Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File:                     mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier:          LSKOvFtPrKfFImiVJY4iBIBNHuTxjWWbDaEqxXLwrN4=
Subject key identifier:   6C:9D:AC:D5:65:1E:1E:54:7B:3D:D1:7F:7C:D6:0C:C8:69:EB:18:63
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer:       /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial:       0192B4197FB15A6113D315F058E8EE26F35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number:          92
Signing time:             Tue 22 Oct 2024 12:00:22 +0000
Manifest this update:     Tue 22 Oct 2024 12:00:22 +0000
Manifest next update:     Wed 23 Oct 2024 12:00:22 +0000
Files and hashes:         1: 8-7sE5-EGby_JCv8zT7Ro0CqoGI.roa (hash: Q4IzRr4d1KUT+ZgtKGipn8tUo4gJOZ5fkVf+fYmoyjs=)
                          2: JxqshhcKdZ0yRGCQ5F9n_JcNPFI.roa (hash: Qb/UPpdJBI+4gVCSIa5D48Dk6PtpeSIq4RWXPzyD+/s=)
                          3: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: /OTvK2pj5PFo7O4JfobkNp1RuT6GX/HPR10GK8s9ZsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b4:19:7f:b1:5a:61:13:d3:15:f0:58:e8:ee:26:f3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
        Validity
            Not Before: Oct 22 12:00:22 2024 GMT
            Not After : Oct 23 12:00:22 2024 GMT
        Subject: CN=6c9dacd5651e1e547b3dd17f7cd60cc869eb1863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:b2:11:b2:23:3b:71:d1:dc:8e:b0:10:71:
                    f2:e7:66:cc:e8:95:2a:95:12:9e:02:81:39:8f:3b:
                    17:7d:2c:88:cf:4a:95:ba:9a:4f:95:28:1f:ac:e3:
                    2a:cd:82:35:dc:5c:05:c6:94:36:3a:85:d7:b4:e8:
                    a5:a1:55:0b:b5:f5:45:df:a8:21:bc:72:9a:c9:fa:
                    d4:f3:a2:86:14:3f:80:ab:f1:d8:d4:0c:ce:46:82:
                    22:55:68:17:ac:e1:34:c9:58:ef:4b:14:2a:bf:6c:
                    6b:d5:8b:2b:e0:4d:44:35:6c:c3:3d:97:08:f0:a3:
                    50:7c:ae:3f:76:d0:1f:79:95:fd:3a:02:ad:f4:eb:
                    45:bb:0c:62:37:d0:a3:17:00:7e:df:f0:f3:f7:e3:
                    2f:16:cd:53:88:b1:37:3a:a4:8d:2e:ac:ba:c8:6c:
                    80:ee:4d:32:a6:94:6a:c6:68:26:d4:a1:0f:70:09:
                    86:f8:82:87:e1:38:50:99:37:83:01:04:c8:6c:e5:
                    a5:ab:dd:b2:7e:e6:10:65:09:46:0d:b0:cf:ee:5a:
                    f0:77:33:76:92:c7:2b:71:eb:e3:d8:51:d8:e6:0d:
                    14:37:e2:43:ec:48:14:76:af:10:17:fb:81:d2:c0:
                    d2:70:b2:67:c3:56:10:ca:2b:43:cc:1b:58:e0:df:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9D:AC:D5:65:1E:1E:54:7B:3D:D1:7F:7C:D6:0C:C8:69:EB:18:63
            X509v3 Authority Key Identifier:
                keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e1:15:4d:fd:14:d8:84:1c:60:d2:26:0f:b7:8b:fd:9f:57:
         a4:a9:ed:fb:9a:c5:97:b8:4d:a8:01:fc:7b:fa:a7:13:f8:2b:
         e4:d3:9e:1c:a4:66:f8:df:26:04:0f:44:a5:ce:cb:cc:b3:1a:
         39:3b:ee:c7:11:72:f8:c1:79:3e:c4:cf:38:e0:79:dc:d5:0d:
         83:6d:0d:b2:ce:bc:9f:f2:ec:40:ea:8a:b4:1e:87:5a:b6:75:
         c8:a5:f7:b9:c9:f7:5e:d8:fd:3a:26:79:d9:33:5c:ca:c5:7e:
         43:9d:34:c7:1c:d6:73:17:13:ff:26:99:bc:22:f8:57:8d:0c:
         b9:c8:3f:26:ec:52:59:ac:1c:46:21:d8:8c:c9:4b:94:3e:2f:
         63:63:d4:27:de:31:5a:2f:b2:44:e2:07:7c:4e:0c:5f:0e:43:
         3f:f5:3d:11:60:80:12:14:64:d7:30:5d:2d:64:cb:5e:4a:d1:
         73:02:7e:9f:c5:5e:d2:5f:1c:7e:2a:93:9b:ea:1a:1d:d1:9d:
         a5:2d:1c:c4:4b:68:09:1f:9d:c8:63:f1:6e:00:1c:67:2a:69:
         50:58:7f:f4:78:a8:b7:2e:b9:ac:a3:ae:9b:23:e4:34:c0:42:
         41:8a:a0:52:7c:8c:5c:f2:7f:52:bb:49:2f:df:e4:6d:8a:19:
         d8:87:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:54:13 2024 by rpki-client on console-fra.rpki-client.org