Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File:                     z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier:          i++JgsQkThAk53ZOVgqg3l5noET1dIyaXqdrWKz82vQ=
Subject key identifier:   EF:F0:DB:FE:E0:F0:FD:16:D6:77:6D:E9:19:EC:7E:8D:90:AA:D4:02
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer:       /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial:       01935878971645FAA3D72330964438ECFAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:01:58 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:58 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:58 +0000
Files and hashes:         1: qzH-sjpmDV9LI0VA8YcudbZ1AcU.roa (hash: w54qRyOxtrW9+Peh6Iam5imgpt8Qo/SpMbv7ZiVTjTI=)
                          2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: 2AuUA6G6JYX4HrZLL+RGHdGCxDw/Tib/8kr47eOtzUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:97:16:45:fa:a3:d7:23:30:96:44:38:ec:fa:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
        Validity
            Not Before: Nov 23 10:01:58 2024 GMT
            Not After : Nov 24 10:01:58 2024 GMT
        Subject: CN=eff0dbfee0f0fd16d6776de919ec7e8d90aad402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:f8:be:5d:ac:4d:d0:47:4a:1c:94:72:20:
                    1b:2f:a7:10:73:23:f8:f9:d2:f0:93:ef:32:d6:5e:
                    9a:23:f1:08:0e:09:01:4c:7d:f2:b0:b2:f0:17:a4:
                    dc:d9:24:bf:e1:e4:66:93:66:f0:40:5a:de:da:3a:
                    0f:b5:d2:6a:8a:12:cc:7c:4f:77:c7:e1:51:eb:2a:
                    7f:6f:87:0c:19:cd:24:f8:ec:5b:9b:a9:fa:6a:1e:
                    a8:fe:a7:f7:82:44:dc:4e:5b:0a:21:8e:5b:1c:cf:
                    f4:13:42:ac:30:30:bb:22:67:30:a5:52:bc:61:88:
                    21:09:1b:1d:e8:e1:0e:95:94:02:bc:60:db:83:fa:
                    fd:ae:69:c5:d4:be:f5:03:26:11:d8:93:78:9b:97:
                    bc:2e:a0:71:84:47:d6:34:10:de:43:d2:f2:c8:48:
                    63:e6:f3:fc:2a:04:97:2e:98:45:78:7c:77:31:6d:
                    3f:41:49:f0:54:26:62:1c:8a:cb:01:e7:62:5c:2e:
                    52:fc:cc:f6:e0:38:b1:74:e9:f7:0b:51:e5:38:3e:
                    c9:a8:9a:7c:20:cc:30:22:0b:07:de:7c:db:3b:62:
                    d4:1e:fc:52:ea:6f:a4:16:af:88:e9:ee:7c:ae:cb:
                    1a:e8:39:38:84:da:ab:06:4f:35:c2:97:1b:23:16:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:DB:FE:E0:F0:FD:16:D6:77:6D:E9:19:EC:7E:8D:90:AA:D4:02
            X509v3 Authority Key Identifier:
                keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:02:71:03:ad:be:e2:e9:13:9b:e5:60:f7:4e:1e:6e:ed:21:
         42:e4:6b:b6:1c:01:d0:69:a5:8d:76:f8:1b:eb:1c:d6:d4:81:
         b6:11:b2:d4:75:3b:1e:1d:7e:67:92:ad:96:00:68:47:bf:81:
         73:4a:37:d2:ee:24:32:34:a6:01:e1:db:b2:2b:13:91:4f:86:
         4a:55:26:cc:52:36:82:fc:ac:ea:19:4f:9d:74:c2:1c:a9:c5:
         c8:e0:c9:7d:b9:b6:b6:b6:10:02:e3:0c:96:59:1c:82:c7:ec:
         16:13:cc:d0:53:84:00:73:0e:a6:d7:b2:7b:bc:cc:85:44:68:
         9f:4a:1b:36:d8:99:3d:ab:c6:ce:1c:7d:3b:6c:d3:af:ed:d4:
         9d:28:ac:8f:24:24:4b:66:71:e3:4f:1d:9a:cc:8e:fd:7c:36:
         5c:39:90:af:b2:89:dc:aa:de:f3:71:f4:8c:4b:9b:64:d2:37:
         d2:59:f0:80:bd:e7:67:48:4a:bf:44:31:c1:83:80:67:58:97:
         4f:9f:9b:74:47:63:69:40:f0:21:26:59:35:c2:ed:f7:c2:b1:
         0b:7a:c2:be:78:cf:43:4e:01:5d:25:28:13:69:a4:49:39:88:
         fb:19:38:50:6d:b7:26:24:b4:54:15:60:e9:59:b1:7e:ae:d0:
         f1:d7:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:56 2024 by rpki-client on console-fra.rpki-client.org