Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File:                     xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier:          C+UY8dXrkzM6auATrL/vMUyRPgcUvlyjO5/E8+KIfUE=
Subject key identifier:   53:04:C4:84:D8:A8:AE:15:AA:38:F7:7A:2F:5D:12:F4:90:52:BD:3F
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer:       /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial:       0193549B2B22036E9FDCA33C1C636172563C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number:          050E
Signing time:             Fri 22 Nov 2024 16:01:15 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:15 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:15 +0000
Files and hashes:         1: RO4zjeQkeheRbDBuYx0fcd6al8I.roa (hash: jMMoQs9InoheM+pJMXFAOJkfiXLoeW+w5ZxWTOr3lZw=)
                          2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: oaHAs6vIcNQ3UgX1lJnxsqU29aRzjcz/LhXX7ZrNzCg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:2b:22:03:6e:9f:dc:a3:3c:1c:63:61:72:56:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
        Validity
            Not Before: Nov 22 16:01:15 2024 GMT
            Not After : Nov 23 16:01:15 2024 GMT
        Subject: CN=5304c484d8a8ae15aa38f77a2f5d12f49052bd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:c7:ec:05:9e:2d:fc:35:e8:33:06:11:e4:
                    57:f2:30:b6:3a:5f:32:7c:39:c2:ff:f7:ca:e6:e0:
                    51:ef:e1:56:d7:49:5c:27:9d:ba:49:57:24:25:9b:
                    9b:75:32:1d:ea:7c:a6:9d:be:09:b8:40:36:8b:85:
                    30:7e:d3:1f:0e:ef:1b:25:da:99:d6:5f:44:3e:5f:
                    c7:8f:50:56:d7:be:e2:78:48:1f:d8:73:6d:65:21:
                    d5:07:01:b4:c6:bf:75:f0:9f:09:d3:c4:a6:e2:58:
                    aa:51:fb:3d:e4:cd:80:27:54:85:33:69:48:fb:98:
                    9f:85:56:89:3b:ee:3d:2e:66:dd:11:b6:38:c5:2e:
                    30:91:aa:ea:8d:ac:64:4a:9b:35:5b:31:16:e2:d8:
                    61:fe:7d:e6:52:23:83:86:69:b2:35:aa:03:bc:85:
                    65:09:0d:62:73:de:ec:ce:5c:a5:94:61:41:b2:3d:
                    c2:5e:5d:f6:3d:a8:21:c2:40:01:87:31:bd:80:6f:
                    1e:42:19:16:d1:d1:e1:5f:d8:1a:65:cb:47:d2:64:
                    e9:5c:be:f1:ec:06:4b:7d:54:93:dd:0a:9e:a7:63:
                    73:d3:24:84:9f:c1:d6:e5:5f:f7:c2:5c:bc:a6:37:
                    4f:f0:c0:ed:1d:3a:3f:af:d5:48:05:65:86:8c:69:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:04:C4:84:D8:A8:AE:15:AA:38:F7:7A:2F:5D:12:F4:90:52:BD:3F
            X509v3 Authority Key Identifier:
                keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:6d:4b:4c:5c:8c:47:7c:05:63:04:ac:22:aa:66:c8:65:
         0a:ed:78:6a:dd:71:00:bd:91:94:2a:1f:8c:48:95:d3:dd:e8:
         18:8d:9a:f4:8c:2a:d5:c6:48:a9:2a:b0:22:98:9e:d8:3f:7f:
         53:d4:db:62:e7:70:e2:07:69:11:45:f4:98:5f:67:ae:bf:f9:
         c3:93:39:bc:10:b5:45:b5:7e:34:6c:42:0f:46:67:d4:1f:3c:
         e7:98:b7:bd:1e:03:3a:d9:cc:83:13:ea:ad:1c:e8:ba:f3:8e:
         b8:da:53:6f:3f:40:fd:09:0c:35:02:6a:15:cb:26:b0:e0:77:
         4c:d7:95:60:f8:10:54:fc:83:54:f9:76:a5:65:b7:e9:24:b0:
         ec:62:9c:76:5e:fe:20:86:f5:be:64:77:70:c8:e2:1c:02:bc:
         1f:d8:4e:d1:79:dc:72:5f:42:ee:ae:b8:38:b4:d7:45:93:6c:
         89:23:e4:c5:cb:c5:a9:70:56:da:3b:a9:26:9d:11:58:9d:26:
         10:ae:34:3d:0a:e0:34:7d:0f:d2:29:66:85:73:73:d4:7a:81:
         b7:92:d2:14:5b:e7:42:ea:cb:38:0e:7b:23:86:bd:e0:d2:2c:
         0f:13:74:aa:a6:9b:f4:73:24:18:c7:db:4c:a3:94:d0:c1:e6:
         1f:d9:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:25 2024 by rpki-client on console-fra.rpki-client.org