Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File:                     E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier:          0aYgmqqpIXGo2NT8xw64KClADOG8uCewO4tZ6Clg5mc=
Subject key identifier:   99:94:32:B3:2C:45:4B:DF:7D:31:D5:6F:8A:5D:50:68:5D:F1:CE:9F
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer:       /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial:       019235B7AE4BBA66C934FC668460CF5C8368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number:          12DA
Signing time:             Fri 27 Sep 2024 23:01:22 +0000
Manifest this update:     Fri 27 Sep 2024 23:01:22 +0000
Manifest next update:     Sat 28 Sep 2024 23:01:22 +0000
Files and hashes:         1: 2EfUHNFEjQhvRSYgWVytFsXwDsY.roa (hash: ZnpyAPsJTSO8V6FOmUnQocdNlp1czxvXoCl6R+jvLck=)
                          2: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: pcaBefPAURt0YEXpXJ/SThyYzGnMKI5xG5lHqfDJM/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:b7:ae:4b:ba:66:c9:34:fc:66:84:60:cf:5c:83:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
        Validity
            Not Before: Sep 27 23:01:22 2024 GMT
            Not After : Sep 28 23:01:22 2024 GMT
        Subject: CN=999432b32c454bdf7d31d56f8a5d50685df1ce9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:cd:58:01:8b:c8:82:b8:14:41:d6:30:1f:
                    3d:b3:39:38:d1:53:2d:5e:f1:53:5c:3c:e9:c4:9d:
                    3a:df:72:72:2f:4d:4a:d0:c2:d6:71:26:68:ba:81:
                    76:70:83:51:b1:5c:85:9a:b4:b7:b1:0c:66:3b:27:
                    e8:b3:9f:e8:40:86:0d:f3:c6:e0:52:da:b8:72:34:
                    78:ac:0a:b0:50:d8:17:8e:77:c2:08:17:91:c1:36:
                    d7:3e:08:43:6b:f5:79:40:45:f7:22:e8:59:dc:1a:
                    25:af:23:f4:3e:63:0e:67:e9:63:73:da:be:8f:78:
                    e8:f3:93:f2:b0:72:e8:a2:21:22:b9:ea:c2:ce:1a:
                    0c:04:6f:27:02:35:b6:7e:c0:3b:22:47:a1:7e:5c:
                    11:83:40:c1:f4:b1:86:42:bc:60:fe:33:7b:fb:6f:
                    64:56:db:60:6d:c8:ca:00:3b:a4:26:ed:52:98:f9:
                    27:44:5b:44:e3:46:4a:8c:ea:ed:94:ce:ef:bb:1f:
                    9a:0c:c9:e1:25:3f:7b:b9:2d:46:01:72:fb:8d:82:
                    ab:06:d5:c7:91:1b:7d:2c:7e:c0:51:6e:81:04:34:
                    21:05:19:d3:44:5d:28:25:22:6b:ff:27:fb:39:bf:
                    84:53:68:ef:4e:35:3b:85:f2:34:b7:c6:66:f5:00:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:94:32:B3:2C:45:4B:DF:7D:31:D5:6F:8A:5D:50:68:5D:F1:CE:9F
            X509v3 Authority Key Identifier:
                keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:c6:e5:41:53:b6:a8:cf:ef:eb:a7:2b:3e:b7:89:c1:ef:
         ff:50:92:88:a6:bd:c7:40:88:38:16:0f:3c:78:00:c7:85:c2:
         3e:57:b3:a8:2b:54:67:9e:08:c7:8e:e7:06:d3:75:a4:4c:f6:
         00:82:c9:ee:db:62:8d:89:58:74:ba:06:fe:f0:e2:af:ff:cf:
         1a:91:61:57:64:e2:bc:b5:72:70:9d:32:af:5c:fe:21:9f:75:
         e5:8d:b7:54:2b:40:fb:18:56:b2:2e:5d:ed:60:e2:fa:2f:7f:
         5a:6f:55:ac:42:05:09:1e:d4:a4:93:de:a6:16:a1:32:93:9f:
         bb:0b:17:17:43:27:5a:ce:3f:8a:16:d8:52:69:54:4b:94:85:
         2c:66:49:7e:c7:60:a4:33:a5:5c:85:e5:64:d4:31:5b:4f:38:
         9c:9a:ee:d9:ed:30:20:4f:6d:43:0f:45:b0:f8:a9:8f:9e:a0:
         50:a2:8c:21:ae:b1:1c:0b:8a:d7:97:bc:13:a0:75:64:15:2d:
         53:2e:08:e5:9d:0f:dd:b4:28:24:55:24:ad:fd:ee:98:21:97:
         11:85:66:bb:d4:23:63:01:b3:32:bc:a2:32:33:9c:c4:16:6f:
         98:c6:62:72:d3:d9:20:c5:29:6c:2e:ce:bd:ff:b7:e7:74:99:
         d3:22:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:08:54 2024 by rpki-client on console-fra.rpki-client.org