Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File:                     156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier:          LqVvbJjIbvm83gI8r7cmhFdqnOWN46wpq4pRMkLbl1g=
Subject key identifier:   A5:49:42:02:E6:98:E0:7A:91:17:B2:BC:17:F1:75:DB:90:E9:8E:78
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer:       /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial:       0193568A3DEDBFFB5E66561701C3F7502119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number:          0A18
Signing time:             Sat 23 Nov 2024 01:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:00 +0000
Files and hashes:         1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: 9cMs1aAn4qOg4if4aNyqVG4s/yaV0zT8F+35Il5Mn8A=)
                          2: bVakk7QdM82CTCCPvGP22IhiefI.roa (hash: yHeWWlfCsSIdxBKsyi4xNBQFz8oHVh90efpLV6bovuQ=)
                          3: uCnXEloO28XAlBaZpT5eUFwallI.roa (hash: qurigOUHqwvE2zmD/yNAh906DSAye7vbA/hd0Ld1aew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:3d:ed:bf:fb:5e:66:56:17:01:c3:f7:50:21:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
        Validity
            Not Before: Nov 23 01:02:00 2024 GMT
            Not After : Nov 24 01:02:00 2024 GMT
        Subject: CN=a5494202e698e07a9117b2bc17f175db90e98e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:26:3a:74:96:46:9c:ab:6c:2b:9b:d7:30:
                    05:c6:af:6f:f6:f2:f1:9f:b3:1c:23:2f:f4:d8:9c:
                    80:d6:ce:fb:f3:28:02:f7:a2:27:92:25:85:1d:be:
                    73:00:4f:eb:63:59:82:28:e8:9a:ff:d0:60:18:8e:
                    dd:df:6f:25:99:26:2d:2f:06:44:da:b2:1a:66:3e:
                    71:f7:8b:a9:f5:bd:4a:eb:9b:27:ee:4f:69:a4:64:
                    e4:35:0f:af:6b:24:21:15:bb:ce:0f:5e:4c:d2:bc:
                    dc:14:57:41:03:a1:1b:c1:54:d8:01:26:46:4b:ac:
                    5a:b5:b4:86:73:23:c6:7d:7a:33:c0:02:44:c3:79:
                    e2:70:db:6d:7f:8b:e8:04:b5:14:ad:e8:86:49:84:
                    23:e5:86:5e:35:96:9a:67:98:87:30:e8:93:cd:5d:
                    70:5c:5b:f0:d3:6e:d4:76:a4:2e:4f:62:fa:fe:54:
                    41:b9:7b:5b:5a:7f:66:f0:0d:cf:ae:5e:d1:87:73:
                    c2:24:5a:cc:1f:01:43:22:f2:ae:db:c6:d6:dd:41:
                    9e:de:d3:ce:b9:13:6b:d5:e1:8a:75:80:f6:0e:45:
                    31:fc:03:cc:00:92:93:12:5c:5e:32:18:f7:0d:7f:
                    7d:3e:d1:03:fe:76:76:ad:ea:df:15:30:2b:1e:80:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:49:42:02:E6:98:E0:7A:91:17:B2:BC:17:F1:75:DB:90:E9:8E:78
            X509v3 Authority Key Identifier:
                keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:ff:1a:34:3c:3c:b5:a5:a5:65:7d:10:e2:16:bb:5a:62:
         88:f5:be:3b:15:35:b0:02:af:a1:49:a5:fe:f0:84:7c:64:5a:
         61:9f:c4:f9:c2:7b:7d:be:d4:ac:a5:6c:7d:51:fd:3f:3f:8b:
         2c:9b:bb:58:10:e1:5c:00:04:32:f4:06:0d:80:e8:cd:c5:c4:
         a2:22:ed:7c:d8:93:b3:3f:31:9c:97:71:1c:a0:9c:17:4d:3c:
         4f:39:51:df:12:e0:59:82:ae:e7:e0:9c:e2:7c:44:53:00:ec:
         bd:b9:13:51:44:b2:99:ad:2a:0b:b5:2f:40:ed:20:23:b8:f9:
         75:4e:b4:37:8c:14:d5:83:fa:85:f3:54:d7:aa:0f:c6:74:a8:
         06:1d:03:ad:e9:9c:ca:34:43:1e:ae:c5:49:3c:f7:66:6e:5d:
         50:a8:28:f3:c4:00:7f:d6:60:a5:11:d1:97:8b:94:3d:65:a6:
         87:1f:9a:58:ad:b0:19:77:05:2e:0a:64:5d:a1:90:16:b2:8f:
         c7:65:08:dd:e1:3d:44:c1:46:bb:67:5e:eb:06:b4:ca:b6:56:
         54:e8:13:43:20:dd:4b:f0:3b:6a:6a:91:5c:bf:fb:09:01:4e:
         74:18:02:a3:d4:ae:74:b9:0d:43:5b:91:e2:11:5d:61:de:7a:
         e6:c0:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:02:02 2024 by rpki-client on console-ams.rpki-client.org