Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File:                     iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier:          bUuSDiXGDJGXgN6Y+KrNixIvX0ZyJKkfhQlbn/mNsB8=
Subject key identifier:   C4:84:BE:69:CB:B6:8E:9F:AE:A6:46:5F:7B:28:70:11:F7:11:44:D7
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer:       /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial:       01936A46B3366F074C2C9673A3223B04A564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 21:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:38 +0000
Files and hashes:         1: hApdaMK1vbsnIfDlL7P0Z5So3xM.roa (hash: MpxYH2itfVj+tT6LQe4Y8T05heBa3H/eLwtlxngJrVo=)
                          2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: Z62TSTgxk5WUA0Rnd7J5hY5kX+ni5ebqbXubCRnZJtA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b3:36:6f:07:4c:2c:96:73:a3:22:3b:04:a5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
        Validity
            Not Before: Nov 26 21:00:38 2024 GMT
            Not After : Nov 27 21:00:38 2024 GMT
        Subject: CN=c484be69cbb68e9faea6465f7b287011f71144d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:c9:9a:10:55:b3:cb:04:8f:77:14:07:3a:
                    63:88:d4:d2:e5:65:69:f2:91:0e:e1:cc:3d:6b:d3:
                    63:c9:4c:ab:d1:14:42:46:14:63:be:c6:58:8d:58:
                    b3:c3:ad:7e:98:65:bd:13:b1:f7:ce:65:25:cf:11:
                    da:06:a1:a4:d1:9c:33:7b:20:98:63:73:56:0d:e1:
                    c6:bf:17:e3:f2:33:40:63:38:10:3c:fb:b8:a7:52:
                    d2:6c:57:80:e9:02:80:d4:6b:1a:10:3b:f8:f9:7e:
                    f7:f1:06:b0:47:ba:00:74:4a:8a:48:eb:b4:ae:f2:
                    c3:f0:a0:ee:b9:7e:7d:22:51:de:64:be:2b:cd:2e:
                    03:09:88:29:a7:3a:69:07:a2:61:33:82:4f:dc:a1:
                    dd:16:20:4e:75:d5:dd:7a:57:9b:f2:d5:a6:43:40:
                    6e:82:14:e5:a8:c6:5a:2b:8c:d9:05:f6:7a:f1:a0:
                    88:c8:be:5d:e6:cc:f5:82:af:56:76:7c:e2:7f:fa:
                    18:44:20:7d:8e:4a:a2:d1:42:6d:38:9a:fb:93:77:
                    5c:63:62:f0:d5:74:1c:05:c3:89:84:64:b9:64:c3:
                    1f:bf:f8:b1:8f:fc:b1:ba:d8:88:c6:f9:f8:e7:cd:
                    92:9c:52:21:80:50:92:93:7d:bc:5c:c4:be:5e:8b:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:84:BE:69:CB:B6:8E:9F:AE:A6:46:5F:7B:28:70:11:F7:11:44:D7
            X509v3 Authority Key Identifier:
                keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f1:f3:7f:6f:2d:77:d2:38:12:fd:90:0e:78:5d:ea:53:3e:
         bd:63:61:01:26:90:43:5c:65:72:20:ba:59:f3:72:53:48:5c:
         1b:0b:7e:da:8a:cb:d2:68:5c:17:46:db:a3:ea:28:d9:e1:c6:
         d7:24:5f:ab:14:b7:0b:7d:98:af:48:ec:a6:17:cc:e9:67:0a:
         8c:b7:d2:d4:c0:0b:48:83:ba:54:7f:00:29:94:a2:b9:43:92:
         9b:51:fd:8c:59:cf:db:08:43:b2:53:17:43:6b:e6:2d:a5:a4:
         75:ec:bc:7f:cb:08:70:3c:0e:f3:13:f2:ee:ac:55:ee:b8:7e:
         e8:89:18:5b:42:0e:ed:8d:58:d9:45:86:7c:ed:f8:98:9d:eb:
         19:ed:fc:e0:1f:ee:60:a7:41:49:73:76:a3:21:bf:00:d8:8a:
         89:0d:31:8d:de:df:6d:c4:9d:65:89:75:ec:db:42:67:19:30:
         a1:82:49:7b:10:3f:f5:c7:f5:c1:48:d0:19:b8:ae:e7:d9:7a:
         be:7c:35:8a:25:e8:1c:be:64:2f:89:fd:71:73:ad:9e:1b:59:
         75:a8:53:42:f3:5e:22:35:e9:26:b4:7d:cb:bf:5d:9a:3a:7c:
         56:9b:bf:54:87:ec:2c:3f:4a:18:df:ea:c0:7a:3a:bd:c9:d0:
         58:a2:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:51 2024 by rpki-client on console-ams.rpki-client.org