Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          e+V4S/I7DsxjCSnAv/gQSNmHFZ4Tfxmdkv9D3rzTQRA=
Subject key identifier:   DA:A5:CA:2B:9D:46:AF:7F:4A:02:B5:E4:77:17:44:82:FB:BE:68:FA
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019352073AA1DE65501CC67D0024CA3C11FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          138E
Signing time:             Fri 22 Nov 2024 04:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:25 +0000
Files and hashes:         1: 1uD5a_vyyZcbRRxuzl1LL7kN4CA.roa (hash: fJJmAKl/nplEC1qm7jEgPsOQQ+UaV+t6AL3DtWSK08Q=)
                          2: 2SzZLXMp4L66B6gUGz5qXaXLYBk.roa (hash: rkMyMjGUS9mF09b4jmYKBHEU5R4nfXrCRAHQf1jFQvI=)
                          3: 6TUJPvRMnCwmjgfKL_XLPaU3dAk.roa (hash: IiLOGDUZKNvV+6n0pi5BdOiB2rFJv5rAIK4k1ZCyYw4=)
                          4: L2WDG0M4vZB1RAwUwcOCu0w0TBM.roa (hash: tOJ5h8use5oJSvvQIpWOgcEee6RPkP9tLrp6Oc+hRtA=)
                          5: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: SjdZy401hWUZ2qDT+kPQHCY1uzHSU15cEEcR4eAIB4s=)
                          6: hUTRfaJp_ub_gLlnhdzKIuHUszM.roa (hash: l/zeVlrmf4oapuXFKYAdzdUfRzG2kwrE4nguzAiymz4=)
                          7: hphHIGP1pnd82JYu0dD7iJmPFC8.roa (hash: 32Wj6sUojFm8C4LG0cC1+S8akDkUCP5eSAgSs33IRj0=)
                          8: oLM-KVTmtqr49x97BDujxuksMmw.roa (hash: 6Nd5hDaTrJRTuxetaEhPDLzUMFG+D23dQNzuRVxPGUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:3a:a1:de:65:50:1c:c6:7d:00:24:ca:3c:11:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Nov 22 04:00:25 2024 GMT
            Not After : Nov 23 04:00:25 2024 GMT
        Subject: CN=daa5ca2b9d46af7f4a02b5e477174482fbbe68fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ef:e2:52:67:5d:3b:1c:b7:b8:30:18:2e:56:
                    4b:df:cf:56:0c:af:8c:65:58:18:2b:f3:15:3b:56:
                    a5:92:04:ed:89:21:21:99:25:f5:bf:4f:ba:7b:e2:
                    96:d8:59:1f:9d:6d:24:b8:a1:cc:df:48:f2:ab:eb:
                    d7:b3:bb:32:95:d7:60:ac:2a:68:f1:b6:50:ac:97:
                    be:19:46:0d:37:73:c7:2a:da:7e:72:9a:9c:b9:68:
                    fe:d9:62:21:4c:09:9b:81:74:5c:da:f2:33:e4:39:
                    d1:9a:90:d3:75:9f:33:ea:5b:22:4c:a8:b9:95:ee:
                    62:05:0d:a1:20:78:04:33:ab:e4:de:ac:bc:09:7d:
                    41:a7:6a:7d:ee:18:80:4c:9a:65:2e:93:ec:09:c0:
                    13:fa:8f:f4:d8:38:77:63:5f:51:65:bd:72:8e:6e:
                    c8:89:d4:1f:05:cd:a0:c6:04:6a:79:83:a4:f0:8e:
                    d6:1c:e5:54:51:af:2f:20:09:cd:f7:78:67:c8:94:
                    39:3f:0f:d9:e8:e9:18:cd:3c:a0:aa:93:be:ad:36:
                    47:ff:2a:e0:0d:54:3b:2e:d1:da:12:73:9f:7c:eb:
                    70:36:3a:c7:4d:8f:bc:64:a9:b5:d0:2c:47:89:78:
                    dc:5e:5c:54:2c:5c:f9:e1:4b:1b:83:e3:7e:c6:95:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A5:CA:2B:9D:46:AF:7F:4A:02:B5:E4:77:17:44:82:FB:BE:68:FA
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7b:d9:31:0f:5d:6c:7d:56:09:77:81:cb:11:af:60:c4:83:
         ee:6f:ca:a1:d9:f2:18:33:34:ac:66:db:31:b4:96:64:26:11:
         87:af:4b:81:41:9c:93:dd:57:73:23:a7:44:0e:07:2f:30:a9:
         16:45:f0:62:1c:6b:58:a3:d1:a1:09:b4:89:c5:bb:76:4a:5f:
         6a:90:51:7e:1e:f0:48:68:52:53:64:29:26:c0:14:86:cc:7d:
         53:91:29:ca:39:2b:2b:ac:16:d8:5d:2b:01:02:0d:b0:12:33:
         f8:f3:b2:44:64:ce:ff:79:8d:6e:77:6a:72:fd:e8:53:08:c5:
         87:40:73:5f:e0:19:77:a1:ff:33:99:45:5f:8c:3c:ed:44:3d:
         f1:94:9b:a0:33:63:a0:56:14:1f:86:56:1a:47:46:04:0c:51:
         2b:3e:c7:d8:f0:fe:87:3e:61:9d:f7:d4:63:2d:c0:93:37:9e:
         b2:dc:0d:3b:de:04:60:47:f9:f4:22:29:62:90:e2:c7:13:f9:
         0f:01:b8:49:7e:35:95:0e:f8:cd:5f:68:49:06:f3:dc:2d:6a:
         4a:75:ce:09:ba:a8:0f:08:ff:85:9c:63:10:5c:bb:e1:2e:bc:
         63:38:a8:92:2a:51:27:97:d7:dd:30:b3:06:f6:51:26:f9:fa:
         2c:d3:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:01:17 2024 by rpki-client on console-fra.rpki-client.org