Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          K/ijXdTLKe/obAYLN5x8spokDYjum4TGCoFDnSD8IxI=
Subject key identifier:   14:5A:FD:30:A9:BE:A5:6F:00:B2:6A:86:66:C7:43:7E:1F:4A:4C:FF
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       0193549B9894CA35BBF4F4AA6A415A362A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 16:01:43 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:43 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:43 +0000
Files and hashes:         1: 1NWG-z29arU6V-muAzoir5n2izg.roa (hash: 8XoSJtrVKrNU4fM97diPosMVCCxxXFraIvH7Zd+D/9E=)
                          2: L9mIWnSYE2EI-r9OemuMgthAWtk.roa (hash: occ0N9m2SLpa76u1joVDPIPvtWZdOt0lR3h/+Sc/NGY=)
                          3: SUQoU-rXEunMjTy8tiNgHC4y94Y.roa (hash: 6tnm2+WHS0XQ0q6yiShJC2yvxZijiMuav+AitEzmDqI=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: 8elI2Bz4q/CQJoqGRdP/Fpz8QJRsoENjilHLK4OOy4A=)
                          5: gmL2-QmgnlUfyRJGwDCidWDwXGY.roa (hash: Hhr/+ZpToITqpB9ciM8jKIOmHat9Wx/2ZzB3UG3sY8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:98:94:ca:35:bb:f4:f4:aa:6a:41:5a:36:2a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Nov 22 16:01:43 2024 GMT
            Not After : Nov 23 16:01:43 2024 GMT
        Subject: CN=145afd30a9bea56f00b26a8666c7437e1f4a4cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:4a:d0:27:26:ef:d4:ac:ef:95:1b:66:0a:
                    d4:55:1b:e1:34:54:dc:55:7d:b0:90:a5:5a:48:5d:
                    d8:bc:6f:b9:76:6c:50:1b:b5:d1:d7:b0:d9:0f:2c:
                    98:45:de:43:d6:40:54:89:69:63:ff:2f:c1:3b:e5:
                    69:c5:d9:82:87:dd:84:86:7b:d3:0f:65:80:2c:1a:
                    72:2b:91:56:32:88:1d:da:e4:87:59:b7:f3:a4:27:
                    cb:39:a6:5b:bf:1b:7e:76:11:02:25:3a:d2:ff:c1:
                    c9:60:1e:03:50:44:6c:78:3f:ba:0e:82:bd:d8:f5:
                    b1:f9:2c:a7:59:b0:ad:2a:0c:44:c5:88:3a:00:21:
                    fc:bb:e2:de:73:2d:c5:59:82:2d:25:f1:17:78:f9:
                    5c:12:05:83:f8:db:9d:37:7d:ab:8e:73:ac:81:10:
                    00:55:e9:8d:94:29:e2:61:4c:a8:5e:fa:48:ed:a5:
                    b3:3c:9e:46:71:d6:54:cf:b0:9e:86:c7:12:60:f0:
                    ef:1b:ba:29:dc:c2:2a:6a:f6:81:83:81:15:dc:bf:
                    87:bb:bc:3a:0a:35:24:59:7a:8a:40:83:06:40:f9:
                    b0:e2:20:e7:57:a8:92:88:2b:ad:a1:cd:6b:18:64:
                    00:5e:d8:06:a3:d7:21:0a:e4:94:ff:96:cc:df:3e:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:FD:30:A9:BE:A5:6F:00:B2:6A:86:66:C7:43:7E:1F:4A:4C:FF
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d9:b6:a1:f5:eb:2d:f4:ac:60:fd:45:40:36:76:42:fd:d9:
         9e:de:4c:be:38:8c:26:f7:35:df:f9:dd:8a:96:88:ee:b5:a4:
         1b:4c:b7:35:d1:b7:91:81:44:df:09:6e:ac:5f:90:87:d8:ae:
         29:bd:0d:b4:73:90:c5:98:b1:43:fb:19:60:b0:29:90:56:92:
         af:59:2d:02:f5:e2:e2:c2:cf:24:a5:ad:69:1d:ec:78:3c:b9:
         cb:b9:a6:cf:d5:78:d3:94:f0:cf:16:bd:a7:59:a2:50:5e:b7:
         5f:a8:00:7c:fd:99:bf:8a:01:d5:05:11:c4:b7:ac:1a:f6:d9:
         e4:9a:6d:f5:73:f1:82:8c:c9:42:1c:3d:bc:3c:a5:4e:9b:75:
         e6:e9:45:e0:94:7e:f8:e2:ff:99:d5:21:ee:b1:16:ee:02:0d:
         e5:fc:d5:dc:34:fb:78:e6:65:99:d8:1c:2c:8c:f6:92:94:a6:
         45:df:a2:f4:39:ca:72:b8:23:a0:6f:71:ed:a1:c0:9a:e5:98:
         e1:49:0c:7d:79:c2:20:c2:f1:d3:3c:d3:09:9b:88:d5:ad:5c:
         f4:a8:59:4b:54:7c:4b:f7:2f:f6:17:9d:d7:f7:a5:e6:9a:57:
         b2:b9:2c:7a:bf:e8:e2:bf:38:d2:b8:3c:48:5b:2d:d7:96:9b:
         20:e9:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:08 2024 by rpki-client on console-ams.rpki-client.org