Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File:                     X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier:          W6l46nAnZhLu5HpLDCNMap3XHdaz4qBKpLLb+WrGgbk=
Subject key identifier:   6E:E3:43:26:67:5A:BD:E7:83:61:24:90:DF:85:4E:F0:AA:00:CD:28
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer:       /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial:       019358ADF816EB0CD4AAC3663933111BEF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number:          1378
Signing time:             Sat 23 Nov 2024 11:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:16 +0000
Files and hashes:         1: FsAiJYb_c03rW4-BDQS3hXUk63o.roa (hash: gPuybp/Y5C46bN8/1x8+18Zg3+dmnWbWBgGhSjMQBk4=)
                          2: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: u2iePZAvqfzUs8yOOs+wGN+B2ojNZVZKk1E6SVUY9Ec=)
                          3: ZLz6__QlKMdncMa4ndy2-LUwBXs.roa (hash: TZiHYU04uhqhSrwmyCPnJUs0wDmhAO8yZJxyzVu9yiM=)
                          4: fL7GRVfIeN3aWxjOa5jSMPtqgpE.roa (hash: Vd+InEHcsIFunMxDvAGLFtuBT2Y+3ALxz2mFplphBKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ad:f8:16:eb:0c:d4:aa:c3:66:39:33:11:1b:ef:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
        Validity
            Not Before: Nov 23 11:00:16 2024 GMT
            Not After : Nov 24 11:00:16 2024 GMT
        Subject: CN=6ee34326675abde783612490df854ef0aa00cd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:7c:a1:f7:3a:54:e2:49:f8:86:eb:99:e2:
                    b4:7d:81:b3:2d:bd:3c:41:29:57:bb:9f:58:83:1c:
                    b7:8a:5b:a3:3a:ca:f3:43:0b:c9:b5:16:b9:f8:17:
                    4e:b9:81:6f:69:b2:34:04:2e:1c:85:f4:ba:d5:44:
                    f6:5b:a3:8a:51:15:c7:59:3b:5e:4d:67:8b:47:17:
                    e1:d6:af:f4:4b:ad:cc:5d:dd:91:07:b1:d3:74:4d:
                    07:9f:50:bb:79:02:ed:69:d2:c3:0f:58:f7:bc:9d:
                    5c:16:3a:93:a9:05:50:e4:e2:76:ba:02:5b:15:0e:
                    b7:b9:d8:94:78:b9:94:c7:ed:84:06:ae:97:d5:63:
                    f8:3e:69:ab:38:63:be:13:15:42:9c:48:7b:46:ec:
                    6f:16:12:b9:1d:ec:39:c0:79:9e:a1:84:68:86:7f:
                    15:c3:56:6d:3d:54:a5:cb:ef:25:bb:99:f0:87:de:
                    97:52:f4:bc:cf:d2:82:ae:11:c9:b6:9c:c1:48:f2:
                    f0:1a:82:e0:cb:2c:30:ed:b6:25:4e:0d:44:6b:3d:
                    f0:a0:31:10:01:78:bd:6d:f1:dd:07:3e:a9:e4:e9:
                    f4:f4:5d:d1:0c:0b:0a:fd:06:6c:57:dd:ba:26:5d:
                    93:3a:dc:02:ef:ed:e2:ee:da:8c:16:70:1f:58:91:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:43:26:67:5A:BD:E7:83:61:24:90:DF:85:4E:F0:AA:00:CD:28
            X509v3 Authority Key Identifier:
                keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:29:be:24:f5:99:3b:2f:22:d9:9f:ae:6f:bc:22:a1:85:eb:
         98:fb:c3:bb:3a:db:1d:51:c4:e0:05:73:0c:dd:76:4d:0b:9f:
         11:81:d1:97:dc:32:43:c1:24:0a:9e:c5:c2:37:9f:23:0a:dc:
         37:a9:15:6c:fd:df:8b:f8:cf:7d:4e:23:ae:5b:90:13:06:72:
         08:9b:e1:31:7d:8f:e8:d6:e4:25:05:30:7b:6a:9a:f6:6f:8d:
         a6:a0:39:b2:a8:f3:c5:05:2d:af:af:57:c5:db:43:0a:6c:fe:
         e4:08:8f:0d:54:72:35:cc:81:09:f8:f0:8f:de:ed:47:4c:66:
         e0:c5:82:56:45:d2:a7:10:9f:ef:64:97:a7:e6:cf:c8:21:45:
         18:5c:16:cd:9b:65:3c:ac:c2:33:ec:89:35:47:82:8d:33:1f:
         a7:6f:ff:cf:3b:2f:c1:22:ed:af:a3:94:92:c2:77:62:1a:c3:
         bb:60:dc:90:ba:20:84:02:8c:23:6c:ee:27:af:2f:ec:57:33:
         6a:1f:cd:c5:a2:88:04:51:d1:62:f4:39:2b:62:05:6b:ad:1d:
         41:86:20:11:ad:74:b3:b6:84:8f:71:a3:48:fc:56:a9:f0:74:
         ae:10:64:6b:41:5c:4d:ab:31:73:a1:b8:5e:3c:dd:8e:f3:ac:
         31:ff:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:17:16 2024 by rpki-client on console-fra.rpki-client.org