f6:4f:a9:e7:09:49:27:da:02:c8:61:e2:8c:fd:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1E:2E:61:2E:C7:35:0A:2B:12:7C:C1:D6:38:62:D3:B2:D4:B6:9C
            X509v3 Authority Key Identifier:
                keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:84:58:1b:34:55:a5:15:35:c1:3d:d2:2d:c6:43:3d:92:
         d5:22:81:8f:55:a4:06:c5:f1:85:62:5c:76:59:c8:ac:2e:ef:
         ba:80:f7:9a:7f:a4:0f:7b:96:85:ce:1d:96:94:93:e3:d2:3e:
         1e:a5:41:a2:da:08:0f:29:71:63:75:00:7e:0f:08:b2:de:37:
         74:06:b8:e0:6c:6d:19:64:ab:f4:c3:42:9e:6d:ab:c9:44:f9:
         ca:3d:f5:d1:d8:33:4c:87:b7:46:03:f5:a5:ed:10:4a:2e:36:
         49:dd:6e:04:55:b3:94:80:f6:e1:b1:e2:7b:84:12:55:95:d3:
         25:2f:36:0c:4b:6f:e8:08:11:92:46:62:52:74:90:f5:89:9f:
         64:f2:3a:cd:38:34:69:8a:47:80:8d:85:f4:30:6f:38:cf:9c:
         91:1b:8f:59:de:30:fc:13:df:09:08:56:78:93:96:ff:39:db:
         11:d5:31:01:4b:f7:10:c3:06:87:88:cb:e5:c5:cf:92:c9:9c:
         3b:36:87:d9:12:b0:12:8b:29:87:e3:c1:76:1b:34:5e:d8:2b:
         f0:fe:7a:8a:8d:79:94:4f:34:2b:c6:f6:8b:38:10:7e:a4:d9:
         fb:c0:27:da:df:9b:d8:fb:95:59:c1:2c:b5:e0:4e:33:70:03:
         df:38:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:34 2024 by rpki-client on console-fra.rpki-client.org