Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File:                     xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier:          1+vP4jUcPKODW2WBJxDW9z+ZVehwJZD0irItqeh19Lc=
Subject key identifier:   83:F7:67:27:2D:44:97:58:14:B0:DA:AA:F1:1A:F4:FD:82:DC:AE:EE
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer:       /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial:       0193587961B666FC5816DA272DFDE8DF79DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:02:50 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:50 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:50 +0000
Files and hashes:         1: 1-Mwqi7LkA3VtZaUEM_DqPcOonw4.roa (hash: Sy0cGqNkxOSenMDEtIthEJeAHaVoABm/xzXAIG22V3Y=)
                          2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 3qSMzs+cD08kVjplsvfVS9suq2IoAJ352voy8GyVcCQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:61:b6:66:fc:58:16:da:27:2d:fd:e8:df:79:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
        Validity
            Not Before: Nov 23 10:02:50 2024 GMT
            Not After : Nov 24 10:02:50 2024 GMT
        Subject: CN=83f767272d44975814b0daaaf11af4fd82dcaeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:ba:d8:ce:58:86:1e:38:7f:ce:ef:7d:f1:
                    1a:07:3a:8c:c7:75:b9:d6:b7:52:9b:4c:21:a9:0a:
                    e3:14:95:67:4d:a8:1d:17:b6:2c:6a:05:87:54:ca:
                    d3:55:70:1a:60:7a:e8:55:d4:f2:61:a8:33:72:1d:
                    e6:d2:bb:f3:fc:b3:45:75:b9:99:8f:5f:b3:31:48:
                    d9:0c:f1:b7:1e:88:da:c3:f1:a0:83:93:cf:27:d9:
                    52:0f:37:32:e3:c9:a0:a0:75:48:e7:58:d7:0f:58:
                    4b:31:c9:44:07:72:b3:60:0a:18:30:10:ff:23:e8:
                    98:e3:0a:70:08:ed:f3:b0:76:48:57:e6:94:fe:29:
                    f4:ea:00:5e:04:73:c9:8f:f6:f7:47:fb:fc:49:a8:
                    84:7e:fd:85:b1:9b:cd:50:a2:f7:da:83:10:c1:b5:
                    76:00:a3:20:07:c0:3c:e6:55:09:17:2f:b8:4c:ec:
                    b7:b0:c1:94:12:6a:e3:8a:d5:43:04:a6:a5:c2:fe:
                    4d:b8:93:86:cd:b0:3f:84:36:8a:bf:87:95:80:df:
                    7d:61:96:d8:6f:e0:e9:ff:89:34:03:47:af:22:0a:
                    b2:a9:90:2d:48:31:9a:0f:06:19:1b:96:44:7f:96:
                    fe:6e:27:ca:99:e8:7a:24:31:36:cf:c1:e5:ee:ac:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F7:67:27:2D:44:97:58:14:B0:DA:AA:F1:1A:F4:FD:82:DC:AE:EE
            X509v3 Authority Key Identifier:
                keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3c:eb:52:14:1a:8b:0f:1b:2c:f9:1c:d6:38:b0:37:57:e2:
         91:3e:da:10:5f:e7:6a:5c:ce:70:24:0a:fe:29:05:4c:f6:af:
         46:9d:2f:d2:a2:85:c8:55:bc:47:e4:7a:da:e5:ca:b9:2d:d2:
         50:a4:93:92:b6:23:98:01:f2:99:a6:29:12:ab:80:50:50:b7:
         05:6a:9b:a3:84:c4:e7:e1:02:f4:b4:f8:c7:8a:ab:9d:f3:41:
         5d:c0:dd:0e:ba:2f:d2:46:2b:9b:79:3a:aa:61:70:04:67:53:
         0e:1e:0d:c1:5d:16:f2:bf:1b:89:d5:e7:28:4b:18:31:5a:e5:
         2e:0c:67:02:77:eb:0c:aa:98:9b:49:db:df:d6:d0:74:60:28:
         99:57:ec:d2:2e:a1:4e:e2:f5:6d:84:73:6d:68:c7:20:3a:13:
         ff:77:76:3a:e8:3b:fc:c6:ed:05:1f:72:83:34:d4:2c:82:18:
         d1:40:c8:fe:5f:27:ac:fb:b1:c8:06:d0:7e:e5:f6:c9:b6:3c:
         32:07:97:00:c1:65:02:d7:d8:78:26:8b:1a:19:4c:23:67:a2:
         62:22:d9:6b:99:2a:30:e3:79:38:80:8c:9a:c3:5b:c4:90:03:
         ed:14:51:d5:ac:00:b1:a5:34:ad:f4:ab:30:72:cf:db:ee:10:
         ee:26:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:06:04 2024 by rpki-client on console-fra.rpki-client.org